Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer
File:                     60EED32BAAFA382342DABD544A906AFB859D9026.cer (raw, json)
Hash identifier:          dMKLfxzQemCqKe7qT3PLkAK3IzM5bUtugd/C/z8vLk8=
Subject key identifier:   60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FA4702F4D586EC44B5847C8A18E89D5C4B005C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Apr 2025 01:53:10 +0000
Certificate not after:    Fri 03 Apr 2026 01:58:10 +0000
Subordinate resources:    IP: 103.18.34.0/23
                          IP: 103.31.110.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:70:2f:4d:58:6e:c4:4b:58:47:c8:a1:8e:89:d5:c4:b0:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  4 01:53:10 2025 GMT
            Not After : Apr  3 01:58:10 2026 GMT
        Subject: CN=60EED32BAAFA382342DABD544A906AFB859D9026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:b0:ec:6b:31:8d:29:22:c0:8f:f6:3d:b1:
                    e6:43:d2:f2:09:0d:b6:eb:9d:26:7f:3c:b9:18:d5:
                    f5:a9:fb:df:9d:0c:3b:dd:4d:3e:4f:a7:83:8e:88:
                    c6:01:6f:e9:ce:9c:8e:fc:ab:3c:49:2a:6f:e2:4b:
                    68:b0:ce:e3:47:fc:29:55:0b:21:f8:f9:23:21:45:
                    8c:b4:63:90:20:0e:e9:b9:28:b1:8a:6e:33:d5:39:
                    af:9c:5f:82:14:23:5d:f3:75:25:dc:11:8f:c8:a2:
                    4c:9c:ce:fa:8e:01:11:20:ee:53:05:5e:b4:e6:b5:
                    51:6b:e6:90:1b:ad:77:38:af:a9:e4:4f:0e:09:9c:
                    b4:a0:19:78:1e:60:96:67:20:ff:69:38:cf:e9:86:
                    a2:a5:20:d2:fd:c8:19:de:e3:b1:2d:23:6d:3e:30:
                    9a:8c:28:38:d7:4a:5d:de:7b:05:b4:74:0f:76:1f:
                    86:d5:0d:58:e7:31:8d:95:2b:e0:b9:26:a3:86:fa:
                    30:d1:65:c6:b7:70:d7:27:d6:2f:a5:a9:73:63:ba:
                    c5:4a:0d:55:78:c5:cb:85:c9:14:da:38:c9:35:4a:
                    01:a0:3e:e7:b4:71:f3:a6:7c:bc:08:90:48:2f:f7:
                    f1:77:79:47:59:66:35:8c:b2:a1:f8:e4:99:b6:7b:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.34.0/23
                  103.31.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:c0:10:46:e8:1e:9f:f8:3c:4c:51:d1:42:f6:b3:a0:6a:
         68:8e:15:da:b9:ef:63:0b:09:4a:ea:70:65:83:8e:9a:cc:09:
         1f:f8:51:e4:7e:8a:40:96:cb:44:69:72:6e:c9:0e:b5:71:0f:
         12:f8:3c:60:9c:8a:de:2d:fd:4a:f4:22:88:3d:21:93:26:95:
         26:4b:45:ce:7b:e7:43:20:c0:a1:f1:ba:3f:89:3f:3a:01:90:
         10:99:99:22:3a:c5:69:35:d7:44:af:27:6c:e2:08:e7:27:a6:
         c2:ae:68:a2:9e:05:e0:e9:84:74:5a:84:4f:bc:5d:56:ff:f1:
         e6:7c:56:b4:02:82:33:8b:a1:a0:2f:3a:ac:86:67:89:64:e3:
         66:6b:fb:5b:32:c6:e5:f0:1d:08:50:d1:fb:d3:15:67:04:d1:
         40:c7:1c:30:14:68:22:ef:62:c0:f3:b5:09:64:47:db:91:3b:
         03:96:4a:fc:f6:9c:01:86:58:ca:ee:b6:5e:8f:d2:06:1e:8d:
         f6:57:d3:be:c9:a9:54:fc:70:3e:2f:22:13:f3:92:54:96:4c:
         78:83:99:1a:72:73:a6:81:ed:b2:d0:f5:da:57:7e:00:11:ba:
         fd:ac:64:9b:ae:b6:b2:bd:53:ab:5a:69:7b:1b:bf:0b:41:e9:
         cd:db:fd:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:36 2025 by rpki-client on console.sobornost.net