Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
File:                     27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer (raw, json)
Hash identifier:          JAQ243XoHNm//yOnXgJwXjxWqUUeDEwEzzEePOdjUBc=
Subject key identifier:   27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19D5D31C3A42FF43665060F8F650B12EF3C3BC97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Apr 2025 13:11:11 +0000
Certificate not after:    Fri 10 Apr 2026 13:16:11 +0000
Subordinate resources:    IP: 103.189.166.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:d3:1c:3a:42:ff:43:66:50:60:f8:f6:50:b1:2e:f3:c3:bc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 11 13:11:11 2025 GMT
            Not After : Apr 10 13:16:11 2026 GMT
        Subject: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:18:95:12:48:e6:12:c2:b2:53:94:15:a2:
                    fb:da:b1:c1:ac:c4:79:59:90:92:da:d4:1e:28:2d:
                    36:0c:cf:f1:02:3b:23:89:f3:d5:48:ba:3a:60:ee:
                    b7:52:8f:2a:8c:1e:a1:9f:b3:0c:77:e6:59:3a:80:
                    cc:aa:de:bf:2d:aa:59:9f:ab:55:73:4a:b5:8d:a9:
                    31:b4:dd:93:b6:1e:1d:88:f5:3d:79:aa:59:45:da:
                    58:c7:15:21:bd:9c:3b:2f:25:cb:60:44:df:b1:3f:
                    b8:23:54:bf:45:ff:8e:e5:75:a9:4e:de:a8:82:41:
                    bb:d5:d6:ea:74:bf:cd:de:f0:b3:00:8a:11:39:a7:
                    8a:9c:50:82:a7:6e:b1:7b:20:29:9f:15:e7:c0:bf:
                    6c:9b:7f:42:88:d2:64:47:14:68:e8:2a:cd:a9:a8:
                    83:fd:81:49:04:09:89:f3:7f:02:fd:0c:1e:11:f9:
                    73:8e:43:ff:06:1f:4a:e1:cb:e7:ed:d9:d8:0f:3a:
                    ac:cd:5a:49:86:52:4f:b2:dc:f3:ef:93:7d:50:14:
                    6c:fc:04:78:60:17:4d:54:66:27:99:49:34:9d:f9:
                    85:76:66:fa:21:0e:43:04:58:52:0e:f5:75:a2:1c:
                    15:ec:08:6b:a8:5c:58:f3:46:4b:ec:ba:f6:e5:fa:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:96:f7:cd:99:44:e6:44:92:a4:06:68:c6:a8:07:68:9e:
         a9:45:1f:70:66:89:2d:64:15:e0:f1:79:11:5d:dd:9a:0b:bc:
         52:b9:24:b7:6f:57:47:f3:cb:d3:93:af:e1:1a:98:cb:d0:38:
         b8:fe:28:7a:36:de:cd:ba:3f:7c:a5:92:9a:93:86:90:09:e1:
         78:65:19:ca:34:5c:8e:23:3e:33:68:fa:6f:b4:d1:f4:15:13:
         f3:32:1a:d0:61:f0:cd:cc:58:da:47:90:bd:da:5d:41:2f:75:
         ab:b3:98:f2:2d:f4:07:5e:02:f5:5e:ab:64:47:51:42:1c:11:
         9d:57:be:43:7d:c0:02:65:ff:d3:71:1d:af:ee:69:bd:ea:ea:
         9d:84:3a:90:d0:48:ae:87:58:56:41:60:74:4b:41:c1:fa:ac:
         01:f2:8d:25:b4:af:98:f6:dd:e3:31:42:c3:3f:93:43:af:4c:
         d7:b7:32:74:d2:75:bf:ad:3b:28:ca:31:5b:81:98:d4:8f:19:
         66:2b:01:be:87:df:92:5f:24:a1:89:99:7e:95:03:aa:ea:47:
         31:f1:86:fa:ac:d1:39:f9:90:c2:7b:9e:2a:f0:39:a0:96:4b:
         a3:35:07:04:14:cb:ef:7d:53:79:64:90:b4:d1:2a:45:a5:b1:
         ec:ea:ba:89
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUGdXTHDpC/0NmUGD49lCxLvPDvJcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTEzMTExMVoX
DTI2MDQxMDEzMTYxMVowMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNC
N0UzRkM2RDFBQkQyRDEzN0Q1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVWGJUSSOYSwrJTlBWi+9qxwazEeVmQktrUHigtNgzP8QI7I4nz1Ui6OmDu
t1KPKoweoZ+zDHfmWTqAzKrevy2qWZ+rVXNKtY2pMbTdk7YeHYj1PXmqWUXaWMcV
Ib2cOy8ly2BE37E/uCNUv0X/juV1qU7eqIJBu9XW6nS/zd7wswCKETmnipxQgqdu
sXsgKZ8V58C/bJt/QojSZEcUaOgqzamog/2BSQQJifN/Av0MHhH5c45D/wYfSuHL
5+3Z2A86rM1aSYZST7Lc8++TfVAUbPwEeGAXTVRmJ5lJNJ35hXZm+iEOQwRYUg71
daIcFewIa6hcWPNGS+y69uX6MQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCfGqIQXZBhRktO34/xtGr0tE31RMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by85ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMzBhYzY0
LTBmMTMtNDE2Mi05NjhmLWFmZTVjYzcxNGNmNi8wLzI3QzZBODg0MTc2NDE4NTE5
MkQzQjdFM0ZDNkQxQUJEMkQxMzdENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnvaYwDQYJKoZIhvcNAQELBQADggEBAB68lvfNmUTmRJKkBmjGqAdonqlFH3Bm
iS1kFeDxeRFd3ZoLvFK5JLdvV0fzy9OTr+EamMvQOLj+KHo23s26P3ylkpqThpAJ
4XhlGco0XI4jPjNo+m+00fQVE/MyGtBh8M3MWNpHkL3aXUEvdauzmPIt9AdeAvVe
q2RHUUIcEZ1XvkN9wAJl/9NxHa/uab3q6p2EOpDQSK6HWFZBYHRLQcH6rAHyjSW0
r5j23eMxQsM/k0OvTNe3MnTSdb+tOyjKMVuBmNSPGWYrAb6H35JfJKGJmX6VA6rq
RzHxhvqs0Tn5kMJ7nirwOaCWS6M1BwQUy+99U3lkkLTRKkWlsezquok=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client on console.sobornost.net