Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
File:                     07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer (raw, json)
Hash identifier:          iyaDFFFNlaoir8xjSYGz5BaPAq9JV3/8mEHNRCIHH8Y=
Subject key identifier:   07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4975D73CF1793698D6302072EED76C9C2C444465
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 23:34:10 +0000
Certificate not after:    Tue 02 Jun 2026 23:39:10 +0000
Subordinate resources:    IP: 160.22.24.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 16:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:75:d7:3c:f1:79:36:98:d6:30:20:72:ee:d7:6c:9c:2c:44:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun  3 23:34:10 2025 GMT
            Not After : Jun  2 23:39:10 2026 GMT
        Subject: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:42:f0:11:d9:7c:3a:3d:33:c4:65:88:9e:
                    ed:5d:1d:29:33:b4:df:48:a1:78:e3:b0:aa:c1:6b:
                    4e:dd:4d:ab:81:11:68:c4:ae:f6:38:40:a1:af:1a:
                    18:60:af:26:67:51:20:0f:85:c3:fc:33:9e:23:93:
                    00:b8:36:5c:06:dc:f2:58:2d:60:81:98:5e:5b:29:
                    c6:e1:79:99:87:fd:3c:11:9c:98:aa:6e:a2:b9:0d:
                    14:87:b6:bf:00:13:20:04:df:6b:28:6c:68:ed:08:
                    5c:61:ec:49:4b:27:78:77:bf:59:d6:bc:c7:c3:40:
                    eb:88:a0:52:c0:e1:e6:b3:67:82:33:ed:ec:4f:7e:
                    21:29:eb:5a:56:13:06:d9:89:eb:4d:41:94:eb:62:
                    ff:a1:a0:08:82:26:2a:da:b4:74:a2:6b:7e:73:9c:
                    31:95:c9:8b:6b:90:0a:66:e5:bb:30:a0:fc:e7:bc:
                    c4:83:0a:32:1a:50:a2:ee:f2:7a:7a:89:3d:f7:24:
                    27:bd:59:54:33:78:5f:83:68:16:54:fa:6a:03:ed:
                    8c:56:6d:55:36:cb:3f:7d:4d:84:da:c3:0c:41:c3:
                    6d:4b:3a:2a:2c:77:29:d2:63:b7:22:7f:c0:df:62:
                    9b:48:bb:96:2a:68:0e:0d:59:8e:4d:d5:f4:47:0f:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:24:e6:59:79:3c:8e:d4:d0:82:90:d7:f2:a7:bc:6a:7a:cc:
         45:e9:24:fe:87:bd:cc:3b:26:c0:72:c0:12:a4:f2:75:1f:c2:
         1e:e1:75:3b:7f:54:9e:c2:10:a5:ac:71:04:52:b1:c9:89:b5:
         3e:0f:15:4d:8c:7c:69:bf:ff:e5:33:32:1d:18:ad:87:4f:fb:
         39:63:94:c2:ac:88:db:24:4c:b4:7b:35:67:04:ba:aa:f1:25:
         e0:4a:17:26:7d:58:f9:2a:3a:37:f6:a4:e5:6b:45:9b:a4:30:
         2c:73:73:8d:c6:89:8a:b4:ad:69:f2:1c:6c:ba:22:94:53:c1:
         3c:cf:df:f8:76:96:54:04:ca:8a:3c:8b:95:74:0f:84:00:20:
         dc:65:04:07:0d:9d:0b:73:85:45:9a:71:b1:a3:18:e7:3f:8b:
         55:52:4e:f1:8f:97:c7:85:58:94:2c:8a:d3:ba:2b:aa:06:e0:
         26:a7:04:07:65:55:7b:f7:88:38:f5:8c:b9:7f:b0:96:7e:ef:
         da:95:c9:e3:19:cf:ce:dc:63:59:24:5d:57:ba:ab:a2:23:57:
         96:62:ce:04:73:32:b1:59:26:f1:6a:46:a2:99:0f:d0:b3:32:
         2d:21:1b:cb:92:fb:ad:84:a7:86:61:bb:04:8c:ee:a6:26:8f:
         12:1e:73:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:13 2025 by rpki-client