$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer (raw, json) Hash identifier: nScHXJ23J7a/bfo5lecpaBGeMq0SvT9f4Vvo1MNW4SI= Subject key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0CA0A9F182E309D840391210F48248746E796431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft caRepository: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Jul 2024 13:52:13 +0000 Certificate not after: Sat 19 Jul 2025 13:57:13 +0000 Subordinate resources: IP: 103.174.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a0:a9:f1:82:e3:09:d8:40:39:12:10:f4:82:48:74:6e:79:64:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 13:52:13 2024 GMT Not After : Jul 19 13:57:13 2025 GMT Subject: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:0d:38:4b:1c:0d:89:69:33:b6:6f:3e:d7: 16:b2:1d:da:2e:25:c8:5d:aa:ce:42:30:04:ff:66: c4:6e:42:a2:be:4d:c5:f3:aa:3b:e5:de:3b:bf:aa: fb:14:d9:73:7f:90:4f:76:9e:f6:5c:4a:fd:16:9f: 12:97:ca:d1:fb:1a:e8:c5:3f:f4:9f:c4:6a:40:0a: 32:20:9b:61:6f:34:e2:c8:10:0f:30:cd:b1:4c:ec: 87:45:87:fb:c9:f5:33:f1:45:3e:b3:31:ac:fb:81: 5e:1c:3e:5f:97:40:1d:6a:28:7a:db:e8:84:d4:08: bf:11:83:7c:6f:0d:0b:8f:91:da:9c:64:6b:05:d9: 2f:6c:2f:1f:f0:97:80:a8:22:d3:32:55:24:fb:67: 98:f8:1c:01:97:e9:db:24:f4:2d:b8:3a:2f:50:cb: f7:05:3b:8b:b3:e8:95:e3:95:6f:ab:82:ab:d9:85: df:fa:e7:c6:d0:6e:c6:9b:f5:ff:86:49:e0:ae:65: 6f:52:a3:e3:00:2f:b1:dd:fd:d3:7e:ee:de:16:c9: 6a:d0:a4:d8:81:01:c9:d7:d0:1a:25:fc:72:51:de: b0:1e:9f:5a:f8:10:dc:fd:2a:90:08:be:d4:50:a9: c3:17:40:65:0a:bc:00:a7:47:28:74:ef:c8:5d:b0: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.24.0/23 Signature Algorithm: sha256WithRSAEncryption 45:13:ed:23:df:81:b2:36:5d:34:b0:3f:cd:b1:a8:aa:3f:6d: a6:b2:7e:02:0a:c0:00:88:53:d8:bd:57:81:f0:a5:5e:b9:47: 19:4f:19:d8:7e:df:94:8f:98:0f:30:68:f1:00:f4:6a:2f:df: 23:5c:bf:d5:21:6b:66:ec:b5:31:11:89:92:d1:70:77:fc:af: 9f:2e:3c:18:12:e1:e9:c6:31:47:8b:6a:34:92:1e:a7:0a:6a: 1e:ef:b7:c7:b8:11:fd:cf:1e:de:dd:e6:bb:c6:61:f8:e5:7f: b7:96:db:93:2d:4f:ee:e3:a9:2c:e1:7e:67:14:2d:0a:c1:84: a3:b0:90:5d:eb:19:12:0e:a9:da:be:d1:d7:00:f4:27:ff:74: 19:7d:71:eb:b3:f5:5d:be:cc:d7:89:3b:9a:06:fd:1f:e5:62: 7f:8b:65:1c:0e:a2:7e:cb:5e:a6:f9:dd:25:f3:c0:2d:a2:9b: f2:d3:b5:6d:1f:99:b2:57:62:97:2f:7b:7d:7c:f0:a8:31:b1: f6:bb:66:41:4f:62:89:e4:c7:e1:cc:31:2c:78:af:6f:88:36: 50:07:d3:6b:64:1b:92:0a:6d:a2:5c:29:93:c8:0e:bc:84:91: 8d:0e:5c:ec:69:16:b3:f8:48:ca:af:71:ea:5d:c4:ce:47:ca: 08:74:f6:e0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDKCp8YLjCdhAORIQ9IJIdG55ZDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyMDEzNTIxM1oX DTI1MDcxOTEzNTcxM1owMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0 REZCQzVDNTM5QUNCMDRGRENCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg/DThLHA2JaTO2bz7XFrId2i4lyF2qzkIwBP9mxG5Cor5NxfOqO+XeO7+q +xTZc3+QT3ae9lxK/RafEpfK0fsa6MU/9J/EakAKMiCbYW804sgQDzDNsUzsh0WH +8n1M/FFPrMxrPuBXhw+X5dAHWooetvohNQIvxGDfG8NC4+R2pxkawXZL2wvH/CX gKgi0zJVJPtnmPgcAZfp2yT0Lbg6L1DL9wU7i7PoleOVb6uCq9mF3/rnxtBuxpv1 /4ZJ4K5lb1Kj4wAvsd39037u3hbJatCk2IEBydfQGiX8clHesB6fWvgQ3P0qkAi+ 1FCpwxdAZQq8AKdHKHTvyF2wjkMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMYB73ar5ftciFN+8XFOaywT9y+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmMjViOTY4 LTA5MjctNDU5NC04ODdlLTY3ZjUzZjk2N2IxMi8wLzEzMTgwN0JEREFBRjk3RUQ3 MjIxNERGQkM1QzUzOUFDQjA0RkRDQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhgwDQYJKoZIhvcNAQELBQADggEBAEUT7SPfgbI2XTSwP82xqKo/baayfgIK wACIU9i9V4HwpV65RxlPGdh+35SPmA8waPEA9Gov3yNcv9Uha2bstTERiZLRcHf8 r58uPBgS4enGMUeLajSSHqcKah7vt8e4Ef3PHt7d5rvGYfjlf7eW25MtT+7jqSzh fmcULQrBhKOwkF3rGRIOqdq+0dcA9Cf/dBl9ceuz9V2+zNeJO5oG/R/lYn+LZRwO on7LXqb53SXzwC2im/LTtW0fmbJXYpcve3188Kgxsfa7ZkFPYonkx+HMMSx4r2+I NlAH02tkG5IKbaJcKZPIDryEkY0OXOxpFrP4SMqvcepdxM5Hygh09uA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org