Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
File:                     07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer (raw, json)
Hash identifier:          XE9Dq0SMyPNTeCWt3P3GrYpLnCCucbxKqXFICI3Znzg=
Subject key identifier:   07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       396AC270F45D8D2E3E529275AA58E82F0228A606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 09 Mar 2025 06:33:41 +0000
Certificate not after:    Sun 08 Mar 2026 06:38:41 +0000
Subordinate resources:    IP: 103.160.136.0/24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6a:c2:70:f4:5d:8d:2e:3e:52:92:75:aa:58:e8:2f:02:28:a6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  9 06:33:41 2025 GMT
            Not After : Mar  8 06:38:41 2026 GMT
        Subject: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:b2:2b:ee:05:d0:ff:69:70:ab:a8:08:e4:
                    39:1a:8e:3a:f8:aa:31:9c:bf:8c:41:49:48:b8:95:
                    2f:60:fa:03:ba:76:6f:e8:b1:cf:42:59:d1:39:d4:
                    3e:9d:5b:36:9b:cb:5a:84:4d:f5:91:fb:f1:e8:aa:
                    e7:de:9f:33:37:26:aa:98:8d:3d:75:b6:40:de:a4:
                    49:cc:c7:cc:23:d7:77:95:f4:f1:48:e7:f5:4a:19:
                    95:e4:fa:91:17:df:ae:c8:b5:b9:ce:a1:a5:8f:15:
                    70:d0:a3:b6:81:9d:97:1e:dc:dc:dd:6d:9e:71:a1:
                    38:68:e2:e3:94:ae:07:fe:d7:b1:21:b1:2a:c2:5f:
                    ee:90:ad:13:45:b3:ae:78:a1:fe:a5:54:61:ea:bf:
                    dd:7d:c2:95:d5:38:be:18:eb:32:90:55:c0:8c:4d:
                    d9:1c:1e:0d:30:94:4b:84:a1:36:3b:ed:a9:ec:e1:
                    1a:1e:3d:35:a0:d8:ab:c0:28:4a:12:45:db:4e:3b:
                    8b:8e:98:43:a6:45:a3:08:49:74:fe:5d:b7:1f:4a:
                    51:6b:33:a5:3b:cb:4a:0c:67:f8:f9:19:b1:55:c2:
                    d7:c3:0d:98:cb:5e:a2:7f:2a:ee:1f:49:37:65:32:
                    84:67:38:8a:f9:71:79:5d:bd:08:92:16:83:b6:6e:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:1c:d8:24:87:cd:84:71:ea:99:4c:a7:c1:39:89:c0:a1:
         d5:c2:b8:06:10:7e:d3:89:b4:f2:e2:8b:93:e6:6d:6e:81:fb:
         1b:5c:be:29:2f:13:8b:fc:6d:a8:ea:75:47:60:1e:47:d1:37:
         90:42:88:cb:1b:f0:cb:b0:f6:72:f0:8d:e2:ee:fd:b2:d9:db:
         42:3d:05:aa:68:8c:36:d8:71:96:29:c9:b1:44:63:4b:bf:ce:
         37:8a:24:92:ae:d2:08:f8:67:4c:e3:0b:d9:6e:c8:52:ab:32:
         04:ce:64:d2:b4:b5:1c:4d:8d:08:29:57:b6:72:8e:8b:fe:04:
         63:34:1e:c8:93:a9:56:29:7c:e2:73:2a:f6:82:57:cb:1e:5c:
         c3:5e:a9:dc:52:44:42:80:8e:ce:16:bc:70:d7:9a:04:f8:54:
         98:e1:fc:6d:34:5d:b0:29:1d:23:97:fc:6f:1b:fd:eb:5e:7d:
         b6:af:6a:5e:5c:05:03:a6:77:ab:62:75:2e:34:63:0e:38:63:
         da:c2:90:9b:01:09:10:22:a9:0d:8a:42:9e:59:dd:66:c8:c9:
         56:9d:62:7a:f6:b3:14:f9:28:28:f3:fc:32:cf:d6:fd:f2:2f:
         38:40:cb:df:1e:61:b0:6a:b8:e7:b3:7b:75:37:83:0a:70:c7:
         cf:3a:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net