Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
File:                     ADCB9F9DF56E90B39B5344118194104F46A83702.cer (raw, json)
Hash identifier:          kFGSl4se+8OnczTnXm25JKtDiSzWeYk3i83PqTrzc3s=
Subject key identifier:   AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       08ED9EC2E58440DBA57BD109E0F3FD39973FE84B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 13:57:17 +0000
Certificate not after:    Tue 21 Apr 2026 14:02:17 +0000
Subordinate resources:    IP: 114.199.96.0/19
                          IP: 203.153.24.0/21
                          IP: 2401:9e80::/32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ed:9e:c2:e5:84:40:db:a5:7b:d1:09:e0:f3:fd:39:97:3f:e8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 22 13:57:17 2025 GMT
            Not After : Apr 21 14:02:17 2026 GMT
        Subject: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:22:4c:79:3b:60:56:0f:1c:51:c2:39:13:
                    8b:c7:65:17:77:d1:e8:e1:75:68:70:3c:a1:4f:04:
                    58:70:c1:0e:5d:26:74:65:39:0d:c5:c5:7a:ff:f9:
                    64:2e:c3:69:23:73:58:e7:52:5e:58:16:9a:9d:6e:
                    cf:04:83:6e:26:90:37:d1:82:5e:18:90:ba:5b:24:
                    31:32:e0:57:43:76:f2:35:c5:be:d1:fa:35:db:41:
                    56:fb:57:0e:09:20:59:f8:4a:3b:ae:9b:9a:45:2b:
                    13:d4:7e:99:ca:76:84:62:df:7b:76:e2:4d:e4:ea:
                    f5:87:82:56:8b:b3:aa:75:44:38:7a:4d:db:5c:2f:
                    8d:dd:c1:5d:a1:b0:f0:57:0e:63:d3:93:79:1f:1f:
                    c1:a7:56:5f:0b:2a:29:4b:bd:95:0d:db:23:4f:30:
                    4d:5b:ea:34:7d:01:29:41:31:33:55:3d:ac:b2:e3:
                    31:f4:cf:d8:45:75:5c:af:fc:93:e9:8e:58:e9:e6:
                    d2:23:e0:c9:2c:59:7e:5a:d3:85:0e:ed:79:11:2a:
                    58:4e:3d:d3:81:f9:8f:fc:32:39:44:ab:00:81:7d:
                    d5:25:b7:73:1d:b4:84:63:0f:58:e9:0c:57:5b:fd:
                    d6:96:15:23:3a:6e:ff:01:ef:9a:8f:20:e1:56:59:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/19
                  203.153.24.0/21
                IPv6:
                  2401:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:97:ad:4b:f0:71:ed:be:ed:6b:a8:81:1b:f7:ef:ad:18:
         1f:79:67:ee:83:af:9d:7b:c2:57:d8:74:40:d5:9f:e8:97:d4:
         ba:81:ae:d5:2f:16:46:80:24:b6:d7:70:51:9e:f6:76:04:46:
         44:68:01:dd:53:c2:91:0e:af:35:b7:14:8d:85:a0:f4:56:c1:
         b4:3c:29:02:6c:b1:8d:fd:92:0b:b4:a3:5c:66:c8:34:a1:fe:
         67:cc:4f:dc:43:e5:dc:01:f1:84:98:0d:f0:b2:1e:21:8e:10:
         0d:08:89:3c:8a:aa:9b:15:5f:03:e6:d4:35:3b:b4:72:d5:3d:
         27:26:05:91:fc:c0:3e:17:a8:61:35:65:b1:98:27:18:83:8b:
         b1:70:54:48:9c:cc:58:9d:cf:0d:91:29:d6:6d:8c:5f:37:f3:
         9a:aa:21:bc:1a:6a:fa:9e:ed:23:b3:95:a8:a5:d1:9d:40:4c:
         6a:ce:7e:09:24:f4:a2:24:93:70:f8:5f:51:28:95:49:7c:f7:
         f1:ba:cd:75:03:da:e0:06:2a:70:c6:78:46:6b:31:f0:af:c1:
         27:00:59:cc:6d:45:6f:f5:c3:7c:57:1e:10:67:f8:88:be:14:
         28:ab:64:aa:90:ea:6e:57:21:f7:ff:4a:dc:a6:75:a8:02:9f:
         80:e9:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:46 2025 by rpki-client on console.sobornost.net