Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
File:                     993D6DBC0B37BB59CEA86CE024A349353C57D366.cer (raw, json)
Hash identifier:          g0HlTC9NAlEYrlS3XyZVXqXg0sBpdU/VloOMBdn02+Q=
Subject key identifier:   99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6B7304FCBC10C47EB8151CDD0EBBCD635DBEDB3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 17:17:59 +0000
Certificate not after:    Thu 16 Apr 2026 17:22:59 +0000
Subordinate resources:    IP: 103.169.72.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:73:04:fc:bc:10:c4:7e:b8:15:1c:dd:0e:bb:cd:63:5d:be:db:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 17 17:17:59 2025 GMT
            Not After : Apr 16 17:22:59 2026 GMT
        Subject: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:9f:df:b3:8a:40:b5:70:e4:f3:c3:28:3d:
                    8e:7a:9f:b1:9a:40:ad:68:2b:92:cb:ee:f1:52:1f:
                    e0:7e:b8:0e:c8:4d:44:05:c7:93:46:12:a4:a4:ec:
                    47:05:e0:c0:a3:61:8d:47:e7:43:13:50:77:73:9a:
                    cf:e9:a3:40:dc:8f:a6:ae:0b:18:d1:c3:a9:74:e5:
                    3d:0f:9b:38:9b:2a:1c:54:b0:61:bf:ef:02:85:10:
                    4e:e8:eb:d6:44:5a:57:4f:db:bb:f7:a0:51:4c:94:
                    8f:09:b7:82:5d:c8:dd:2e:7b:e5:da:78:e0:2a:bc:
                    dd:be:85:54:50:81:7b:9c:f8:1c:bf:16:f6:db:2a:
                    a0:90:1c:40:57:11:07:2f:ea:72:07:4e:94:8c:bd:
                    27:da:ce:bd:05:de:1d:e5:c8:c0:e4:30:74:98:95:
                    c8:7f:be:06:2f:5d:7a:42:fa:aa:1c:bd:b6:cb:ed:
                    24:d3:aa:75:92:3b:19:f3:fb:52:13:49:da:08:a2:
                    83:ba:9f:1d:ff:8c:3a:a3:f7:c6:49:f2:92:00:18:
                    f9:d4:3c:6f:09:fe:97:85:d2:b1:30:ae:4d:df:8e:
                    d2:5a:06:c0:68:e2:49:1d:ca:55:0f:ed:a2:ad:22:
                    36:46:5c:c9:77:cf:c6:41:f2:24:92:a8:d0:b0:d2:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:18:59:4d:2b:b2:3d:86:cc:69:96:c0:fc:ee:d0:e7:77:6a:
         17:84:9d:bd:68:b3:79:ab:d1:c9:5c:9f:fa:b3:f1:30:7f:02:
         97:44:22:7a:3b:db:14:93:d7:65:a9:45:b1:d6:ec:ff:91:ff:
         86:14:30:ee:a3:3c:0c:15:a2:97:65:0d:81:f1:42:65:cc:c6:
         a6:76:83:37:ea:37:75:a2:db:d5:24:e1:b4:30:dc:51:a5:f0:
         db:d7:65:f4:cb:92:64:70:ad:93:dd:e0:66:9e:14:a0:8f:a6:
         3a:d6:b0:f2:e7:87:c1:bc:bf:cb:42:71:b9:3e:80:dd:79:1a:
         b7:66:d7:66:a6:f0:88:0b:ea:21:a8:48:54:73:5a:12:39:76:
         82:36:a6:5a:38:78:f8:ef:a8:9b:63:5b:28:80:d0:83:a7:a4:
         e7:6c:34:49:ec:0d:d4:74:e7:cc:66:0a:54:db:3a:da:f2:b4:
         aa:75:c2:91:8a:c8:ea:b6:ea:32:00:72:a6:58:62:9d:c2:21:
         57:8f:eb:73:f6:31:72:0d:10:5a:a2:12:74:60:e8:bd:71:df:
         80:08:17:f9:95:66:53:1e:20:cc:ac:a0:ff:fc:9a:6e:fe:ce:
         9b:02:a8:aa:b9:88:5b:10:b4:6a:4e:de:98:ae:fb:a2:50:26:
         20:33:ce:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:38 2025 by rpki-client on console.sobornost.net