$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer File: 019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer (raw, json) Hash identifier: ogv5Rvw2UYR2tRjFpO9r6ifoR1jBy0hh4SOmUdLXbYQ= Subject key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A7DC86448D689B64CA97C3EC06AD3C68D200B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:02:35 +0000 Certificate not after: Mon 30 Jun 2025 18:07:35 +0000 Subordinate resources: IP: 27.54.116.0/22 IP: 103.11.21.0/24 IP: 103.11.222.0/24 IP: 103.16.136.0/22 IP: 103.23.141.0/24 IP: 103.225.171.0 -- 103.225.173.255 IP: 2400:9c80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7d:c8:64:48:d6:89:b6:4c:a9:7c:3e:c0:6a:d3:c6:8d:20:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 18:02:35 2024 GMT Not After : Jun 30 18:07:35 2025 GMT Subject: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:2c:fd:6d:fd:f0:30:f0:11:02:ba:59:96: ee:2e:01:cc:a6:45:43:a5:c7:6b:01:bc:5e:4d:a3: bd:21:dc:81:f9:37:61:f5:79:68:19:c9:f7:4e:26: 9a:ad:7c:a0:0e:7a:e9:35:b5:06:25:f9:14:10:09: 52:f5:98:de:05:12:12:bb:f1:37:86:e5:07:de:01: c3:38:72:24:21:0f:37:a2:a6:7f:40:fb:7b:22:52: 85:86:18:49:1e:cc:c5:86:1a:ab:e4:6a:07:d0:f4: 4f:c5:1d:fa:a4:58:ee:7a:2c:d2:6a:03:b5:01:f8: 71:eb:7c:fb:0c:0d:7a:c9:3f:36:05:81:53:d5:ad: f1:f6:6a:df:5a:78:15:de:fe:1a:ae:01:a4:d5:5c: 3d:91:c5:ca:bb:ae:b8:4c:54:3a:74:6f:50:95:68: e1:67:02:ae:ed:0f:33:af:92:e3:b0:60:05:09:18: a8:65:3d:8f:77:41:37:17:cb:f7:75:87:e2:22:3c: ca:d2:d3:cf:15:1c:fa:2a:0c:78:fc:02:9b:50:14: 55:3b:a5:0e:19:a4:fd:07:0e:57:f9:51:61:1b:c9: b5:e0:77:b2:27:9d:f0:aa:46:c5:70:10:70:aa:ce: 7a:d5:6c:25:ed:56:3f:53:02:52:6b:dd:2c:42:f5: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.54.116.0/22 103.11.21.0/24 103.11.222.0/24 103.16.136.0/22 103.23.141.0/24 103.225.171.0-103.225.173.255 IPv6: 2400:9c80::/32 Signature Algorithm: sha256WithRSAEncryption 00:e9:b9:8a:20:fe:98:ab:0f:de:b4:16:39:53:0f:bc:8c:eb: e8:35:de:c2:34:1c:ba:bb:0a:45:5a:ad:3e:ef:b1:c8:34:8e: 4f:e1:6e:7b:ff:4d:ba:8d:fc:37:5a:64:b2:f5:66:0b:7f:74: 83:a6:c8:df:a5:ca:aa:1c:55:c0:f3:97:2f:88:4d:a4:35:bb: 24:ef:2e:16:8f:1b:60:99:c4:03:48:fe:b9:b1:28:61:2e:df: b2:2e:9d:d9:d4:93:c3:da:30:87:51:33:8f:82:6e:49:16:99: 1e:06:da:df:7b:aa:93:d3:4f:9c:56:fa:35:8f:c0:57:29:56: 84:16:c0:c9:ff:4e:e5:b3:e0:da:b4:8b:dc:2b:f3:96:a8:21: d6:ea:ac:8e:9e:a1:a7:94:1c:52:e0:a9:b3:da:d3:15:10:b8: 6b:aa:62:13:f6:87:f6:1f:00:27:60:3e:f1:e1:9b:11:08:3c: 97:f9:78:83:ae:a8:ca:86:89:80:1e:9d:9b:2c:c0:f6:3e:20: a4:34:10:88:9f:97:1c:a9:45:a7:43:54:5f:45:ad:79:16:b7: 4a:8b:44:57:68:01:61:38:32:2b:42:68:1c:79:63:9a:76:71: 64:7b:3a:f1:f1:36:43:1a:24:a5:8a:b1:52:19:77:fe:7b:d0: 47:df:14:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWn3IZEjWibZMqXw+wGrTxo0gC0YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4MDIzNVoX DTI1MDYzMDE4MDczNVowMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJC MDlGRDg1NkNERDA1N0NFQUQ4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBELP1t/fAw8BECulmW7i4BzKZFQ6XHawG8Xk2jvSHcgfk3YfV5aBnJ904m mq18oA566TW1BiX5FBAJUvWY3gUSErvxN4blB94BwzhyJCEPN6Kmf0D7eyJShYYY SR7MxYYaq+RqB9D0T8Ud+qRY7nos0moDtQH4cet8+wwNesk/NgWBU9Wt8fZq31p4 Fd7+Gq4BpNVcPZHFyruuuExUOnRvUJVo4WcCru0PM6+S47BgBQkYqGU9j3dBNxfL 93WH4iI8ytLTzxUc+ioMePwCm1AUVTulDhmk/QcOV/lRYRvJteB3sied8KpGxXAQ cKrOetVsJe1WP1MCUmvdLEL1Gn0CAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAGcTibuwlLqYfuwn9hWzdBXzq2MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1 LTI4MmUtNDU3Zi1iODllLTA0MWJmOTExMGFmOC8wLzAxOUM0RTI2RUVDMjUyRUE2 MUZCQjA5RkQ4NTZDREQwNTdDRUFEOEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUHAQcBAf8ERTBDMDIEAgABMCwD BAIbNnQDBABnCxUDBABnC94DBAJnEIgDBABnF40wDAMEAGfhqwMEAWfhrDANBAIA AjAHAwUAJACcgDANBgkqhkiG9w0BAQsFAAOCAQEAAOm5iiD+mKsP3rQWOVMPvIzr 6DXewjQcursKRVqtPu+xyDSOT+Fue/9Nuo38N1pksvVmC390g6bI36XKqhxVwPOX L4hNpDW7JO8uFo8bYJnEA0j+ubEoYS7fsi6d2dSTw9owh1Ezj4JuSRaZHgba33uq k9NPnFb6NY/AVylWhBbAyf9O5bPg2rSL3Cvzlqgh1uqsjp6hp5QcUuCps9rTFRC4 a6piE/aH9h8AJ2A+8eGbEQg8l/l4g66oyoaJgB6dmyzA9j4gpDQQiJ+XHKlFp0NU X0WteRa3SotEV2gBYTgyK0JoHHljmnZxZHs68fE2QxokpYqxUhl3/nvQR98UTg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org