Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
File:                     15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer (raw, json)
Hash identifier:          XX58A6A1j4/91FUisV0hKyOmVHCtkXzwMOQuLWWhd7k=
Subject key identifier:   15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       37F8ECC9DE1879A6A656A1B25DE87EBF70CCF42E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Apr 2025 10:02:23 +0000
Certificate not after:    Wed 15 Apr 2026 10:07:23 +0000
Subordinate resources:    IP: 103.205.56.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f8:ec:c9:de:18:79:a6:a6:56:a1:b2:5d:e8:7e:bf:70:cc:f4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 16 10:02:23 2025 GMT
            Not After : Apr 15 10:07:23 2026 GMT
        Subject: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:fd:4a:63:16:3c:ac:a8:bc:1b:be:31:8d:
                    33:bb:3a:36:7e:60:1f:b4:fa:2e:03:7f:4a:96:db:
                    f9:57:41:0d:63:9d:95:88:fc:67:24:28:35:df:67:
                    47:ce:81:a4:18:30:6e:bd:5a:d3:4f:1d:63:77:7a:
                    b7:d6:66:14:0c:0a:05:04:90:4b:8b:e7:cb:77:8f:
                    59:e6:99:79:47:45:68:0c:20:cd:b7:78:29:f2:90:
                    8e:6b:54:02:33:e4:54:fd:56:5f:c2:ac:49:62:f6:
                    be:43:72:52:b3:65:00:1b:a2:16:78:ee:9b:80:01:
                    19:e3:02:61:8d:8a:c5:99:e7:01:c4:e1:70:d1:a4:
                    6d:76:08:de:19:77:c5:ef:32:60:2a:86:32:c9:0a:
                    67:56:2e:f4:b8:17:20:e7:ec:64:0a:af:37:87:5d:
                    d9:c7:28:c4:f5:ff:e7:10:c7:16:88:85:07:ad:9c:
                    cc:77:88:6c:27:b3:82:ef:b3:63:fb:f2:ef:c5:2a:
                    3d:94:ea:1a:2d:21:1b:24:cd:15:b2:5b:43:26:94:
                    19:88:70:17:85:59:19:31:8d:91:57:a1:0a:69:91:
                    69:8c:0a:74:3f:cb:af:2c:9a:da:b3:39:fd:a9:3e:
                    33:6a:98:4c:15:a4:02:1f:9e:74:19:fe:4f:ac:78:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:09:d9:54:21:dd:64:9d:cb:32:2a:ad:87:fc:4c:a8:be:
         c0:a7:37:e6:05:d5:79:b9:ab:5c:dc:ca:7e:2f:fa:fb:ac:60:
         99:7c:85:79:45:68:6f:c0:ee:e6:78:e3:14:1c:23:ff:fb:86:
         61:d1:b8:cf:22:79:03:6c:0c:d6:b3:8d:c0:67:ad:92:20:43:
         c6:76:26:6f:6e:9e:b5:56:6b:2f:df:ba:d4:d6:db:5f:3b:43:
         5d:c3:89:bd:e2:33:ce:76:a9:40:2f:a7:5d:dc:ca:de:f4:ee:
         6d:24:0c:89:18:2e:f6:66:2c:b4:d4:05:f8:37:8e:73:04:c5:
         71:3e:cd:2d:c6:73:8d:8b:b0:ff:a4:ed:6b:02:03:40:22:34:
         39:55:c6:85:60:63:eb:fa:7e:12:e4:ea:bb:ca:f3:53:35:0f:
         5b:73:64:3e:1b:bb:41:aa:02:20:de:0e:46:03:2d:7b:58:24:
         4d:5b:f1:5f:57:7e:d5:80:2a:52:29:1f:8b:94:a5:e8:2f:dd:
         6b:3a:17:c4:78:b2:55:2b:14:e9:a8:23:0f:62:1a:95:0e:f9:
         bd:45:64:95:2a:86:35:7c:d2:0c:77:67:db:0d:07:e9:eb:51:
         ad:22:c8:be:f2:80:d8:ac:e9:19:41:93:e4:92:cf:15:93:fc:
         44:b1:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net