Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
File:                     FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer (raw, json)
Hash identifier:          38c6jvZNShKLKiPTElAGZyfTuQUJX2dFBFJmDKm9vOc=
Subject key identifier:   FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54493AAE693B5A00D81FC0F8CB03C539E6C37203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 18 Apr 2025 19:07:16 +0000
Certificate not after:    Fri 17 Apr 2026 19:12:16 +0000
Subordinate resources:    IP: 103.177.14.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:3a:ae:69:3b:5a:00:d8:1f:c0:f8:cb:03:c5:39:e6:c3:72:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 18 19:07:16 2025 GMT
            Not After : Apr 17 19:12:16 2026 GMT
        Subject: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:74:c0:5e:fb:e7:66:4a:a1:09:31:c0:96:
                    29:4d:3e:d2:6e:74:73:89:2b:8e:8f:79:a8:ec:0c:
                    2f:8f:a5:e7:ef:c9:25:2c:27:75:75:9a:bd:cf:1e:
                    53:ef:9a:ca:d5:a3:ae:84:6b:82:f3:1d:64:fb:a4:
                    b0:01:12:2d:60:6c:21:13:e5:e3:a5:a6:6d:57:45:
                    7f:75:80:fe:97:45:61:d3:22:db:b6:c4:3e:e8:56:
                    b9:a6:15:1c:69:58:03:3f:49:ce:77:29:e1:1d:e9:
                    80:a2:c6:34:4b:67:9e:49:1a:2f:4a:ea:8e:80:8f:
                    53:30:a6:ce:06:41:df:69:52:b4:b4:a0:46:6f:c4:
                    62:cb:83:44:c8:70:f0:0f:9b:a1:fe:3a:d2:89:35:
                    cd:b2:46:09:3b:84:4b:47:d7:f4:bd:55:fc:d8:6e:
                    40:e6:9e:ab:fb:42:3c:cf:69:49:b1:3d:71:4e:30:
                    dd:e0:81:69:f9:ba:83:49:cc:52:43:e1:2b:33:1c:
                    73:69:2e:03:56:2c:32:2f:7f:9b:99:c2:d8:25:c9:
                    fc:e0:8a:5e:49:90:4e:21:d6:b9:8f:ea:23:f3:9e:
                    2f:0f:d5:c3:75:71:53:16:83:42:a0:11:79:e3:9d:
                    42:94:30:5c:a9:d9:35:c2:46:f3:f0:a6:13:a1:f3:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:fb:74:3b:72:e9:92:68:00:a5:e8:51:33:ae:6d:12:44:
         1d:7c:e4:64:f8:ec:72:da:a4:ac:8a:f5:01:2b:cb:f1:d0:41:
         a5:bd:9d:a1:91:7d:a4:32:6d:53:fb:73:93:b7:d9:80:b6:7f:
         c7:a8:fc:5c:f3:d0:f8:61:63:0b:f8:a4:1c:69:9b:4c:15:b6:
         f7:3f:39:aa:72:96:75:51:28:a1:88:82:98:66:c6:00:e6:88:
         ff:9a:a4:de:65:78:0a:95:63:c4:e5:e6:cd:7a:d4:7b:16:92:
         1d:25:e7:0d:72:b3:49:be:82:96:32:86:e2:da:89:6d:37:ec:
         1a:7d:30:06:90:d7:20:35:8f:a8:be:f3:7f:ef:59:b4:3c:36:
         bb:fc:2b:1a:77:7d:25:b3:63:60:80:1f:15:b6:a2:b3:09:e2:
         74:ab:00:2f:04:6d:c5:7c:98:f6:d7:0a:40:b0:68:62:53:bb:
         43:96:c7:b6:ff:07:0b:95:b2:33:9c:9c:57:87:7a:84:29:b0:
         ac:40:4d:49:77:70:25:7a:ae:d1:d3:d5:1b:89:29:d8:bf:d0:
         86:82:76:d5:e7:55:73:77:6d:ee:9e:79:e0:fe:65:1e:84:a6:
         99:dc:f4:7c:a6:b5:7e:f9:dd:d0:44:96:0f:62:43:37:50:7f:
         75:78:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:09 2025 by rpki-client on console.sobornost.net