RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer (download)

Subject key identifier:   29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
CA Repository:            repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 43.225.184.0/22
    2: IP: 103.206.252.0/22
    3: IP: 103.246.0.0/22
    4: IP: 106.0.48.0/22
    5: IP: 202.43.228.0/22
    6: IP: 202.154.184.0/21
    7: IP: 223.130.20.0/22

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ba:f8:88:f8:8f:f8:23:e7:7f:bd:c7:57:ec:66:96:a6:e8:5d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 25 20:51:22 2021 GMT
            Not After : Sep 25 20:56:22 2022 GMT
        Subject: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:e8:d8:c8:9b:e6:56:cf:c4:2c:3b:e7:3d:
                    59:e4:a2:9c:f5:97:fd:d3:24:a8:dd:45:c0:cd:f0:
                    a3:b7:f2:9e:d1:4b:44:55:79:95:73:59:1c:1d:dd:
                    dc:24:cb:f4:82:50:20:57:3b:a8:ce:18:2a:c9:e5:
                    52:ae:21:00:39:6b:30:44:87:3e:0c:c8:d9:0b:81:
                    a3:d9:12:68:a3:bc:22:f0:6d:6f:5e:ce:68:12:4e:
                    72:d6:78:59:22:66:81:a1:cc:ba:02:e4:8d:47:5b:
                    89:8d:b2:f5:6d:6c:3f:03:c7:1d:76:7f:2a:8a:69:
                    f2:87:7d:c0:86:d1:14:ad:68:d7:b2:d1:75:be:bd:
                    f7:07:e0:df:60:bc:49:d2:07:ec:c9:f3:c6:cc:68:
                    2a:f2:06:cc:48:75:d6:34:08:8e:f3:51:e0:dd:26:
                    14:1d:c4:08:e2:1f:0d:02:54:89:05:01:50:11:47:
                    a7:41:cf:40:68:17:ef:2c:8b:cb:e8:37:06:1f:33:
                    c9:e6:14:87:1d:02:e3:ee:d3:74:d2:09:3f:58:5e:
                    b7:c9:b5:a9:d4:fe:63:41:05:54:90:80:bb:95:38:
                    5b:2d:0f:94:20:50:d0:0b:27:d6:18:fc:34:a9:a7:
                    76:cd:0e:1d:60:1b:2e:33:04:9c:ee:e7:70:2a:0b:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.184.0/22
                  103.206.252.0/22
                  103.246.0.0/22
                  106.0.48.0/22
                  202.43.228.0/22
                  202.154.184.0/21
                  223.130.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:3c:58:15:4a:e1:39:c8:c9:2a:be:c1:bc:d9:ce:c0:2c:
         42:c8:76:7c:dd:22:aa:e7:48:63:80:4a:8c:c4:9b:fb:1b:ac:
         e7:f3:e0:d7:b1:e7:83:0c:10:bd:46:51:20:56:fd:bd:8b:0e:
         d7:2c:51:97:10:5c:fe:53:ef:f6:6d:16:91:30:51:f0:cf:d1:
         fe:ce:f9:31:01:6b:d9:d4:b4:a9:88:b0:fc:95:e7:95:60:eb:
         65:ac:e5:73:61:9e:35:2c:c8:11:c6:87:56:2c:28:98:f0:e8:
         30:6a:18:af:53:fa:30:5f:51:ce:08:e6:da:96:98:f0:2a:25:
         91:3d:7e:2a:5d:dd:f4:67:ec:62:68:09:14:e8:0a:55:fb:a4:
         2b:34:33:91:f1:f2:0e:c9:64:92:00:d5:02:d0:1f:99:99:77:
         fa:ec:2f:a4:e0:0e:a3:40:67:7d:60:dc:c5:4e:81:04:f0:3a:
         e8:63:ed:d6:e2:8b:db:f5:3c:7b:cf:2d:44:f4:42:aa:d6:ad:
         3d:bf:72:f1:bd:9b:d2:3b:87:4b:0f:be:be:d9:d8:dd:cc:d9:
         f2:a7:ce:c7:34:8a:83:a6:5f:74:cd:e2:49:d0:f2:51:a0:48:
         97:ad:d1:12:d8:21:53:51:52:af:ee:e9:01:2d:a8:6f:f6:27:
         ae:2c:1f:8d
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIURLr4iPiP+CPnf73HV+xmlqboXT4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkyNTIwNTEyMloX
DTIyMDkyNTIwNTYyMlowMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3
RTYzMEMzRkU1NjgyNzJEMkYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKgD6NjIm+ZWz8QsO+c9WeSinPWX/dMkqN1FwM3wo7fyntFLRFV5lXNZHB3d
3CTL9IJQIFc7qM4YKsnlUq4hADlrMESHPgzI2QuBo9kSaKO8IvBtb17OaBJOctZ4
WSJmgaHMugLkjUdbiY2y9W1sPwPHHXZ/Kopp8od9wIbRFK1o17LRdb699wfg32C8
SdIH7MnzxsxoKvIGzEh11jQIjvNR4N0mFB3ECOIfDQJUiQUBUBFHp0HPQGgX7yyL
y+g3Bh8zyeYUhx0C4+7TdNIJP1het8m1qdT+Y0EFVJCAu5U4Wy0PlCBQ0Asn1hj8
NKmnds0OHWAbLjMEnO7ncCoLA2cCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFClc74fNt0saQyh+Yww/5WgnLS8zMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEqBggrBgEFBQcBCwSCARww
ggEYMFQGCCsGAQUFBzAFhkhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8xODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8wgYAGCCsG
AQUFBzAKhnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xODdkNzli
YS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NEQjc0QjFB
NDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAq
AwQCK+G4AwQCZ878AwQCZ/YAAwQCagAwAwQCyivkAwQDypq4AwQC34IUMA0GCSqG
SIb3DQEBCwUAA4IBAQCPqjxYFUrhOcjJKr7BvNnOwCxCyHZ83SKq50hjgEqMxJv7
G6zn8+DXseeDDBC9RlEgVv29iw7XLFGXEFz+U+/2bRaRMFHwz9H+zvkxAWvZ1LSp
iLD8leeVYOtlrOVzYZ41LMgRxodWLCiY8OgwahivU/owX1HOCObalpjwKiWRPX4q
Xd30Z+xiaAkU6ApV+6QrNDOR8fIOyWSSANUC0B+ZmXf67C+k4A6jQGd9YNzFToEE
8DroY+3W4ovb9Tx7zy1E9EKq1q09v3LxvZvSO4dLD76+2djdzNnyp87HNIqDpl90
zeJJ0PJRoEiXrdES2CFTUVKv7ukBLahv9ieuLB+N
-----END CERTIFICATE-----

Generated at Sun Sep 26 13:22:59 2021 by LibreSSL & rpki-client.