RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer (download)

Subject key identifier:   60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
CA Repository:            repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.120.204.0/22
    2: IP: 2001:df6:1f00::/48

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ce:59:0a:53:03:02:27:0b:69:06:d4:cf:0e:f4:77:66:6c:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:54:44 2020 GMT
            Not After : Oct 23 20:59:44 2021 GMT
        Subject: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:18:30:e3:0a:bc:a6:a3:63:e8:41:64:e0:
                    ef:22:ae:2e:38:99:b7:5b:16:4a:95:e4:c9:5d:59:
                    b9:5e:bb:fd:e8:0f:18:26:08:20:2c:56:ae:6f:e8:
                    65:85:e7:66:eb:c2:71:53:1c:53:d6:7e:e9:b8:5f:
                    99:a1:2a:1c:d5:d5:87:0f:22:98:34:41:5b:c7:bc:
                    fe:97:39:fe:80:f2:a6:5a:d7:27:3d:dc:71:6e:fb:
                    d0:9b:21:56:8e:71:d9:4e:fa:9d:3e:b4:01:8b:95:
                    b3:db:96:28:36:62:0c:00:3b:bd:a9:83:03:20:31:
                    38:e4:ae:78:cf:61:30:13:64:e2:16:f5:42:57:9f:
                    49:65:92:3b:07:a9:af:f9:fd:71:57:20:8a:c5:82:
                    26:11:c4:5e:d3:40:3b:4e:50:39:86:78:77:c5:4b:
                    20:17:6d:2f:f9:6a:1e:5d:50:07:45:b1:3b:eb:d0:
                    9b:ad:ea:36:2e:ec:08:9f:a4:75:69:69:71:0d:8d:
                    af:07:14:de:82:31:70:40:3d:5f:ff:09:5b:4c:e6:
                    6c:fb:cb:12:aa:e1:b2:01:74:07:67:1c:31:f3:e5:
                    74:ac:e2:96:c2:04:00:e1:9c:2f:54:76:b9:58:d1:
                    f8:c2:18:ed:3a:00:5d:35:46:c1:b3:81:3b:58:47:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.204.0/22
                IPv6:
                  2001:df6:1f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:df:8f:fd:51:a9:e7:81:bd:a7:21:86:43:0e:7d:07:03:72:
         cc:6c:7c:67:21:f2:ba:0a:1f:76:96:77:56:d4:1e:f6:fb:d4:
         62:c7:31:19:42:ec:35:1a:69:88:02:35:27:35:59:ca:3e:ff:
         b2:29:5e:29:a4:7d:15:e4:d7:46:66:88:bd:fa:d9:b8:c5:f7:
         1d:6e:9b:a3:b7:e1:2b:f4:f9:6f:20:8a:9a:3f:16:c6:a7:40:
         a1:3c:59:44:34:d3:f1:29:86:78:a5:3c:e4:bd:e8:2c:3a:1f:
         d4:2d:dd:8d:03:d7:7e:ba:26:df:cb:84:85:df:20:25:ea:35:
         10:15:d6:f7:4b:db:74:39:c2:0e:ee:a0:e1:d3:46:b7:00:4f:
         f7:6a:0d:bd:5e:81:20:f4:e9:6f:dd:b4:f5:ac:6e:51:21:82:
         10:1b:79:90:f1:75:5c:f5:30:4c:57:54:fd:94:8e:db:e2:a2:
         72:49:8f:ef:1b:8b:c1:96:02:2f:1a:0f:0f:fb:84:a1:dc:53:
         e1:1d:46:60:e0:fd:3d:90:12:3e:c0:6f:5d:6b:29:d5:fb:b2:
         63:60:8d:1c:9e:77:e5:2e:b1:ef:24:d1:90:4d:aa:0c:12:6f:
         0a:46:94:32:a7:e9:26:31:12:34:cd:a2:07:70:6e:a5:dd:10:
         eb:00:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Sep 21 18:53:59 2021 by LibreSSL & rpki-client.