$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer File: 10B7822CA22013D1B3095AB974949FD98A76025C.cer (raw, json) Hash identifier: uHX4WchCnTeFzFn7alv3QknkDX3XByHSx1a16suqbLY= Subject key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5ACBF913A9FFD9442D61228D7EA38C0D8B1DD7F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft caRepository: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 20 Oct 2024 08:16:13 +0000 Certificate not after: Sun 19 Oct 2025 08:21:13 +0000 Subordinate resources: IP: 103.145.226.0/23 IP: 2001:df2:2f80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cb:f9:13:a9:ff:d9:44:2d:61:22:8d:7e:a3:8c:0d:8b:1d:d7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 20 08:16:13 2024 GMT Not After : Oct 19 08:21:13 2025 GMT Subject: CN=10B7822CA22013D1B3095AB974949FD98A76025C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:c6:c2:53:e3:fa:78:f6:8a:5c:fc:68:59: f4:ed:91:2e:af:35:39:df:b3:55:43:cd:56:8c:f7: c1:53:67:db:07:89:10:e5:f8:34:95:28:63:4c:c2: 73:39:17:2e:47:02:c8:ca:9d:49:88:f8:d4:68:0d: c0:e6:0f:6e:2c:0c:6d:2a:7d:95:5f:02:ee:d4:e8: f4:9a:d6:0b:be:02:11:02:05:5c:c0:3a:62:b1:5c: fe:bf:32:fb:18:7c:68:83:32:a8:11:f8:b9:c2:f7: f5:37:fc:93:18:a7:b6:cc:a9:56:f2:59:03:ba:15: 0d:58:6c:dd:bf:0a:51:b6:63:c9:8e:eb:61:e2:6d: bf:1a:c8:b7:e5:15:8e:c3:b9:60:7e:9b:96:e6:04: d9:07:aa:32:a6:f6:5b:9d:5f:7a:5b:b6:73:0f:2b: a8:f2:cf:9d:ff:7e:1f:b5:2a:c5:c0:ab:41:f8:66: 47:91:24:a9:e2:3f:6e:e0:92:59:c5:fe:3e:d2:2f: 67:b2:ec:47:c4:16:c9:25:03:50:11:dd:b4:13:50: b8:a1:83:fd:f1:03:c6:21:3d:e2:69:21:81:be:12: 55:2d:7b:ec:a8:4d:5a:ee:e5:f1:99:85:18:8e:cf: 8d:8c:c8:05:fc:48:f7:b9:8d:e3:01:c6:f3:e4:af: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.226.0/23 IPv6: 2001:df2:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 4e:b1:45:c8:db:a5:5c:b5:71:3f:09:60:bd:c8:4d:db:dd:ce: 3f:8c:8c:b0:00:5f:b6:4e:c7:b8:95:41:9e:30:9c:5d:2a:3c: 23:a9:c1:54:38:ae:b8:6b:cd:9d:05:5b:0d:04:a6:08:a2:9f: 78:c7:65:08:1e:e2:16:28:f6:61:e9:50:01:e0:f8:6f:cb:4d: 3b:21:59:3c:38:68:46:22:f8:2d:94:b4:d4:ee:61:8d:dd:5a: 38:ee:52:67:9b:1e:3b:16:98:18:4d:f0:a2:11:0b:c0:be:81: 8f:f5:52:f9:78:69:d9:d7:37:b4:9c:49:98:77:c2:ae:ef:0c: 92:51:98:bf:f0:f5:52:6e:82:b5:ca:07:6e:38:dc:73:ce:3d: b6:39:04:28:2c:a0:27:11:67:53:03:85:c5:1c:f5:5a:80:0e: c1:55:a2:b6:1a:23:e0:8f:da:a8:05:d8:c3:6c:cc:bc:ac:2a: 04:77:1e:0c:73:08:df:2c:40:3f:7f:09:8a:bb:59:8b:3b:34: 43:14:6e:39:c4:12:19:ae:9c:28:70:bb:b8:3c:8b:39:c6:ef: f0:6b:86:42:10:a9:c6:6f:2a:76:01:0a:46:08:61:26:ea:fe: 5c:0d:93:90:63:f5:32:16:60:eb:a6:87:2e:9e:1f:24:f3:ab: 71:4a:6d:79 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUWsv5E6n/2UQtYSKNfqOMDYsd1/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMDA4MTYxM1oX DTI1MTAxOTA4MjExM1owMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1 QUI5NzQ5NDlGRDk4QTc2MDI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAgxsJT4/p49opc/GhZ9O2RLq81Od+zVUPNVoz3wVNn2weJEOX4NJUoY0zC czkXLkcCyMqdSYj41GgNwOYPbiwMbSp9lV8C7tTo9JrWC74CEQIFXMA6YrFc/r8y +xh8aIMyqBH4ucL39Tf8kxintsypVvJZA7oVDVhs3b8KUbZjyY7rYeJtvxrIt+UV jsO5YH6bluYE2QeqMqb2W51felu2cw8rqPLPnf9+H7UqxcCrQfhmR5EkqeI/buCS WcX+PtIvZ7LsR8QWySUDUBHdtBNQuKGD/fEDxiE94mkhgb4SVS177KhNWu7l8ZmF GI7PjYzIBfxI97mN4wHG8+SviaUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBC3giyiIBPRswlauXSUn9mKdgJcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0MDAyOWM3 LTc0MmMtNGRhOC1iMmVlLWQ2MjlhZTc4YmYwMS8wLzEwQjc4MjJDQTIyMDEzRDFC MzA5NUFCOTc0OTQ5RkQ5OEE3NjAyNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkeIwDwQCAAIwCQMHACABDfIvgDANBgkqhkiG9w0BAQsFAAOCAQEATrFFyNul XLVxPwlgvchN293OP4yMsABftk7HuJVBnjCcXSo8I6nBVDiuuGvNnQVbDQSmCKKf eMdlCB7iFij2YelQAeD4b8tNOyFZPDhoRiL4LZS01O5hjd1aOO5SZ5seOxaYGE3w ohELwL6Bj/VS+Xhp2dc3tJxJmHfCru8MklGYv/D1Um6CtcoHbjjcc849tjkEKCyg JxFnUwOFxRz1WoAOwVWithoj4I/aqAXYw2zMvKwqBHceDHMI3yxAP38JirtZizs0 QxRuOcQSGa6cKHC7uDyLOcbv8GuGQhCpxm8qdgEKRghhJur+XA2TkGP1MhZg66aH Lp4fJPOrcUpteQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org