RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer (download)

Subject key identifier:   33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
CA Repository:            repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.152.7.0/24
    2: IP: 2001:df3:e980::/48

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:ee:80:8f:15:3b:57:96:83:34:a5:d0:04:9a:ea:24:3e:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:55:07 2020 GMT
            Not After : Oct 23 21:00:07 2021 GMT
        Subject: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:eb:b3:af:d9:0d:3a:fb:79:f5:7a:82:0f:
                    1d:e5:c5:75:43:4d:aa:5a:53:23:72:bb:d8:38:1c:
                    5f:9d:cb:e8:48:0f:96:75:9c:b6:52:5f:48:bf:9b:
                    70:6a:93:e7:1b:e4:0d:bc:20:0c:f2:f7:ef:33:ee:
                    2c:51:de:50:97:6b:35:b4:7b:8f:7e:22:ea:09:85:
                    69:c6:81:40:7c:8e:ff:2b:da:be:7b:0d:a4:6e:6b:
                    ed:6c:6f:d5:85:f2:6c:6f:35:eb:70:e4:2b:31:33:
                    8d:2e:d5:20:43:d3:1b:19:cf:31:15:ba:83:3e:a1:
                    fb:1b:fa:90:e3:11:a1:cd:1d:f1:9e:c0:6d:e2:31:
                    1d:65:0e:ff:e6:aa:6f:cb:ec:23:11:85:77:88:e8:
                    d5:92:2d:e7:7d:14:90:26:2b:ae:b7:33:2f:4d:58:
                    a1:53:f6:2b:a1:90:ea:56:11:c7:12:5c:23:72:40:
                    ce:0d:c7:bf:d5:4a:7e:f1:27:c7:a4:e3:f5:ec:78:
                    40:0d:e3:64:61:1e:c8:14:ce:ec:da:02:17:2e:2a:
                    ee:3b:ac:98:2a:99:10:69:49:6a:b5:57:8b:e6:14:
                    44:ce:0b:c2:87:dc:62:a9:9d:41:61:92:69:95:53:
                    64:64:bf:c0:c6:ab:63:cf:7c:7f:89:12:ca:de:37:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....g..0.....0.... .
...
    Signature Algorithm: sha256WithRSAEncryption
         10:b3:59:76:d0:73:d1:5f:56:5b:6c:81:1c:e0:1d:30:03:eb:
         a7:55:3e:f7:54:6f:f3:c1:b3:c7:22:4a:2a:75:eb:81:cf:c8:
         6c:81:65:05:e3:e4:87:6e:8f:2b:d6:17:e7:0e:07:7c:e5:a6:
         38:98:1d:68:39:e8:9a:ce:d3:71:f9:b1:8c:35:75:2e:d2:11:
         13:68:d2:80:c1:18:e7:a3:1a:5d:61:90:5d:f5:c7:70:17:69:
         c3:16:f5:7f:1c:f6:88:f0:a4:4f:26:71:ca:68:10:8e:4c:b7:
         2d:0c:36:93:a2:d0:76:3c:ee:a2:e4:4d:71:18:00:af:c5:7e:
         67:68:f8:10:5a:36:4e:4b:df:f7:29:be:a0:af:fd:2e:b4:5c:
         62:d5:f0:f6:c3:fa:48:53:88:47:15:64:66:6c:c6:e7:e0:0d:
         15:da:b5:43:ed:e0:da:8c:58:29:c9:72:1c:b4:ed:44:ba:aa:
         66:c1:9c:d7:92:b3:9d:50:a2:53:4c:3a:a1:17:b8:7b:b8:d7:
         c1:e9:d5:39:74:81:58:29:01:29:9c:42:06:33:a8:5b:2a:e3:
         4c:b0:da:88:8d:5e:ff:66:25:ef:fd:d1:31:d9:9c:0f:61:a4:
         a1:c2:3c:3b:78:87:91:2b:35:b5:b0:b3:8e:3f:c0:7a:54:a9:
         79:7e:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 02:44:03 2021 by LibreSSL & rpki-client.