Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
File:                     83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer (raw, json)
Hash identifier:          tz95SGJvXjLvdSqGyGcM+AV8ic4JYRXTvS44fUBS19A=
Subject key identifier:   83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       63CEE5E50EA718088434795A205F2A1B51B0549F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 26 Apr 2025 14:00:09 +0000
Certificate not after:    Sat 25 Apr 2026 14:05:09 +0000
Subordinate resources:    IP: 103.162.152.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ce:e5:e5:0e:a7:18:08:84:34:79:5a:20:5f:2a:1b:51:b0:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 14:00:09 2025 GMT
            Not After : Apr 25 14:05:09 2026 GMT
        Subject: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:68:db:c2:05:74:7a:e7:8d:ff:1c:79:40:
                    8f:ed:74:02:4f:e1:4c:e6:6e:78:ec:9f:b5:0e:07:
                    a8:d4:4c:5d:81:14:dc:00:27:3c:1f:34:23:0f:99:
                    60:71:a8:82:ec:87:14:33:27:55:2c:36:06:2f:b1:
                    20:02:87:b8:e0:09:36:57:0a:86:ab:6a:31:a5:95:
                    0c:6b:18:ef:e6:fc:18:cf:e7:fb:fa:94:62:6c:a7:
                    d4:5b:99:5c:4e:dc:08:61:33:d5:dc:20:39:37:03:
                    88:1c:c6:28:f7:79:6f:52:9f:a6:06:5f:ac:70:7f:
                    88:d5:33:47:41:c8:1f:1f:c1:19:1e:09:88:b4:1c:
                    c1:a5:64:22:af:84:87:f9:f1:18:80:64:a0:d8:c8:
                    af:09:53:d1:37:03:fd:6d:74:2b:5e:9a:c7:5a:50:
                    49:ce:93:f0:fa:44:18:65:d5:3e:aa:b0:f4:0f:74:
                    a8:9f:42:64:7f:7c:7e:d7:eb:94:0b:bb:9e:a7:fb:
                    1f:80:9d:cb:92:9a:7e:76:23:ba:cf:ac:c9:3e:4a:
                    ac:87:f8:56:0d:79:f4:29:a0:57:26:9a:71:d3:b1:
                    89:f8:ea:f0:ad:a5:07:9c:81:9d:8f:f4:48:b0:35:
                    f3:a2:86:64:36:80:15:a1:ed:27:e9:e1:01:e7:15:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:02:b4:bf:48:df:80:49:08:d5:9e:38:4e:4b:15:da:72:
         55:88:0d:5e:4d:ce:16:cb:c1:e9:4b:fe:b7:c9:df:73:f3:d7:
         69:ad:a1:d9:35:c6:39:20:f7:d1:19:52:d4:53:63:6d:25:21:
         c5:41:92:db:f6:da:6c:ff:6e:a0:74:28:68:d0:60:8e:4d:6e:
         f3:41:9f:65:3c:b5:2a:05:19:48:76:b2:b6:0a:96:ab:84:da:
         f5:c6:9e:16:01:2c:41:16:c0:9c:e6:f9:ee:4d:36:7d:09:80:
         26:4c:bc:f5:3a:7d:4e:f1:85:ca:32:29:8e:9e:1a:43:0a:07:
         55:8e:5c:09:5c:22:0f:20:32:a6:45:67:fb:7f:fc:63:62:4c:
         db:b4:f2:c2:38:01:72:0d:79:20:02:bc:28:ea:5b:8a:39:f3:
         64:36:c3:4e:92:15:31:c5:56:0a:5c:6c:a9:07:df:9d:24:2f:
         18:58:19:d2:50:64:e2:2f:d3:c2:cd:b5:43:56:89:a6:17:4a:
         83:1c:bb:5c:fd:7e:be:eb:bb:fb:2f:3f:05:f2:51:f7:99:4c:
         ac:5f:0e:4a:b3:cf:32:21:a9:58:2b:eb:ac:05:9f:bc:20:fb:
         df:90:62:b8:7e:e2:3b:24:05:62:7c:3e:9d:57:34:ad:61:37:
         d5:9a:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:01 2025 by rpki-client on console.sobornost.net