RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer (download)

Subject key identifier:   7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft
CA Repository:            repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.150.44.0/23
    2: IP: 2001:df3:5480::/48

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:00:6f:34:52:b4:f7:ac:9e:a4:1b:07:c0:a9:4a:6b:45:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 09:09:04 2020 GMT
            Not After : Nov  5 09:14:04 2021 GMT
        Subject: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:d5:bf:40:29:9b:50:5d:cf:f3:f0:e3:4c:
                    be:48:9e:71:60:6a:d8:eb:95:84:66:e4:13:8d:34:
                    1e:e5:58:74:26:25:c9:58:68:8c:f8:07:93:1d:78:
                    e8:eb:f7:5c:91:4c:eb:f6:43:b7:38:44:a8:e0:87:
                    d6:f5:9a:12:50:aa:1a:58:80:86:8e:f7:da:cc:d1:
                    87:4e:cc:e8:ee:f2:88:40:dd:a5:c5:c5:2b:77:d2:
                    97:4c:60:cb:50:ae:00:ea:b5:b9:44:97:ce:80:aa:
                    f8:99:be:9f:bd:3f:fc:b0:c2:c7:63:8e:0b:86:68:
                    0d:af:f9:01:6b:0c:23:61:11:dc:b0:1c:9c:99:73:
                    33:e4:26:99:f5:65:52:d2:7e:ca:21:f0:ff:24:e1:
                    76:22:ec:1d:ba:60:55:b5:51:e4:d3:37:0c:74:43:
                    1f:23:e8:4f:71:8c:e7:ac:9b:be:f0:97:7b:98:cf:
                    8c:0f:cc:5e:d0:21:23:fa:75:a4:05:c0:70:c6:33:
                    3a:52:44:58:c8:e0:db:7a:04:ac:b6:22:5e:96:45:
                    5d:00:4e:95:f5:88:d2:da:da:26:7f:4a:ef:88:56:
                    19:4f:75:53:b9:b3:9a:48:b1:5a:d2:d0:f9:55:ed:
                    a1:f0:b2:ac:d8:72:27:c9:91:2e:0c:31:53:45:56:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....g.,0.....0.... .
.T.
    Signature Algorithm: sha256WithRSAEncryption
         84:3a:2a:d6:3f:ee:b5:62:97:3f:a0:1d:bf:f8:f7:55:6b:cd:
         e7:fb:5f:6e:a0:e3:8c:fc:56:e3:dc:5d:5f:d4:2e:c1:97:f5:
         62:a1:6c:0b:93:2d:a0:08:56:ff:a3:b7:d1:df:61:d0:8a:8c:
         50:14:f6:38:e9:66:d3:e8:fb:36:9d:6f:a4:74:71:bf:0b:6c:
         4c:3f:d8:82:ec:b6:23:01:51:b3:a8:75:69:19:a0:74:39:56:
         4e:0e:4e:d8:50:39:a8:d2:e9:49:1e:25:97:f6:0d:be:ef:03:
         07:96:8b:12:0f:87:51:0b:47:ba:28:2b:fc:5b:6c:15:d7:ce:
         06:15:02:66:1a:5e:87:31:cf:f5:b0:09:0b:94:a7:94:43:f5:
         65:8b:8b:9b:81:d7:84:58:ef:41:1f:ec:b7:4a:d7:4f:6f:4c:
         67:e5:e5:61:5d:e0:cf:ed:89:72:bf:9b:96:28:2e:b0:c2:20:
         9f:16:d2:9d:3c:ff:1f:7c:c4:c9:23:d3:6a:96:48:c5:f8:13:
         5d:46:03:9c:92:ed:9e:bc:c8:a8:60:da:62:34:64:3c:cf:eb:
         12:ae:83:5b:89:d8:18:54:12:c7:8e:e1:3a:35:f3:43:85:ea:
         dd:d0:f9:76:b2:65:b7:94:8e:e1:15:4c:7e:31:7b:6c:7b:e0:
         d6:e9:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jul 30 02:44:09 2021 by LibreSSL & rpki-client.