RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer (download)

Subject key identifier:   95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
CA Repository:            repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.148.84.0/23
    2: IP: 2001:df2:c780::/48

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:06:30:f0:e3:4e:ab:fd:06:91:01:79:11:fc:52:15:31:7e:c2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:50:12 2020 GMT
            Not After : Oct 23 20:55:12 2021 GMT
        Subject: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:f7:33:59:8f:1e:3b:d5:ea:e0:74:8b:00:
                    b3:3c:12:e3:30:32:2d:47:eb:c8:1c:0d:27:9e:a3:
                    02:ac:e8:e6:e0:70:e4:a0:66:e1:e9:7b:16:ec:e2:
                    43:ab:ec:48:8a:41:99:6c:58:23:2d:81:aa:82:89:
                    81:6f:97:be:59:92:98:a1:33:23:ab:aa:3f:c3:6e:
                    c2:bf:f8:b6:47:0e:ea:d3:15:a5:5c:a6:17:03:07:
                    92:95:91:08:c6:32:70:43:69:fd:ad:57:b8:bd:2c:
                    3c:fb:33:c1:ff:0e:4b:a6:bd:b3:92:d8:50:5b:97:
                    33:6b:d4:2d:25:8b:c2:16:e9:4a:91:55:4a:04:75:
                    48:6c:f3:43:de:4a:60:cf:5a:11:70:a8:1f:d7:ae:
                    dd:db:44:d4:a7:00:71:bf:8a:17:73:1d:d5:95:23:
                    6b:ed:0f:79:32:f4:12:a9:50:36:e2:f9:d7:7a:00:
                    ba:7d:a2:9f:1b:71:c1:09:25:65:5b:46:9d:8c:48:
                    cd:35:87:dc:76:45:49:5a:dd:a1:8a:ae:3f:38:d6:
                    ed:8d:db:50:c9:d1:0a:8a:b6:93:92:e1:69:d2:cd:
                    5c:1a:74:e2:ac:a7:b3:dd:78:d6:7f:01:8f:9f:77:
                    74:a2:a0:e0:16:2e:4f:ad:e1:d3:da:5e:da:f3:31:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....g.T0.....0.... .
...
    Signature Algorithm: sha256WithRSAEncryption
         60:c8:66:40:7e:4c:f3:2b:b4:66:2e:46:ac:24:29:ec:45:15:
         5e:bf:3e:31:16:5f:14:d1:6c:5a:cc:fb:ff:c6:91:55:12:0d:
         6d:97:30:e8:8c:06:dc:67:ac:0e:ee:a1:95:b9:88:f7:cc:77:
         5c:31:8a:de:f2:b0:62:2a:ae:25:4c:63:3d:96:39:5f:0d:ec:
         4c:f5:d8:3a:18:3d:29:0a:6f:c2:56:67:3e:9a:68:4e:6a:61:
         00:a2:8e:31:ec:c7:ce:2b:4e:de:c4:12:74:ba:0e:f3:fe:27:
         c6:86:0b:69:89:51:de:9f:bd:9f:c6:02:eb:79:7b:3d:95:56:
         22:64:6b:84:0e:1e:1a:ad:fc:b3:fc:4f:cd:1e:18:9a:c9:26:
         e5:c5:56:8c:29:1a:f2:54:a2:a4:2b:03:51:1d:0c:18:b2:92:
         58:3e:97:c9:50:1d:7f:16:00:b0:ed:d0:8b:e0:b4:60:92:cf:
         21:be:2c:e9:b4:8c:bc:54:a1:e0:1c:27:2a:ae:7f:03:17:b4:
         16:d9:81:06:8e:3c:01:9c:1a:00:76:18:6e:8e:9c:5a:28:b3:
         be:5e:c8:28:6e:b3:b3:9c:9c:92:19:e4:af:18:34:1f:f5:43:
         3b:02:67:14:46:f9:a6:25:14:e8:3a:35:e7:83:09:f3:cc:a2:
         a8:54:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jun 23 11:44:09 2021 by LibreSSL & rpki-client.