RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer (download)

Subject key identifier:   33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft
CA Repository:            repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 43.230.128.0/22
    2: IP: 103.238.200.0/22

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b9:ae:f4:7e:54:2c:59:84:82:f1:e8:66:bd:39:ea:74:64:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 12 01:48:08 2020 GMT
            Not After : Dec 12 01:53:08 2021 GMT
        Subject: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:aa:bc:cd:b5:32:28:63:ef:19:cf:a4:1e:
                    3c:17:97:db:ac:51:1a:35:3e:e8:72:82:01:ab:7d:
                    4c:d0:fe:03:f4:59:16:4d:33:86:54:bb:e9:4a:b0:
                    79:bd:a1:78:81:a5:9b:d9:f6:30:92:f8:f2:10:f1:
                    c6:55:a7:92:c0:32:38:1c:6b:86:ee:cd:ed:c2:7c:
                    50:5f:fa:14:41:6b:5a:bd:b6:98:33:e5:a0:d8:64:
                    04:d0:d9:91:99:83:7b:1b:ef:53:dc:45:90:69:27:
                    a9:81:0b:27:1e:0f:5a:a0:3a:62:dc:01:5e:1f:4d:
                    c0:9e:fc:ab:59:68:7d:80:5a:47:4b:bc:f2:79:ef:
                    b9:5c:9c:7d:e4:45:d6:26:ef:7d:37:57:bb:63:56:
                    02:ad:55:10:c7:4e:b0:36:e9:cf:a5:54:53:a0:22:
                    ed:7b:9b:80:49:94:de:d6:15:28:7b:5e:f7:bb:61:
                    e9:aa:12:18:69:b0:2a:e0:5e:e3:2c:53:3a:c9:f0:
                    37:01:56:a0:99:cc:7d:52:0e:4e:31:e3:58:7e:c7:
                    40:2a:d3:c5:88:b9:78:7e:cd:5f:bc:f6:db:35:81:
                    73:07:26:b7:b0:33:3f:50:2b:ac:92:8f:be:83:00:
                    0e:bb:0e:9d:25:3d:af:b3:f1:68:22:4f:f5:cf:96:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....+.....g..
    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:1f:af:7f:2a:5b:38:02:e4:a8:d6:fe:f9:86:84:e8:6c:
         52:d6:e3:0c:91:80:bb:7a:41:d8:7a:d0:9e:02:39:cf:96:ca:
         9c:6a:ef:f6:0c:d4:a2:67:5b:0b:bc:56:cf:56:f1:b1:a7:33:
         30:ab:cb:7d:32:1b:5a:a5:71:be:f9:61:e0:3e:0a:3f:d8:ef:
         0f:56:63:7e:c7:16:62:bb:2d:0f:55:77:24:d6:a9:20:f6:4a:
         e0:4a:ee:bb:67:a5:8d:e8:41:64:5e:b9:c6:9f:5b:d6:a2:4b:
         cd:c5:98:37:b4:08:54:a9:72:fd:b6:50:5a:ae:20:5b:99:af:
         f1:35:d9:22:b7:b4:44:3e:fe:27:96:55:a2:9a:8a:b5:52:0f:
         f4:73:e8:02:c4:91:bc:5d:be:23:66:22:ba:33:5b:8f:ac:03:
         9f:9b:43:5a:b6:38:be:af:3b:48:83:a5:ef:df:ec:d4:10:5e:
         d9:18:f7:30:fd:37:49:1e:15:8a:35:f6:49:8f:77:04:d9:da:
         47:40:e0:3a:16:b0:fa:bd:ca:7b:5f:3f:c6:1b:6b:35:67:b3:
         24:be:74:0b:3e:9b:3d:d0:45:64:84:de:07:0d:5f:a7:f8:80:
         71:a1:b4:a2:4b:14:1c:f5:30:e3:58:3b:97:31:f1:85:4b:5b:
         1e:2d:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 23 11:44:02 2021 by LibreSSL & rpki-client.