Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer
File:                     CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer (raw, json)
Hash identifier:          mNsj4bVaRqKVlK6vdVaMuJZt4ueMLlXYoLIfpEHr6YE=
Subject key identifier:   CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FBEFFCBB3E7BDF31B2B60866A7D997B1D6F5EE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Aug 2025 00:59:05 +0000
Certificate not after:    Tue 11 Aug 2026 01:04:05 +0000
Subordinate resources:    IP: 103.179.180.0/24
                          IP: 2001:df2:2640::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 17:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:be:ff:cb:b3:e7:bd:f3:1b:2b:60:86:6a:7d:99:7b:1d:6f:5e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 12 00:59:05 2025 GMT
            Not After : Aug 11 01:04:05 2026 GMT
        Subject: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:f6:e4:c2:66:6f:3e:cd:37:69:c6:30:82:
                    b6:5a:bc:69:59:50:05:ac:00:b9:b3:e9:a1:09:02:
                    3e:70:07:d5:b1:c3:a5:6f:fc:f5:eb:ea:05:d0:20:
                    4f:ba:ec:d9:0d:51:f4:e2:80:00:a7:3d:f9:1d:f2:
                    b7:3b:61:9a:90:45:02:a1:68:f0:3e:42:6d:42:bb:
                    4d:70:4f:83:48:ac:22:c2:7a:ee:f8:28:02:e7:4a:
                    4b:33:95:54:f7:c6:ea:4d:c1:2e:20:40:5d:fc:73:
                    5c:96:f4:b1:16:6f:39:b4:48:4c:d1:8f:e2:6b:a8:
                    d7:8b:36:47:47:3e:4e:65:a9:96:7f:8f:72:f4:de:
                    ac:41:42:30:00:77:58:36:a6:f7:c8:4a:5e:91:91:
                    91:8f:b9:82:fe:13:9e:eb:64:d4:6c:84:64:8c:d9:
                    33:3c:e7:b2:d0:db:8d:14:4f:3e:fa:86:62:6a:d3:
                    a6:56:44:78:7f:8a:d1:15:51:a1:5e:76:dc:53:76:
                    8d:40:fd:4d:c6:dc:a4:ec:e1:20:24:68:b1:2a:bd:
                    c8:ee:41:de:9e:42:2b:c6:80:10:47:34:a6:75:c2:
                    d9:f4:c3:85:9a:77:97:26:f8:b9:49:c8:9f:b8:01:
                    29:17:b2:07:c7:59:3a:69:bb:07:97:e3:fc:c9:05:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.180.0/24
                IPv6:
                  2001:df2:2640::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:61:34:25:ed:8e:8a:f9:87:2e:3d:e2:cd:0e:a2:93:83:2e:
         e5:a7:e4:cf:e2:27:90:d6:37:e9:dd:5c:d2:50:ac:14:e9:7b:
         a7:57:0e:92:16:33:87:69:d8:06:83:18:e1:de:10:e4:88:c3:
         b7:c0:8f:79:87:a8:c1:d9:47:83:b4:ff:89:5b:4d:d0:4d:15:
         76:34:f6:84:c2:fe:bf:f8:e5:f1:40:67:fa:89:37:d7:c9:6f:
         04:42:98:c5:fa:d4:ba:25:44:83:0b:63:e7:3d:5d:43:b5:4b:
         ca:9e:06:7f:5b:24:be:b0:b2:86:66:fd:37:10:42:f4:66:1c:
         f2:ac:b5:c6:e0:a3:b7:e3:35:8a:61:a4:ac:af:f6:9f:8f:9e:
         55:6e:1f:04:01:4b:8d:ed:fb:90:fc:ca:69:db:e9:62:8a:4f:
         cc:73:8d:9b:f6:c1:72:21:29:f7:b5:61:da:38:47:06:37:50:
         6e:c8:88:32:62:86:fe:c0:3c:a5:b9:e1:62:78:0d:c6:28:b8:
         d1:bb:68:bc:8e:f9:7f:9a:f8:26:0b:24:95:b1:45:45:86:8e:
         40:16:e1:3b:19:cd:a5:2d:c0:5f:6b:ad:e5:e8:2b:84:76:38:
         e3:2b:6c:23:46:db:91:ff:d3:69:aa:b3:0d:60:c9:35:47:0c:
         ce:89:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:33:33 2025 by rpki-client