RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer (download)

Subject key identifier:   C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
CA Repository:            repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.215.24.0/22
    2: IP: 112.109.16.0/21
    3: IP: 119.82.240.0/21
    4: IP: 123.255.200.0/21
    5: IP: 175.184.224.0/20
    6: IP: 203.89.24.0/21
    7: IP: 2403:ba00::/32

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d4:c7:2b:ea:a3:9b:18:ee:7b:0b:93:54:fb:d6:5c:d8:7c:38:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 20:40:47 2020 GMT
            Not After : Oct 23 20:45:47 2021 GMT
        Subject: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:c7:15:46:3e:be:ee:0b:25:10:89:7e:09:
                    2a:10:dc:a7:cd:c8:46:18:4f:1a:c0:cb:a4:4a:e5:
                    4e:2c:e0:44:a0:08:62:b5:88:2c:64:30:7b:e2:87:
                    9c:51:f1:84:43:c7:30:b1:cf:45:62:b0:e3:28:d1:
                    e4:e2:8e:17:b2:d2:85:ac:97:cf:4b:f0:e4:28:01:
                    7e:ba:75:eb:69:2d:41:76:42:5b:24:2b:96:4f:ce:
                    5b:43:e3:1c:5d:6d:17:ad:33:e3:0b:09:24:9f:56:
                    b6:e5:e9:78:e1:2c:c4:67:08:5e:f3:78:cb:96:9e:
                    7f:d3:5c:17:58:f8:e7:93:9f:a8:fa:8f:83:32:6f:
                    7f:73:18:19:a1:76:0f:cb:70:ec:a1:8a:5f:05:21:
                    a6:82:c7:76:c4:2e:c1:78:f0:d8:71:c4:ac:87:0b:
                    ee:ee:28:5a:a6:f4:6d:1e:e9:0c:97:e3:0f:c6:4b:
                    c0:df:ff:50:b0:f1:f9:e2:98:0c:8d:3e:76:b0:8b:
                    f2:04:30:4d:95:0e:5f:c5:15:95:91:95:c6:ff:d8:
                    8f:dd:25:76:2d:f3:c5:92:60:77:0d:39:3d:f4:e2:
                    0a:f6:b1:d8:6e:a7:8d:ad:54:37:e4:f6:78:40:3a:
                    6d:69:81:88:ed:9b:3a:83:97:cf:06:c9:a6:ff:b0:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.24.0/22
                  112.109.16.0/21
                  119.82.240.0/21
                  123.255.200.0/21
                  175.184.224.0/20
                  203.89.24.0/21
                IPv6:
                  2403:ba00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:32:44:3e:08:c8:72:66:59:83:9e:57:96:c3:f2:0d:a2:e9:
         35:55:fb:2a:51:a9:13:10:57:ad:87:d5:51:c0:52:90:d5:d3:
         b7:3d:4a:e7:23:37:5d:a2:10:a9:12:9b:01:d1:ac:f3:be:71:
         e9:d5:74:7d:b4:fb:e8:cc:22:12:50:5a:b1:e8:de:9c:c2:e0:
         11:26:76:ce:7e:93:1c:23:7c:e9:4c:eb:a3:25:19:c3:d9:f8:
         c3:f4:58:00:e9:e1:2d:df:1e:2f:94:19:20:08:bc:0d:00:74:
         27:8d:00:b4:55:2e:f2:b3:a4:3d:c7:10:eb:01:35:ea:79:35:
         49:7f:0f:5c:c0:a6:30:12:0f:c7:2f:a5:21:87:23:9d:73:ab:
         73:be:30:b8:df:db:16:4a:86:50:9f:66:94:b5:e2:31:dd:7c:
         ec:90:46:5a:a5:70:05:5a:0c:17:18:2f:23:3b:0e:11:cc:d8:
         77:b3:01:68:d1:23:a4:c4:7b:96:9d:10:80:a1:b6:00:65:0c:
         63:a7:81:09:44:7a:a0:75:b9:88:c1:19:9a:2e:b4:f6:3a:22:
         3e:24:61:71:36:aa:2f:9e:37:ec:ec:b5:c2:8d:46:08:07:63:
         f0:1b:6f:ba:54:e2:d1:6e:4f:13:ce:76:fe:f8:09:34:37:68:
         35:dc:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Sep 21 18:54:04 2021 by LibreSSL & rpki-client.