$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer File: 00C1EB3BEE971CEAB531D756361F934BE0179628.cer (raw, json) Hash identifier: 8MWUy2qwDgq3P+6sWv8mn7lU50G1Nkp9Ho48p72LCjs= Subject key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71D77E71EDA76EBEDBC36F08008ED3E52ED59B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft caRepository: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 Aug 2024 15:32:45 +0000 Certificate not after: Thu 21 Aug 2025 15:37:45 +0000 Subordinate resources: IP: 103.76.106.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d7:7e:71:ed:a7:6e:be:db:c3:6f:08:00:8e:d3:e5:2e:d5:9b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 15:32:45 2024 GMT Not After : Aug 21 15:37:45 2025 GMT Subject: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:cf:dd:5f:72:34:46:ef:71:82:7c:d9:6b: 60:2d:2c:03:a0:0c:ec:27:e7:83:d0:8b:d6:52:fb: fb:b5:c9:32:c3:ba:8f:e1:e9:e9:0d:38:3f:70:40: 49:cb:02:02:b6:7a:ee:fa:4a:d0:49:73:03:93:56: 24:22:f1:f7:37:9c:00:4d:95:3a:c3:b1:51:b3:93: ba:85:3e:25:1b:0c:9c:20:be:e0:c6:de:7b:09:ad: 0d:43:19:3c:9e:d2:12:5d:79:e5:bd:d4:5d:fe:13: 4f:94:c0:6a:3f:ab:6a:b2:8a:78:16:24:4a:56:37: 1b:2d:1e:3d:fd:81:47:09:32:0f:57:7f:d6:a8:93: 14:35:93:99:56:4a:84:a9:9c:dd:04:b6:25:77:0e: 29:6c:30:b2:bb:46:c5:3a:9f:1a:5b:30:fa:e2:ff: 89:50:25:b5:7d:e0:33:6d:ca:ae:ad:a4:56:c2:cc: 6a:eb:a6:01:5b:c0:5d:ed:6d:96:81:97:6f:9e:82: 95:44:1b:11:20:81:39:0e:e3:44:a2:30:35:fd:cf: 14:cb:5c:14:97:5d:ef:f2:41:bb:52:ec:5a:5d:27: c7:52:b1:34:cd:97:d3:83:e5:da:41:9e:e2:12:7a: 56:1d:54:e7:2c:4f:0b:44:7d:fa:9e:77:02:1b:13: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.106.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:a3:cd:97:0e:eb:6f:43:29:0a:b1:df:44:23:7d:f9:83:5f: 8e:85:22:90:9e:4f:df:3d:ec:88:d9:df:1b:90:76:69:54:00: e0:70:b1:bc:ce:e5:e2:41:18:73:a2:eb:36:9f:ed:0b:43:06: 79:2d:d4:a5:dd:c3:e9:5c:1b:b1:6e:15:9f:d3:a3:ac:44:68: ee:dd:8f:81:d9:26:46:bf:2d:f1:95:aa:da:cb:c3:06:40:aa: f3:13:34:26:72:e9:d1:85:0e:a3:b5:0a:85:c1:fb:c1:4f:4a: c7:89:91:88:cf:7d:d1:43:34:a0:eb:8a:6f:a3:1b:84:da:6d: 35:de:de:fa:a2:b4:02:f6:46:08:cd:1a:57:e7:09:31:df:1a: 62:b5:e4:78:fc:30:ff:b0:08:a7:a6:b6:f4:16:85:3f:51:bf: 2a:d8:d7:75:93:ec:de:bb:92:df:5c:3e:5d:3a:78:6b:ec:22: 71:5f:a1:64:8e:b9:21:c9:9c:8f:53:d6:d6:4c:53:71:15:b2: 51:d6:2d:c6:da:10:34:b1:c7:c1:0a:ca:fc:d9:d7:67:c0:74: 6f:e6:ca:b3:f6:4e:77:09:33:bf:8a:4c:25:68:b4:38:ac:e1: 32:c1:c5:02:f6:40:a8:8b:5e:a7:32:9f:50:37:8c:06:eb:fd: 27:06:a4:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcdd+ce2nbr7bw28IAI7T5S7Vm2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMjE1MzI0NVoX DTI1MDgyMTE1Mzc0NVowMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFE NzU2MzYxRjkzNEJFMDE3OTYyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkJz91fcjRG73GCfNlrYC0sA6AM7Cfng9CL1lL7+7XJMsO6j+Hp6Q04P3BA ScsCArZ67vpK0ElzA5NWJCLx9zecAE2VOsOxUbOTuoU+JRsMnCC+4MbeewmtDUMZ PJ7SEl155b3UXf4TT5TAaj+rarKKeBYkSlY3Gy0ePf2BRwkyD1d/1qiTFDWTmVZK hKmc3QS2JXcOKWwwsrtGxTqfGlsw+uL/iVAltX3gM23Krq2kVsLMauumAVvAXe1t loGXb56ClUQbESCBOQ7jRKIwNf3PFMtcFJdd7/JBu1LsWl0nx1KxNM2X04Pl2kGe 4hJ6Vh1U5yxPC0R9+p53AhsTCwcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFADB6zvulxzqtTHXVjYfk0vgF5YoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3MjBjZTc2 LWRiNzUtNDY1MS04NWIwLTBiZmIxOGUwYjE3NS8wLzAwQzFFQjNCRUU5NzFDRUFC NTMxRDc1NjM2MUY5MzRCRTAxNzk2MjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnTGowDQYJKoZIhvcNAQELBQADggEBAGyjzZcO629DKQqx30QjffmDX46FIpCe T9897IjZ3xuQdmlUAOBwsbzO5eJBGHOi6zaf7QtDBnkt1KXdw+lcG7FuFZ/To6xE aO7dj4HZJka/LfGVqtrLwwZAqvMTNCZy6dGFDqO1CoXB+8FPSseJkYjPfdFDNKDr im+jG4TabTXe3vqitAL2RgjNGlfnCTHfGmK15Hj8MP+wCKemtvQWhT9RvyrY13WT 7N67kt9cPl06eGvsInFfoWSOuSHJnI9T1tZMU3EVslHWLcbaEDSxx8EKyvzZ12fA dG/myrP2TncJM7+KTCVotDis4TLBxQL2QKiLXqcyn1A3jAbr/ScGpGY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org