$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer File: 651790FFFC1688AFA384D136FC4792AD18879019.cer (raw, json) Hash identifier: MXbveYPDAO8n26Z8pznpfzZvAjO0f7kOQCncHAy9IEk= Subject key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 041BD4E5BA91C3102FDF7253B126CBA34530B979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft caRepository: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 08:37:39 +0000 Certificate not after: Mon 29 Jul 2024 08:42:39 +0000 Subordinate resources: IP: 103.53.76.0/22 IP: 2402:5580::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1b:d4:e5:ba:91:c3:10:2f:df:72:53:b1:26:cb:a3:45:30:b9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 08:37:39 2023 GMT Not After : Jul 29 08:42:39 2024 GMT Subject: CN=651790FFFC1688AFA384D136FC4792AD18879019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:df:bf:10:78:3a:49:b0:36:ba:cf:76:5d: e4:0b:8b:1b:e2:a5:eb:33:78:a2:dc:27:80:d1:97: cc:5b:84:26:97:88:ad:ec:c9:c4:68:66:b2:aa:1b: da:97:8b:00:c6:3f:f0:ea:7d:73:b6:dc:89:2a:11: 86:8b:30:93:cd:ee:48:bd:7a:65:40:1d:aa:41:27: ab:8a:31:fe:9a:37:ef:db:29:ee:33:8c:7e:e7:de: e5:f9:74:5b:a0:50:f0:bc:d5:61:22:92:4d:20:8a: 74:59:d9:f0:28:6a:0a:8e:1a:ec:37:39:77:a1:de: 37:5e:98:23:75:bb:9a:83:dc:11:b8:40:6b:c1:3b: b0:56:21:5c:7a:58:06:65:b1:e6:7d:15:67:9e:24: 75:62:60:4a:9e:bf:14:42:e7:76:ef:54:31:32:9e: e5:26:43:73:7d:82:8d:6c:6d:bf:a8:3e:a0:23:34: 82:41:9f:2e:d1:cc:84:78:59:9c:a3:a4:2e:1f:18: c9:e5:9c:b8:2c:16:fe:75:6c:c8:17:e0:6b:e9:18: 07:a6:79:86:30:e9:3e:a9:8b:16:c3:be:88:38:df: 5b:13:63:37:7e:3a:59:2f:1a:77:24:4c:9a:f6:7a: 27:84:21:fb:e9:6a:fb:30:4f:c3:2f:68:26:f3:f6: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.76.0/22 IPv6: 2402:5580::/32 Signature Algorithm: sha256WithRSAEncryption 8d:4f:fb:2d:fb:ae:cd:42:82:a0:a6:67:85:9e:d6:c9:5b:ad: 39:c3:79:a9:df:a3:09:a9:14:e2:c0:09:ca:1c:57:3a:da:11: e7:d8:1a:a7:04:c5:3d:16:89:1e:6d:f5:cd:7e:dd:18:23:de: 33:40:18:85:e7:07:65:86:bb:d0:cc:03:a9:d8:55:ef:4b:f5: b7:ff:0d:b5:fe:68:27:06:dd:cb:a2:bd:75:8d:74:1e:72:29: 22:a3:47:ac:04:35:fb:43:e2:36:fd:33:51:32:6b:60:4d:fa: b1:ee:02:64:97:20:52:67:d2:41:51:41:07:25:1a:31:14:61: eb:9c:4a:b2:cb:00:cf:7b:13:d0:a2:bc:ef:60:24:8e:98:ab: 25:f5:22:d3:c8:eb:00:09:14:8f:d4:14:63:6e:be:c7:c8:7c: 33:1d:10:12:d0:e1:ce:82:ba:21:f1:df:f1:de:52:01:63:74: f7:22:7a:a9:a6:18:9f:25:a4:e6:f3:70:e0:c5:d5:0d:ed:46: ea:b1:ba:e3:29:74:a3:00:88:01:66:d1:3e:cb:de:af:08:36: 88:0e:a8:32:b0:15:8e:fb:e6:bc:6a:94:a5:8f:f7:78:47:ce: ff:e3:0e:f3:d9:de:49:67:c3:f8:6a:4a:dd:5a:46:52:ad:eb: e7:bb:75:4b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUBBvU5bqRwxAv33JTsSbLo0UwuXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA4MzczOVoX DTI0MDcyOTA4NDIzOVowMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODRE MTM2RkM0NzkyQUQxODg3OTAxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8w378QeDpJsDa6z3Zd5AuLG+Kl6zN4otwngNGXzFuEJpeIrezJxGhmsqob 2peLAMY/8Op9c7bciSoRhoswk83uSL16ZUAdqkEnq4ox/po379sp7jOMfufe5fl0 W6BQ8LzVYSKSTSCKdFnZ8ChqCo4a7Dc5d6HeN16YI3W7moPcEbhAa8E7sFYhXHpY BmWx5n0VZ54kdWJgSp6/FELndu9UMTKe5SZDc32CjWxtv6g+oCM0gkGfLtHMhHhZ nKOkLh8YyeWcuCwW/nVsyBfga+kYB6Z5hjDpPqmLFsO+iDjfWxNjN346WS8adyRM mvZ6J4Qh++lq+zBPwy9oJvP2f40CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGUXkP/8Foivo4TRNvxHkq0Yh5AZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2ZjdlZjM0 LTQ5OTEtNGJiMS05NmI0LWJlNDNmMWVjYWJiNC8wLzY1MTc5MEZGRkMxNjg4QUZB Mzg0RDEzNkZDNDc5MkFEMTg4NzkwMTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnNUwwDQQCAAIwBwMFACQCVYAwDQYJKoZIhvcNAQELBQADggEBAI1P+y37rs1C gqCmZ4We1slbrTnDeanfowmpFOLACcocVzraEefYGqcExT0WiR5t9c1+3Rgj3jNA GIXnB2WGu9DMA6nYVe9L9bf/DbX+aCcG3cuivXWNdB5yKSKjR6wENftD4jb9M1Ey a2BN+rHuAmSXIFJn0kFRQQclGjEUYeucSrLLAM97E9CivO9gJI6YqyX1ItPI6wAJ FI/UFGNuvsfIfDMdEBLQ4c6CuiHx3/HeUgFjdPcieqmmGJ8lpObzcODF1Q3tRuqx uuMpdKMAiAFm0T7L3q8INogOqDKwFY775rxqlKWP93hHzv/jDvPZ3klnw/hqSt1a RlKt6+e7dUs= -----END CERTIFICATE-----Generated at Fri May 3 04:42:21 2024 by rpki-client on console-fra.rpki-client.org