$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer File: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer (raw, json) Hash identifier: DbQthcYbHSH3f1bhP5nmDSHc5/LFpd03Pf8ZUNXyqfw= Subject key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44D60DC9E216C39850984D1F1AE1D233918D045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft caRepository: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 06 Apr 2024 22:46:37 +0000 Certificate not after: Sat 05 Apr 2025 22:51:37 +0000 Subordinate resources: IP: 103.160.136.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d6:0d:c9:e2:16:c3:98:50:98:4d:1f:1a:e1:d2:33:91:8d:04:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 22:46:37 2024 GMT Not After : Apr 5 22:51:37 2025 GMT Subject: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:b2:2b:ee:05:d0:ff:69:70:ab:a8:08:e4: 39:1a:8e:3a:f8:aa:31:9c:bf:8c:41:49:48:b8:95: 2f:60:fa:03:ba:76:6f:e8:b1:cf:42:59:d1:39:d4: 3e:9d:5b:36:9b:cb:5a:84:4d:f5:91:fb:f1:e8:aa: e7:de:9f:33:37:26:aa:98:8d:3d:75:b6:40:de:a4: 49:cc:c7:cc:23:d7:77:95:f4:f1:48:e7:f5:4a:19: 95:e4:fa:91:17:df:ae:c8:b5:b9:ce:a1:a5:8f:15: 70:d0:a3:b6:81:9d:97:1e:dc:dc:dd:6d:9e:71:a1: 38:68:e2:e3:94:ae:07:fe:d7:b1:21:b1:2a:c2:5f: ee:90:ad:13:45:b3:ae:78:a1:fe:a5:54:61:ea:bf: dd:7d:c2:95:d5:38:be:18:eb:32:90:55:c0:8c:4d: d9:1c:1e:0d:30:94:4b:84:a1:36:3b:ed:a9:ec:e1: 1a:1e:3d:35:a0:d8:ab:c0:28:4a:12:45:db:4e:3b: 8b:8e:98:43:a6:45:a3:08:49:74:fe:5d:b7:1f:4a: 51:6b:33:a5:3b:cb:4a:0c:67:f8:f9:19:b1:55:c2: d7:c3:0d:98:cb:5e:a2:7f:2a:ee:1f:49:37:65:32: 84:67:38:8a:f9:71:79:5d:bd:08:92:16:83:b6:6e: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.136.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f4:16:87:68:5a:84:04:82:57:0e:2d:03:d9:56:41:d5:73: 3d:bb:c4:74:63:97:91:55:5b:b2:ab:0d:86:1d:60:ee:ac:2c: e6:60:cf:e9:28:88:19:97:07:ee:8e:cc:f9:3c:69:d6:0f:d3: 80:4c:c0:96:6d:8a:12:f5:68:73:75:cf:04:4b:19:35:b3:f0: 6c:2e:12:1d:09:f9:90:c4:74:c9:51:a4:97:70:d6:94:b0:29: a5:4b:90:87:59:0b:a6:17:47:9f:a4:71:29:82:d5:e9:d4:be: 25:da:49:7c:11:91:e5:15:28:78:c8:ee:83:54:38:ad:0c:89: e2:a0:c7:ee:f4:4c:71:da:a3:e3:ca:57:e0:18:f9:35:27:91: 2a:93:27:56:17:53:04:26:93:ea:ce:f1:9b:c1:aa:15:e2:54: ec:46:45:c6:d0:24:66:11:4b:f3:29:47:04:e2:64:16:5a:da: 2d:70:48:06:e6:50:ac:28:bc:50:55:c8:a9:2c:d3:b2:7c:2b: d4:87:12:12:13:be:27:e4:25:92:77:ae:a1:69:a2:5d:80:24: 4f:e1:c5:d2:d1:52:3e:be:05:a4:f0:82:36:95:ca:06:26:39: f1:99:96:10:4a:19:7d:d7:c1:a3:64:c6:39:79:6c:2c:a7:75: 53:32:26:9f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURNYNyeIWw5hQmE0fGuHSM5GNBFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNjIyNDYzN1oX DTI1MDQwNTIyNTEzN1owMzExMC8GA1UEAxMoMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFC Q0FBRDYyNjA3MkNBQkVBNUMxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWwsivuBdD/aXCrqAjkORqOOviqMZy/jEFJSLiVL2D6A7p2b+ixz0JZ0TnU Pp1bNpvLWoRN9ZH78eiq596fMzcmqpiNPXW2QN6kSczHzCPXd5X08Ujn9UoZleT6 kRffrsi1uc6hpY8VcNCjtoGdlx7c3N1tnnGhOGji45SuB/7XsSGxKsJf7pCtE0Wz rnih/qVUYeq/3X3CldU4vhjrMpBVwIxN2RweDTCUS4ShNjvtqezhGh49NaDYq8Ao ShJF2047i46YQ6ZFowhJdP5dtx9KUWszpTvLSgxn+PkZsVXC18MNmMteon8q7h9J N2UyhGc4ivlxeV29CJIWg7Zu8scCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAdHlEWs+1BEs6G8qtYmByyr6lwQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMWVlZDA5Yy02MDY4LTQwN2EtYjBhNi01OWI3ZDBiODc4NTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxZWVkMDlj LTYwNjgtNDA3YS1iMGE2LTU5YjdkMGI4Nzg1NS8wLzA3NDc5NDQ1QUNGQjUwNDRC M0ExQkNBQUQ2MjYwNzJDQUJFQTVDMTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoIgwDQYJKoZIhvcNAQELBQADggEBAJP0FodoWoQEglcOLQPZVkHVcz27xHRj l5FVW7KrDYYdYO6sLOZgz+koiBmXB+6OzPk8adYP04BMwJZtihL1aHN1zwRLGTWz 8GwuEh0J+ZDEdMlRpJdw1pSwKaVLkIdZC6YXR5+kcSmC1enUviXaSXwRkeUVKHjI 7oNUOK0MieKgx+70THHao+PKV+AY+TUnkSqTJ1YXUwQmk+rO8ZvBqhXiVOxGRcbQ JGYRS/MpRwTiZBZa2i1wSAbmUKwovFBVyKks07J8K9SHEhITvifkJZJ3rqFpol2A JE/hxdLRUj6+BaTwgjaVygYmOfGZlhBKGX3XwaNkxjl5bCyndVMyJp8= -----END CERTIFICATE-----Generated at Wed May 8 17:45:15 2024 by rpki-client on console-ams.rpki-client.org