Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
File:                     1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer (raw, json)
Hash identifier:          ekJTZ2Ws6jusUcE+yYYEKnyswTprRU3cMBNgaHnKL+o=
Subject key identifier:   1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16CC3707710D8A84D37021332AF7FE6F736053D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 14:54:30 +0000
Certificate not after:    Thu 16 Apr 2026 14:59:30 +0000
Subordinate resources:    IP: 103.174.176.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cc:37:07:71:0d:8a:84:d3:70:21:33:2a:f7:fe:6f:73:60:53:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 17 14:54:30 2025 GMT
            Not After : Apr 16 14:59:30 2026 GMT
        Subject: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:86:da:e7:42:99:97:17:96:f6:c0:20:80:
                    27:1c:76:8f:4e:fe:55:b9:0d:8c:f3:e7:2e:04:72:
                    72:78:e1:db:28:5d:13:14:77:ae:5a:38:27:09:fa:
                    22:d7:0b:36:b6:15:74:49:5f:da:6d:bc:88:24:ae:
                    c2:b5:18:b5:2a:2d:4a:dc:cf:42:85:a1:4d:1d:d8:
                    19:ae:01:ea:66:51:83:2e:78:12:5f:f1:00:c7:76:
                    24:76:a1:a0:0c:c5:af:95:08:73:9b:8f:5d:ad:19:
                    2a:44:76:a0:e0:f4:3e:2a:6f:18:01:3c:ca:d8:b3:
                    a7:4f:1a:0f:e7:cd:bd:38:27:6e:77:da:ff:35:53:
                    03:e6:fa:cc:06:1b:c2:c6:77:6b:5f:5e:94:0b:8e:
                    37:9c:8e:e2:56:3b:16:32:5f:eb:c2:4e:a0:63:30:
                    bd:9a:f8:92:c9:97:ed:2e:de:11:83:88:bc:10:e6:
                    29:6e:1a:bc:cd:fb:de:2d:81:31:3c:39:54:76:e3:
                    c8:cc:d2:31:10:a4:7f:e4:04:88:2f:d2:1b:9c:d6:
                    e4:5d:31:f5:e5:aa:f0:ad:58:bd:5c:f9:c1:64:e8:
                    59:1f:c8:fe:b7:19:67:f0:de:80:88:f0:c3:08:aa:
                    e3:c6:02:53:e4:3c:8c:f5:df:4d:2c:4d:2b:0d:8a:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:98:70:b0:e7:75:3b:cf:66:48:3b:61:0f:bf:53:c0:08:
         13:fd:4b:ae:8b:07:df:ed:77:95:e6:9c:2c:54:f1:df:60:44:
         01:ea:b1:4d:58:a4:58:36:57:65:a5:bf:1a:6a:ac:8b:d5:d0:
         65:81:01:e6:27:4c:a1:e3:6d:1e:59:3a:61:94:b4:43:12:4f:
         5e:d9:1d:61:06:20:30:fb:ab:3a:47:aa:41:9e:79:22:55:be:
         a4:de:3b:80:6d:76:df:67:07:2c:06:9f:21:a9:3c:84:0d:d5:
         7f:7a:c2:f8:6c:41:f3:35:a3:d5:fe:ac:a6:81:97:e8:73:8f:
         fe:5f:c2:bf:2e:fe:4a:70:dd:ff:93:6a:61:8c:4f:31:e4:18:
         45:60:aa:93:77:b7:dd:2e:94:ed:e4:59:03:79:43:41:a0:6a:
         7d:b6:f7:8c:95:cc:38:a4:8a:7d:a9:be:91:30:0b:87:bf:ce:
         bd:88:68:63:4f:8a:55:89:1c:32:a1:93:6c:c6:60:99:e9:35:
         20:be:b2:ec:a2:07:8a:d0:bf:d6:f4:ec:09:49:4b:e6:c3:61:
         8c:7b:3c:5a:57:5c:df:14:4e:e6:fb:d8:1f:3e:d9:f7:61:1a:
         84:ff:b8:9c:92:0a:8f:9b:d8:45:2a:9f:9f:80:d5:f9:5e:b6:
         16:bc:25:e9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUFsw3B3ENioTTcCEzKvf+b3NgU9cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNzE0NTQzMFoX
DTI2MDQxNjE0NTkzMFowMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2
QkNFMzY0NEM5QzFDOUI4M0IzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALH1htrnQpmXF5b2wCCAJxx2j07+VbkNjPPnLgRycnjh2yhdExR3rlo4Jwn6
ItcLNrYVdElf2m28iCSuwrUYtSotStzPQoWhTR3YGa4B6mZRgy54El/xAMd2JHah
oAzFr5UIc5uPXa0ZKkR2oOD0PipvGAE8ytizp08aD+fNvTgnbnfa/zVTA+b6zAYb
wsZ3a19elAuON5yO4lY7FjJf68JOoGMwvZr4ksmX7S7eEYOIvBDmKW4avM373i2B
MTw5VHbjyMzSMRCkf+QEiC/SG5zW5F0x9eWq8K1YvVz5wWToWR/I/rcZZ/DegIjw
wwiq48YCU+Q8jPXfTSxNKw2KRkcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB/2Ut5UABUFLqBrzjZEycHJuDsyMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9mYmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiZTE1ZTZm
LTA2ODktNDcxMy1iMGZjLTk0MzA2MmFjNTkyZS8wLzFGRjY1MkRFNTQwMDE1MDUy
RUEwNkJDRTM2NDRDOUMxQzlCODNCMzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnrrAwDQYJKoZIhvcNAQELBQADggEBAF2QmHCw53U7z2ZIO2EPv1PACBP9S66L
B9/td5XmnCxU8d9gRAHqsU1YpFg2V2WlvxpqrIvV0GWBAeYnTKHjbR5ZOmGUtEMS
T17ZHWEGIDD7qzpHqkGeeSJVvqTeO4Btdt9nBywGnyGpPIQN1X96wvhsQfM1o9X+
rKaBl+hzj/5fwr8u/kpw3f+TamGMTzHkGEVgqpN3t90ulO3kWQN5Q0Ggan2294yV
zDikin2pvpEwC4e/zr2IaGNPilWJHDKhk2zGYJnpNSC+suyiB4rQv9b07AlJS+bD
YYx7PFpXXN8UTub72B8+2fdhGoT/uJySCo+b2EUqn5+A1fletha8Jek=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:21 2025 by rpki-client on console.sobornost.net