RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer (download)

Subject key identifier:   AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
CA Repository:            repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 43.240.228.0/22
    2: IP: 103.10.120.0/22
    3: IP: 103.11.28.0/22
    4: IP: 116.68.160.0/22
    5: IP: 116.68.167.0--116.68.169.255
    6: IP: 2404:fd00::/32

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9c:88:89:3c:48:2a:99:ff:40:84:cc:09:6a:56:8e:3d:d1:d8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:48:59 2020 GMT
            Not After : Oct 23 20:53:59 2021 GMT
        Subject: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:9e:15:20:0e:b1:cc:7a:e7:7f:26:c7:a1:
                    12:7d:2a:c0:6c:33:f9:42:00:f9:ea:98:ed:05:07:
                    c5:b2:ea:08:0d:92:ae:f5:df:31:89:29:d1:07:4c:
                    96:7a:dd:23:5b:a0:32:33:9f:68:be:7f:46:a1:65:
                    6f:14:87:50:f0:30:52:57:77:b8:34:fc:ff:8a:05:
                    3e:60:91:e2:9b:c9:4c:34:43:2b:69:47:a0:7a:75:
                    4f:ef:0c:ca:4d:26:2e:f4:9e:86:97:b8:20:a7:b1:
                    53:2f:53:ef:fc:8d:79:3e:d3:e3:96:85:33:62:0c:
                    28:00:83:a4:3e:2b:bc:99:a6:4d:83:b3:c0:7f:b2:
                    4a:8d:bc:7b:f5:8d:bf:3f:49:2a:51:da:3a:f4:52:
                    00:fa:14:78:29:12:46:1c:6c:25:0b:0a:a0:55:5b:
                    dc:b3:63:f8:12:d7:3f:53:f5:df:84:ee:4c:f7:06:
                    61:8a:e4:25:b8:14:68:8c:03:37:fa:06:18:1b:e7:
                    f2:a3:d3:27:36:e4:ae:00:37:b6:eb:ba:83:ea:7e:
                    42:de:38:ce:84:22:dd:63:7d:77:f7:f2:19:b6:1d:
                    1f:f2:8f:9f:80:52:fc:8f:82:26:e0:73:e0:e1:8b:
                    7c:e6:5a:ef:9a:37:3b:ff:94:8e:0b:90:86:89:b9:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0=0,....0&...+.....g
x...g.....tD.0....tD....tD.0
....0....$...
    Signature Algorithm: sha256WithRSAEncryption
         0a:45:45:a3:11:48:24:0e:eb:60:94:1c:49:d8:34:7a:5c:0a:
         5d:21:45:4b:06:dd:6e:c8:55:06:55:54:5b:5c:ed:9e:df:0b:
         5c:70:e5:2d:4f:c1:b5:ff:68:9c:2c:8d:cf:4d:18:83:73:ca:
         db:e7:d2:de:a8:d1:c3:bf:4a:64:87:78:39:03:89:54:e7:77:
         b1:84:3b:d2:82:63:b7:59:a4:a2:36:a2:98:8e:f2:d1:cc:b5:
         97:21:39:7c:f0:ba:36:d5:98:96:59:56:39:8e:93:71:f9:55:
         4d:c3:f5:97:17:a1:98:a0:11:d4:f5:2d:48:11:c3:25:89:88:
         f6:ea:f3:3b:b8:b7:98:5b:4c:17:f5:08:fa:24:73:5c:42:db:
         62:f5:c8:58:07:2c:8a:f3:a2:cc:0d:38:19:98:40:63:85:18:
         63:23:0f:d1:52:a0:a5:a1:d4:fa:a6:cf:f4:8d:30:98:22:47:
         ac:bd:d3:53:56:86:fc:22:1a:ef:50:4a:93:6f:97:d9:48:7d:
         6d:e3:0c:ec:ec:7c:d1:79:e0:48:ac:de:ef:b3:60:52:40:b7:
         04:a4:ed:b7:6a:33:90:af:87:53:5e:92:21:01:d2:36:e2:d7:
         ee:ff:f9:46:53:bf:43:a7:b8:fc:87:20:e3:3e:f2:7c:fa:4d:
         c5:35:63:1c
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgIUBZyIiTxIKpn/QITMCWpWjj3R2E8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIwMTAyMzIwNDg1OVoX
DTIxMTAyMzIwNTM1OVowMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5
REJGNEY1M0RDM0FFNEQ1RkRFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALztnhUgDrHMeud/JsehEn0qwGwz+UIA+eqY7QUHxbLqCA2SrvXfMYkp0QdM
lnrdI1ugMjOfaL5/RqFlbxSHUPAwUld3uDT8/4oFPmCR4pvJTDRDK2lHoHp1T+8M
yk0mLvSehpe4IKexUy9T7/yNeT7T45aFM2IMKACDpD4rvJmmTYOzwH+ySo28e/WN
vz9JKlHaOvRSAPoUeCkSRhxsJQsKoFVb3LNj+BLXP1P134TuTPcGYYrkJbgUaIwD
N/oGGBvn8qPTJzbkrgA3tuu6g+p+Qt44zoQi3WN9d/fyGbYdH/KPn4BS/I+CJuBz
4OGLfOZa75o3O/+UjguQhom5QAsCAwEAAaOCAugwggLkMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFK9LWNSxZTC59pGdv09T3Drk1f3mMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEqBggrBgEFBQcBCwSCARww
ggEYMFQGCCsGAQUFBzAFhkhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by81ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC8wgYAGCCsG
AQUFBzAKhnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81ZDIyN2Ri
ZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIxNjUzMEI5
RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAm
AwQCK/DkAwQCZwp4AwQCZwscAwQCdESgMAwDBAB0RKcDBAF0RKgwDQQCAAIwBwMF
ACQE/QAwDQYJKoZIhvcNAQELBQADggEBAApFRaMRSCQO62CUHEnYNHpcCl0hRUsG
3W7IVQZVVFtc7Z7fC1xw5S1PwbX/aJwsjc9NGINzytvn0t6o0cO/SmSHeDkDiVTn
d7GEO9KCY7dZpKI2opiO8tHMtZchOXzwujbVmJZZVjmOk3H5VU3D9ZcXoZigEdT1
LUgRwyWJiPbq8zu4t5hbTBf1CPokc1xC22L1yFgHLIrzoswNOBmYQGOFGGMjD9FS
oKWh1Pqmz/SNMJgiR6y901NWhvwiGu9QSpNvl9lIfW3jDOzsfNF54Eis3u+zYFJA
twSk7bdqM5Cvh1NekiEB0jbi1+7/+UZTv0OnuPyHIOM+8nz6TcU1Yxw=
-----END CERTIFICATE-----

Generated at Tue Jul 27 23:12:01 2021 by LibreSSL & rpki-client.