$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer (raw, json) Hash identifier: zE4jH+D2H+hl6mICT/2Pl0sEkPmWz7vCzErLJLXZ1jY= Subject key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 323A445517814E2F2E0E59F0CDDD68FD1922E726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 May 2024 12:14:29 +0000 Certificate not after: Thu 08 May 2025 12:19:29 +0000 Subordinate resources: IP: 103.158.58.0/23 IP: 2406:b140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3a:44:55:17:81:4e:2f:2e:0e:59:f0:cd:dd:68:fd:19:22:e7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 9 12:14:29 2024 GMT Not After : May 8 12:19:29 2025 GMT Subject: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:8d:d9:a9:b5:3e:4b:a7:45:5d:d1:e9:64: 9a:1e:d0:a8:36:a9:2f:e9:2b:e2:00:0d:bc:40:21: a7:f3:cb:c3:64:95:42:c9:ad:51:00:ba:a7:2a:47: 5e:93:19:fb:a6:dc:ab:cb:34:83:0c:ff:3c:b7:c9: b4:63:ab:3d:d0:f2:3c:55:a5:e9:27:09:e5:a2:ca: 33:0b:46:f3:1c:20:b6:6f:15:bf:98:18:38:3e:34: b1:af:8e:cb:69:a9:d4:84:c2:4d:16:4a:21:2f:ac: b9:34:94:d5:c4:5e:58:be:c5:0a:22:0d:19:0b:23: cc:1e:ef:05:e8:7a:e3:8e:a4:af:32:72:d2:67:ad: 23:c7:61:8f:9d:7b:96:ff:c6:f6:98:1f:16:2c:1a: 22:99:90:16:68:69:d7:6b:6a:bb:d8:4f:87:b8:2c: 71:1d:45:52:58:cd:8c:c1:a6:d4:fe:d6:4e:d7:f3: 9b:4d:12:ac:95:a5:95:c1:f5:32:cb:db:49:50:41: df:4d:c2:a5:f0:bc:4d:51:33:69:98:8f:9c:cc:8c: 05:48:14:18:d5:be:af:8c:c1:10:06:22:ae:c1:45: 4d:cb:b5:65:78:1b:cb:87:4b:f3:f2:60:57:66:58: 39:8b:02:3b:95:fc:be:f5:31:5e:51:70:d1:e4:cc: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.58.0/23 IPv6: 2406:b140::/32 Signature Algorithm: sha256WithRSAEncryption 29:7d:a7:5a:02:d5:f4:77:12:d7:1b:75:67:23:17:31:d7:c5: b2:92:5a:1a:24:23:66:bc:b9:95:2e:3c:b4:17:70:ce:8f:d9: 73:fc:f5:6d:e0:2b:fb:98:fc:6e:22:72:40:b4:5e:bd:0c:01: 5d:99:32:22:73:37:0e:48:10:6f:b6:10:3c:b6:64:b2:9f:63: 04:b4:ea:19:81:f5:73:6e:5c:49:08:9a:c3:93:cb:ef:fc:af: 0e:eb:ae:8d:03:5f:89:1d:5a:89:b7:8c:db:95:77:75:83:07: 32:45:ad:4c:fc:18:5d:42:de:03:2a:e7:cb:37:de:e3:b4:83: a2:ed:4a:ff:50:2b:ce:b9:09:14:94:55:bc:39:21:e6:89:5b: c1:63:e8:0d:4a:5e:45:e9:bf:4b:97:3e:a6:33:6e:38:e9:6d: a2:07:cf:fe:0c:49:99:3b:5e:e8:1d:c2:c0:e7:9c:a3:59:ad: 04:71:0c:a6:04:52:f7:07:e1:08:ef:29:6b:43:01:f7:23:07: ea:66:46:65:32:72:7b:6c:a8:ec:10:e0:d9:c5:1b:fa:5c:a8: 5c:82:66:65:9d:77:55:57:5c:3a:66:1b:d0:7a:f6:0c:94:16: 1a:86:bc:64:30:dd:07:f0:ee:0c:d8:40:4c:64:70:1a:c2:33: cf:14:bc:4e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUMjpEVReBTi8uDlnwzd1o/Rki5yYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwOTEyMTQyOVoX DTI1MDUwODEyMTkyOVowMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZB REE0QzcwQTQzQ0FBODIzNzQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsfjdmptT5Lp0Vd0elkmh7QqDapL+kr4gANvEAhp/PLw2SVQsmtUQC6pypH XpMZ+6bcq8s0gwz/PLfJtGOrPdDyPFWl6ScJ5aLKMwtG8xwgtm8Vv5gYOD40sa+O y2mp1ITCTRZKIS+suTSU1cReWL7FCiINGQsjzB7vBeh6446krzJy0metI8dhj517 lv/G9pgfFiwaIpmQFmhp12tqu9hPh7gscR1FUljNjMGm1P7WTtfzm00SrJWllcH1 MsvbSVBB303CpfC8TVEzaZiPnMyMBUgUGNW+r4zBEAYirsFFTcu1ZXgby4dL8/Jg V2ZYOYsCO5X8vvUxXlFw0eTMr48CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHidt4n+GfHwuSatpMcKQ8qoI3RpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzRkNzZi LTViMTYtNGFiNS1hYmNmLWU0YTg2MDdhMjhiMi8wLzc4OURCNzg5RkUxOUYxRjBC OTI2QURBNEM3MEE0M0NBQTgyMzc0NjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnjowDQQCAAIwBwMFACQGsUAwDQYJKoZIhvcNAQELBQADggEBACl9p1oC1fR3 EtcbdWcjFzHXxbKSWhokI2a8uZUuPLQXcM6P2XP89W3gK/uY/G4ickC0Xr0MAV2Z MiJzNw5IEG+2EDy2ZLKfYwS06hmB9XNuXEkImsOTy+/8rw7rro0DX4kdWom3jNuV d3WDBzJFrUz8GF1C3gMq58s33uO0g6LtSv9QK865CRSUVbw5IeaJW8Fj6A1KXkXp v0uXPqYzbjjpbaIHz/4MSZk7XugdwsDnnKNZrQRxDKYEUvcH4QjvKWtDAfcjB+pm RmUycntsqOwQ4NnFG/pcqFyCZmWdd1VXXDpmG9B69gyUFhqGvGQw3Qfw7gzYQExk cBrCM88UvE4= -----END CERTIFICATE-----Generated at Sat May 11 01:27:04 2024 by rpki-client on console-ams.rpki-client.org