$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer File: 19D983F92968E71520E086B32ACAFEFB5BF04943.cer (raw, json) Hash identifier: b1RcdflOcSA1CEaGfiXCCsbMQZTyrNEldwHC3l7AMkM= Subject key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47D4CF351D39E120F858A77F7540A60FDBFF1D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft caRepository: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 07:21:07 +0000 Certificate not after: Mon 29 Jul 2024 07:26:07 +0000 Subordinate resources: IP: 103.18.144.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Mar 2024 16:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d4:cf:35:1d:39:e1:20:f8:58:a7:7f:75:40:a6:0f:db:ff:1d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 07:21:07 2023 GMT Not After : Jul 29 07:26:07 2024 GMT Subject: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a4:19:dc:c2:02:28:6c:6d:c5:e3:7a:50:cd: 87:9d:40:c9:ce:ff:16:9f:24:25:b9:a1:fe:b0:37: 00:48:f9:ae:ec:ce:f3:f4:28:c9:0d:eb:4b:4c:7c: 95:41:7c:d2:b2:56:c6:9c:09:4e:65:9b:dd:86:71: 61:2a:81:10:5b:5d:bf:b6:6b:0c:bf:13:48:77:ee: c0:87:d0:41:da:8a:05:71:c3:a7:45:fc:76:2f:c9: 73:f5:48:8c:30:4e:fd:71:ab:73:13:68:e1:22:2c: 08:8b:b2:c1:80:11:91:cb:81:db:19:3c:f7:e9:32: 1b:7e:a0:86:5c:6c:74:35:cf:ed:1c:ff:96:51:99: 3d:05:ae:0a:a4:f0:75:8d:6e:06:5b:3e:4f:0d:01: 66:86:ba:4a:22:c8:5f:e2:f0:2b:b6:68:59:6a:59: ec:53:d4:31:c7:68:95:42:8a:39:da:0a:80:16:a7: 11:91:bc:ad:54:95:50:11:0f:e2:5a:e1:b7:bd:2a: 43:e1:8d:75:ae:d2:64:50:2b:b0:8d:74:26:e9:4f: b2:50:c8:9a:69:c8:3c:fa:24:f4:a5:f7:b0:e2:1c: 28:b7:9d:d1:10:70:21:21:db:b1:a1:42:e2:a0:cc: 99:e0:2b:97:50:cf:09:91:6c:ae:53:de:48:c2:bf: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.144.0/22 Signature Algorithm: sha256WithRSAEncryption 04:e8:ff:be:f4:c6:e9:0e:82:58:68:8c:bb:fc:d6:93:a0:20: 41:c6:df:8b:70:d3:91:20:02:0a:eb:38:bd:ae:17:03:b1:d1: 7c:93:de:94:db:83:ba:ef:04:a1:47:71:c1:c8:f6:f7:fb:83: 98:14:aa:f1:27:63:dc:e7:51:ac:5f:40:0c:2e:30:fc:45:1d: a2:f8:56:ec:4a:0a:bd:1c:86:1e:a1:b0:49:ea:28:59:48:75: 7d:66:da:1e:dd:f9:4f:37:78:eb:f1:f6:e1:ce:82:4c:4c:fa: 4b:11:89:24:4f:47:93:b1:59:71:d0:0e:18:74:89:35:d5:7d: 3c:08:d8:18:3d:39:61:7e:bb:08:39:bd:0e:94:99:ec:76:a9: 37:04:11:f7:49:de:70:54:33:4b:ca:c9:3b:32:9b:91:f4:f4: 4b:ef:60:5d:c8:0c:31:95:1a:33:9b:08:d8:53:65:5f:2e:af: 24:4d:fe:1c:8a:af:99:29:30:f4:58:58:2b:17:78:b4:01:a2: b6:2b:fe:2b:aa:22:ea:31:44:81:77:d5:01:36:e0:3d:61:83: 6f:62:0d:90:d8:11:30:e1:28:b4:b6:00:05:db:4d:cb:8a:4d: 11:1b:07:17:1a:ef:b2:d2:da:f3:ae:af:9d:2d:0a:ad:45:82: 3a:ee:05:2f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR9TPNR054SD4WKd/dUCmD9v/HQIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA3MjEwN1oX DTI0MDcyOTA3MjYwN1owMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4 NkIzMkFDQUZFRkI1QkYwNDk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2kGdzCAihsbcXjelDNh51Ayc7/Fp8kJbmh/rA3AEj5ruzO8/QoyQ3rS0x8 lUF80rJWxpwJTmWb3YZxYSqBEFtdv7ZrDL8TSHfuwIfQQdqKBXHDp0X8di/Jc/VI jDBO/XGrcxNo4SIsCIuywYARkcuB2xk89+kyG36ghlxsdDXP7Rz/llGZPQWuCqTw dY1uBls+Tw0BZoa6SiLIX+LwK7ZoWWpZ7FPUMcdolUKKOdoKgBanEZG8rVSVUBEP 4lrht70qQ+GNda7SZFArsI10JulPslDImmnIPPok9KX3sOIcKLed0RBwISHbsaFC 4qDMmeArl1DPCZFsrlPeSMK/n9cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnZg/kpaOcVIOCGsyrK/vtb8ElDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yY2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjYjFmMTA5 LWI5ZmUtNDMyMy04NGUzLWI2MGJiNGRjMWVjYy8wLzE5RDk4M0Y5Mjk2OEU3MTUy MEUwODZCMzJBQ0FGRUZCNUJGMDQ5NDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnEpAwDQYJKoZIhvcNAQELBQADggEBAATo/770xukOglhojLv81pOgIEHG34tw 05EgAgrrOL2uFwOx0XyT3pTbg7rvBKFHccHI9vf7g5gUqvEnY9znUaxfQAwuMPxF HaL4VuxKCr0chh6hsEnqKFlIdX1m2h7d+U83eOvx9uHOgkxM+ksRiSRPR5OxWXHQ Dhh0iTXVfTwI2Bg9OWF+uwg5vQ6Umex2qTcEEfdJ3nBUM0vKyTsym5H09EvvYF3I DDGVGjObCNhTZV8uryRN/hyKr5kpMPRYWCsXeLQBorYr/iuqIuoxRIF31QE24D1h g29iDZDYETDhKLS2AAXbTcuKTREbBxca77LS2vOur50tCq1FgjruBS8= -----END CERTIFICATE-----Generated at Thu Mar 28 16:42:00 2024 by rpki-client on console-fra.rpki-client.org