Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
File:                     2E55483B906244D2DA357F014F9AFA606D95C345.cer (raw, json)
Hash identifier:          k0LUf+1vtlokyZExFevt8vrvRE4kNKEJj9aglkQc5vQ=
Subject key identifier:   2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5FF555B6A15CB3BBCF8B911CA4D7A34DCA7E6773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 19 Apr 2025 13:16:53 +0000
Certificate not after:    Sat 18 Apr 2026 13:21:53 +0000
Subordinate resources:    IP: 202.52.58.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f5:55:b6:a1:5c:b3:bb:cf:8b:91:1c:a4:d7:a3:4d:ca:7e:67:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 19 13:16:53 2025 GMT
            Not After : Apr 18 13:21:53 2026 GMT
        Subject: CN=2E55483B906244D2DA357F014F9AFA606D95C345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:d3:04:a9:af:e6:0e:92:53:9e:6f:ab:e4:
                    c7:b4:94:37:43:3f:5c:f0:dc:fb:3e:4f:a0:1f:b4:
                    3f:cd:0e:27:7d:4a:6c:20:33:44:78:cb:34:8c:a7:
                    ba:0a:fb:8c:90:1c:b3:eb:62:3f:bc:bf:1f:7f:77:
                    8b:c4:61:9e:58:91:43:ce:98:71:f8:e2:71:e7:a7:
                    f4:e2:3c:db:0b:19:ef:69:18:5a:22:0e:9a:d9:37:
                    ce:7b:d8:0b:02:07:a6:94:f9:be:9f:e0:b6:5e:27:
                    56:22:c4:b8:d6:74:a9:18:64:0f:ab:d9:fb:d0:78:
                    ba:f5:2a:68:1c:c7:03:a4:6a:4c:6f:9f:0b:f2:32:
                    44:45:d8:37:21:c6:74:bc:c2:bc:85:76:b1:0a:44:
                    e4:d4:df:cd:70:ab:ec:65:22:ba:1a:51:50:01:1e:
                    94:7c:52:51:8e:ec:64:13:4e:91:d9:4d:49:0b:90:
                    3a:7b:92:f2:80:46:df:24:86:86:8c:53:2f:95:cf:
                    66:c8:ac:1d:bc:6e:ba:7a:e9:59:e9:f7:4f:12:01:
                    a7:b3:4b:f8:57:7d:d5:b0:9a:1b:63:ee:10:18:79:
                    8e:0b:92:af:5e:b0:97:64:99:2f:d6:75:8e:8e:4d:
                    a0:31:9d:b9:38:15:e1:4d:48:45:fe:93:f1:2a:91:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:69:64:96:10:75:ec:ae:de:b2:fe:50:ed:25:ff:d5:96:
         3c:75:c3:ca:26:33:22:4c:81:8f:02:14:a9:e6:8d:86:08:1e:
         4c:ec:73:9e:e8:67:dd:a8:ce:31:90:c7:eb:90:cc:46:a1:69:
         63:dc:0b:44:5d:b2:a4:0d:10:cc:fb:9d:0c:4c:d9:a1:da:14:
         c0:57:f4:4e:d4:6d:e2:3d:68:ff:08:10:86:cb:07:eb:12:28:
         28:d9:71:e1:d5:5d:1a:f0:6b:10:3d:8e:2e:89:0e:62:2b:c9:
         37:3f:e2:73:28:99:fe:b3:b8:f1:5b:b8:4d:2c:56:f3:68:e9:
         df:06:8e:63:d7:2e:45:c0:91:cc:94:e1:b7:86:8d:8c:2d:19:
         d5:98:22:89:f2:f2:fb:d2:44:1d:9b:a9:6c:e0:ec:12:ba:9a:
         d4:82:6f:7f:ec:17:e7:f3:dd:b9:62:fb:62:b4:10:1b:66:29:
         b5:4c:1b:f4:77:ce:83:0c:b1:e8:ba:80:a0:c6:28:ec:25:96:
         38:2f:26:ad:1a:16:ba:f0:88:23:f3:32:42:fb:64:ba:0f:f8:
         c7:1a:0c:b8:ad:81:c2:08:1b:c0:fd:da:d0:59:6a:a6:3f:a7:
         aa:85:9c:1f:1d:55:57:44:79:7e:23:4d:b2:7d:88:96:de:6a:
         3c:38:6f:32
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUX/VVtqFcs7vPi5EcpNejTcp+Z3MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxOTEzMTY1M1oX
DTI2MDQxODEzMjE1M1owMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3
RjAxNEY5QUZBNjA2RDk1QzM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKiM0wSpr+YOklOeb6vkx7SUN0M/XPDc+z5PoB+0P80OJ31KbCAzRHjLNIyn
ugr7jJAcs+tiP7y/H393i8RhnliRQ86Ycfjiceen9OI82wsZ72kYWiIOmtk3znvY
CwIHppT5vp/gtl4nViLEuNZ0qRhkD6vZ+9B4uvUqaBzHA6RqTG+fC/IyREXYNyHG
dLzCvIV2sQpE5NTfzXCr7GUiuhpRUAEelHxSUY7sZBNOkdlNSQuQOnuS8oBG3ySG
hoxTL5XPZsisHbxuunrpWen3TxIBp7NL+Fd91bCaG2PuEBh5jguSr16wl2SZL9Z1
jo5NoDGduTgV4U1IRf6T8SqRyd0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFC5VSDuQYkTS2jV/AU+a+mBtlcNFMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hMmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0
LTRmZDUtNDNlMi1iYjZhLTRmZGMzODdlYmM1OC8wLzJFNTU0ODNCOTA2MjQ0RDJE
QTM1N0YwMTRGOUFGQTYwNkQ5NUMzNDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHKNDowDQYJKoZIhvcNAQELBQADggEBABAPaWSWEHXsrt6y/lDtJf/Vljx1w8om
MyJMgY8CFKnmjYYIHkzsc57oZ92ozjGQx+uQzEahaWPcC0RdsqQNEMz7nQxM2aHa
FMBX9E7UbeI9aP8IEIbLB+sSKCjZceHVXRrwaxA9ji6JDmIryTc/4nMomf6zuPFb
uE0sVvNo6d8GjmPXLkXAkcyU4beGjYwtGdWYIony8vvSRB2bqWzg7BK6mtSCb3/s
F+fz3bli+2K0EBtmKbVMG/R3zoMMsei6gKDGKOwlljgvJq0aFrrwiCPzMkL7ZLoP
+McaDLitgcIIG8D92tBZaqY/p6qFnB8dVVdEeX4jTbJ9iJbeajw4bzI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client on console.sobornost.net