Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
File:                     B8E13B8031811FE78FA73151056FBFABEE076814.cer (raw, json)
Hash identifier:          Xu0wSwyhYQT96i4t+X7b4CXSZb+S08WtIKxDH2kkuM4=
Subject key identifier:   B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1BC16BDA5A30B056B28D43DA48EBF55EDA142F39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 04 Jun 2025 06:59:25 +0000
Certificate not after:    Wed 03 Jun 2026 07:04:25 +0000
Subordinate resources:    IP: 103.143.70.0/23
                          IP: 2405:4a40::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 12:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c1:6b:da:5a:30:b0:56:b2:8d:43:da:48:eb:f5:5e:da:14:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  4 06:59:25 2025 GMT
            Not After : Jun  3 07:04:25 2026 GMT
        Subject: CN=B8E13B8031811FE78FA73151056FBFABEE076814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:da:0c:a4:6d:26:6e:7b:ea:fd:14:94:6e:
                    58:74:10:df:3a:f6:5e:4e:98:61:6b:82:29:40:07:
                    db:18:74:99:74:8c:eb:18:36:f8:f2:fd:63:2a:d1:
                    20:86:ba:d7:8e:33:c7:a4:d2:97:8d:4e:ce:04:1d:
                    f5:e2:3c:f8:9f:96:4a:ec:7a:5c:ba:a5:66:4e:bd:
                    5d:c8:45:80:62:9a:d5:e3:df:7e:8e:ec:05:40:a2:
                    3b:9b:7e:5d:9e:31:3e:5c:f0:01:13:3e:fb:a3:e1:
                    08:32:05:4a:ca:ff:22:f2:a5:47:0f:d0:20:e8:5c:
                    d6:2c:2d:d6:52:88:d5:cb:08:8a:bc:ab:30:24:28:
                    17:f1:7e:20:bb:74:f5:67:ba:de:d4:d5:de:2e:87:
                    5d:f1:09:d2:c0:1c:f9:4b:f2:5f:e6:ba:1e:fd:02:
                    0d:2c:ad:84:02:19:61:5a:31:fc:a1:8c:3c:0b:cf:
                    a8:dd:56:a9:8d:72:2e:91:45:2c:02:fb:a3:b8:a5:
                    1c:a9:a6:c9:e2:4c:38:4a:0a:58:18:7b:9c:59:b4:
                    0f:35:4f:a9:f1:4d:db:97:98:82:31:f6:2a:b3:ec:
                    e9:67:bf:8a:32:09:0f:56:85:8c:d2:4d:e3:e5:74:
                    f9:34:c6:57:49:da:bd:61:6b:51:b5:84:9c:d1:8a:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.70.0/23
                IPv6:
                  2405:4a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:ca:4e:f2:44:73:d1:c8:a6:c8:54:8f:5a:2a:28:3f:a8:
         cd:91:e1:ba:a5:68:1d:99:e7:a1:97:6c:9c:59:23:33:a5:d1:
         ce:8e:5c:f9:6f:f7:e3:fd:cf:c1:6a:9b:e0:c5:1a:a6:94:c9:
         e1:0d:53:b8:47:68:2d:c2:5c:51:ec:53:46:39:fe:23:37:35:
         99:1e:eb:78:62:e1:5d:c0:49:4e:fd:be:42:94:5d:05:d7:1d:
         8f:59:0c:7d:b7:3c:02:f4:fd:f0:c4:f7:0a:84:3b:ac:7b:a6:
         c5:96:e9:6f:3e:29:77:4f:f8:ba:8d:bf:67:f9:50:c8:9c:29:
         da:c7:d9:22:e6:66:03:4b:c7:89:dc:31:3c:e8:d2:0e:62:6b:
         92:25:87:1b:85:99:4b:f0:fc:e4:3f:84:82:6a:c5:a8:77:5e:
         38:46:b1:84:c4:43:19:98:ec:39:be:34:c7:59:d6:42:e4:26:
         ab:b4:f5:a9:05:6e:21:7a:66:8c:97:92:18:97:ea:4c:06:a7:
         a8:00:95:69:a5:ae:38:c0:ec:82:0e:ac:a5:56:bb:d3:b8:d7:
         35:bf:cf:33:d6:b7:9c:01:3c:e7:bd:b5:ad:58:2b:53:47:d9:
         2f:2b:48:27:a1:eb:fb:75:58:15:30:1a:85:28:a0:f7:20:a8:
         70:65:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:14:51 2025 by rpki-client