RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer (download)

Subject key identifier:   DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
CA Repository:            repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 43.252.144.0/23
    2: IP: 103.14.110.0/23
    3: IP: 103.233.88.0/23
    4: IP: 120.89.94.0/23
    5: IP: 192.140.224.0/23
    6: IP: 2001:df0:222::/48

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:87:b6:7a:e4:df:b1:0e:83:85:c9:55:6a:ba:10:ab:ca:84:c9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 31 09:17:39 2020 GMT
            Not After : Oct 31 09:22:39 2021 GMT
        Subject: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:c6:c7:bc:a4:f8:11:b3:a5:e5:30:3c:5d:
                    d3:b7:24:f8:4b:a7:7f:67:e2:cd:c3:43:a5:28:46:
                    f8:2b:9e:ec:12:f3:92:60:ee:77:8e:6e:23:0e:ec:
                    7b:72:a4:0a:1f:d4:47:af:e4:d0:8b:91:dc:38:3e:
                    67:4f:ec:c5:fd:ec:a0:06:6a:aa:0a:c0:65:cc:5f:
                    d5:4f:23:c1:68:ed:5f:db:04:c8:2c:5a:35:19:ce:
                    d4:7c:b0:ea:d5:f1:e3:49:40:d1:1d:b4:b0:bd:0c:
                    81:43:5f:bf:98:37:0e:8f:b2:c2:66:d5:d0:31:1a:
                    c5:0f:e1:d5:5d:ef:2d:17:ca:1a:77:6e:eb:53:49:
                    6e:6f:92:a3:10:9f:b0:63:43:8b:88:a8:ee:8d:28:
                    dd:aa:a0:8a:a9:b3:f6:34:65:d3:c3:00:cc:71:c0:
                    2b:4f:b8:ba:a5:ce:6d:c0:a0:9e:44:1c:3c:29:b2:
                    4b:1f:05:d3:f9:fe:fa:d8:0c:b9:0c:2e:4b:65:d1:
                    89:57:5e:52:5e:f7:3c:fb:43:9e:1d:9c:de:61:b5:
                    66:82:56:cd:f9:e7:ff:54:d9:13:bd:cd:12:34:09:
                    6b:46:41:2b:30:e4:c0:e2:94:6f:a1:4b:68:03:19:
                    28:dd:a9:c0:ce:dc:42:f7:89:2b:95:c9:eb:50:f4:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.144.0/23
                  103.14.110.0/23
                  103.233.88.0/23
                  120.89.94.0/23
                  192.140.224.0/23
                IPv6:
                  2001:df0:222::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:43:0a:6d:22:79:3a:16:1a:bd:64:1c:aa:c3:f9:a1:e7:
         61:34:41:e1:28:3e:eb:00:aa:9e:a6:93:2d:34:c6:62:ff:8a:
         b7:96:b8:38:d8:1e:66:8d:3b:a9:83:1c:b9:19:ad:58:4b:ea:
         dc:37:33:fb:60:24:4b:9b:0c:a4:cd:56:7c:b0:7a:ef:4c:90:
         6e:91:df:bf:18:eb:6e:44:c4:df:fc:30:0a:bc:a9:8a:76:36:
         6d:cd:fd:21:84:76:21:01:2a:b6:22:f8:29:ca:d8:44:cb:a7:
         da:e6:c7:f8:4a:93:c8:01:bf:0d:0d:9f:c8:07:df:42:ef:08:
         a6:77:07:1e:59:af:26:21:17:5d:8d:9d:74:31:50:70:61:0f:
         37:f6:5c:eb:3c:f9:bb:06:0b:71:1a:4a:c3:27:15:47:cf:23:
         dd:c5:25:70:13:90:c3:a2:68:10:d4:f8:26:d6:db:d1:94:6d:
         e8:67:d4:00:30:14:99:06:d5:71:8c:78:68:56:7e:e9:5a:aa:
         18:91:e3:17:8f:85:d2:29:a4:c0:9b:80:ca:c2:44:40:16:97:
         78:76:f2:9f:c0:2f:15:7f:94:4d:13:0b:35:3e:0f:8b:ef:d6:
         27:8f:d3:ea:de:db:2e:1b:d9:9e:1b:29:9c:2c:c3:8a:a9:3b:
         16:8c:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Sep 21 16:09:51 2021 by LibreSSL & rpki-client.