Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
File:                     F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer (raw, json)
Hash identifier:          zbxgxF41ipnpDzt6QqkkCHn2OU57ZUJeFELPHbID/jc=
Subject key identifier:   F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       698CF064E9EB594F7BA84C0E69D59DB51C794D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jun 2025 03:17:38 +0000
Certificate not after:    Tue 02 Jun 2026 03:22:38 +0000
Subordinate resources:    IP: 103.151.92.0/23
                          IP: 113.212.160.0/21
                          IP: 2407:4600::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 08:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:f0:64:e9:eb:59:4f:7b:a8:4c:0e:69:d5:9d:b5:1c:79:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  3 03:17:38 2025 GMT
            Not After : Jun  2 03:22:38 2026 GMT
        Subject: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:96:ab:a6:85:85:8f:fb:8a:a3:a8:8b:50:
                    32:79:76:6e:76:d2:3b:93:ea:4e:57:34:c4:6c:d2:
                    8e:8e:46:dd:d5:a6:5d:eb:d4:ae:eb:df:85:f3:01:
                    54:44:b3:8d:11:86:52:c9:4b:4f:88:e1:f3:81:25:
                    99:10:45:fa:4f:98:a9:8f:ac:fb:a1:e1:f8:08:82:
                    6d:ab:a5:e6:74:0b:3d:4a:61:45:ea:c1:8f:19:01:
                    85:ff:19:ac:4b:5d:f6:b7:6c:f3:c5:cb:8f:da:ea:
                    3c:6a:03:cc:3a:ec:38:07:21:16:e0:5d:08:1d:fc:
                    ff:6f:a0:3d:61:e0:08:d5:e7:1c:e7:f5:27:db:f6:
                    3c:4a:f4:7f:38:df:ca:b7:be:c0:e3:ad:78:00:e2:
                    c1:79:50:03:de:f8:a1:6c:cd:0f:cb:ea:88:20:e5:
                    3c:76:c0:97:75:db:bb:4a:6b:db:b3:7a:34:e4:67:
                    ed:53:ae:68:6e:7e:b1:3e:c5:7c:17:92:19:61:88:
                    b2:7e:bb:c1:9c:ff:24:72:14:db:33:98:d8:df:f4:
                    c2:d1:76:c6:4e:2a:50:7e:7b:d0:48:ec:ed:a7:90:
                    a2:ad:d6:87:4e:0f:77:73:1e:20:e6:ac:ec:42:9d:
                    85:b9:71:61:94:7d:33:90:5b:2d:f8:8f:f2:92:23:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.92.0/23
                  113.212.160.0/21
                IPv6:
                  2407:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:39:4a:ee:6f:66:5a:d4:0a:ac:02:aa:4d:6f:76:52:bb:a0:
         26:6d:80:f8:8e:3a:1e:e3:31:fb:c2:b0:61:06:97:5f:e4:fc:
         9c:2b:60:fb:35:cd:da:1d:e1:6d:dc:5f:9d:c6:2e:5b:04:1a:
         30:67:5a:2b:48:27:6b:5c:d1:89:66:07:ca:98:91:db:74:70:
         1e:7b:99:dc:e1:59:76:1a:9d:40:aa:43:2f:28:e9:3a:b1:0e:
         93:08:de:41:6d:e8:e9:98:99:ec:33:fa:8c:53:14:44:85:c6:
         2f:d8:27:48:92:be:94:ed:0b:60:e3:08:3f:f2:20:98:c3:dd:
         59:ad:4a:17:23:da:f6:ea:81:f7:a4:9f:c0:bf:09:27:a5:98:
         10:50:16:a0:4e:8f:1b:2e:41:69:81:3d:1c:b7:62:64:8d:46:
         51:4a:3d:57:d0:f1:c7:89:5b:80:a1:c1:65:77:fc:56:59:38:
         c9:b5:9c:db:cc:84:b0:46:cb:95:cb:19:c7:8c:64:1f:c7:30:
         c1:4e:50:48:e2:6c:6c:e8:05:85:a8:ed:36:f5:98:57:e8:92:
         59:0d:b8:db:26:38:57:1e:69:b1:a8:08:ff:58:31:e0:7c:5e:
         5c:30:3e:23:23:5d:0b:38:1c:48:39:77:ac:b7:de:61:dd:d2:
         9b:46:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:34:21 2025 by rpki-client