$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer (raw, json) Hash identifier: aRK3hVEQaK/U2Qh8W5kCtg65OQ/f7WyEEKKEVjW/wRI= Subject key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 547F7419588C69923F730317B7E059EAF98697A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft caRepository: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Aug 2023 09:12:41 +0000 Certificate not after: Sat 17 Aug 2024 09:17:41 +0000 Subordinate resources: IP: 103.174.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7f:74:19:58:8c:69:92:3f:73:03:17:b7:e0:59:ea:f9:86:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 09:12:41 2023 GMT Not After : Aug 17 09:17:41 2024 GMT Subject: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:0d:38:4b:1c:0d:89:69:33:b6:6f:3e:d7: 16:b2:1d:da:2e:25:c8:5d:aa:ce:42:30:04:ff:66: c4:6e:42:a2:be:4d:c5:f3:aa:3b:e5:de:3b:bf:aa: fb:14:d9:73:7f:90:4f:76:9e:f6:5c:4a:fd:16:9f: 12:97:ca:d1:fb:1a:e8:c5:3f:f4:9f:c4:6a:40:0a: 32:20:9b:61:6f:34:e2:c8:10:0f:30:cd:b1:4c:ec: 87:45:87:fb:c9:f5:33:f1:45:3e:b3:31:ac:fb:81: 5e:1c:3e:5f:97:40:1d:6a:28:7a:db:e8:84:d4:08: bf:11:83:7c:6f:0d:0b:8f:91:da:9c:64:6b:05:d9: 2f:6c:2f:1f:f0:97:80:a8:22:d3:32:55:24:fb:67: 98:f8:1c:01:97:e9:db:24:f4:2d:b8:3a:2f:50:cb: f7:05:3b:8b:b3:e8:95:e3:95:6f:ab:82:ab:d9:85: df:fa:e7:c6:d0:6e:c6:9b:f5:ff:86:49:e0:ae:65: 6f:52:a3:e3:00:2f:b1:dd:fd:d3:7e:ee:de:16:c9: 6a:d0:a4:d8:81:01:c9:d7:d0:1a:25:fc:72:51:de: b0:1e:9f:5a:f8:10:dc:fd:2a:90:08:be:d4:50:a9: c3:17:40:65:0a:bc:00:a7:47:28:74:ef:c8:5d:b0: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.24.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:33:a9:97:24:62:b0:01:f1:30:58:84:d9:56:92:14:99:d6: a2:db:5e:d1:1b:85:ae:c0:c3:d8:ab:b2:5c:96:67:90:b1:47: ee:2b:11:64:5e:f5:3f:e7:ab:b1:d4:c3:8c:89:90:14:bd:cb: e5:a3:a6:29:b9:d3:f0:ad:77:a3:78:ec:62:ee:62:f8:bc:ab: d5:04:2d:d1:40:01:f0:ae:32:3b:11:83:7c:51:18:5c:6b:f1: b8:bf:8a:83:fe:f0:17:dc:eb:5c:5f:fb:e1:56:18:03:6e:32: 8c:0a:bd:28:9f:9d:cb:55:fe:d2:c8:f3:67:71:ad:a3:cd:d8: 3f:21:3f:50:8e:28:40:26:12:ff:8e:30:07:b5:c9:50:29:6b: d0:ce:37:ec:32:8b:ac:4b:a4:3b:b8:b0:fc:13:b3:ef:65:12: 12:ad:63:2d:2d:3c:8d:c7:f0:81:f2:0b:97:ed:27:85:ee:97: c7:8f:d2:6d:b7:24:ba:0e:ee:f9:64:2a:f9:d0:7a:ff:7e:df: 38:26:62:5d:d8:21:eb:e8:76:d8:59:e8:9b:09:86:5d:c0:4e: 44:36:2c:45:82:57:6c:8f:8e:3f:0b:ed:e3:60:8d:ff:af:e9: ed:98:aa:cd:08:24:45:8d:4c:6e:b7:f9:39:e0:22:cb:da:fc: 68:1e:f7:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVH90GViMaZI/cwMXt+BZ6vmGl6QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxOTA5MTI0MVoX DTI0MDgxNzA5MTc0MVowMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0 REZCQzVDNTM5QUNCMDRGRENCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg/DThLHA2JaTO2bz7XFrId2i4lyF2qzkIwBP9mxG5Cor5NxfOqO+XeO7+q +xTZc3+QT3ae9lxK/RafEpfK0fsa6MU/9J/EakAKMiCbYW804sgQDzDNsUzsh0WH +8n1M/FFPrMxrPuBXhw+X5dAHWooetvohNQIvxGDfG8NC4+R2pxkawXZL2wvH/CX gKgi0zJVJPtnmPgcAZfp2yT0Lbg6L1DL9wU7i7PoleOVb6uCq9mF3/rnxtBuxpv1 /4ZJ4K5lb1Kj4wAvsd39037u3hbJatCk2IEBydfQGiX8clHesB6fWvgQ3P0qkAi+ 1FCpwxdAZQq8AKdHKHTvyF2wjkMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMYB73ar5ftciFN+8XFOaywT9y+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmMjViOTY4 LTA5MjctNDU5NC04ODdlLTY3ZjUzZjk2N2IxMi8wLzEzMTgwN0JEREFBRjk3RUQ3 MjIxNERGQkM1QzUzOUFDQjA0RkRDQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhgwDQYJKoZIhvcNAQELBQADggEBAGszqZckYrAB8TBYhNlWkhSZ1qLbXtEb ha7Aw9irslyWZ5CxR+4rEWRe9T/nq7HUw4yJkBS9y+Wjpim50/Ctd6N47GLuYvi8 q9UELdFAAfCuMjsRg3xRGFxr8bi/ioP+8Bfc61xf++FWGANuMowKvSifnctV/tLI 82dxraPN2D8hP1COKEAmEv+OMAe1yVApa9DON+wyi6xLpDu4sPwTs+9lEhKtYy0t PI3H8IHyC5ftJ4Xul8eP0m23JLoO7vlkKvnQev9+3zgmYl3YIevodthZ6JsJhl3A TkQ2LEWCV2yPjj8L7eNgjf+v6e2Yqs0IJEWNTG63+TngIsva/Gge95E= -----END CERTIFICATE-----Generated at Thu May 2 23:01:50 2024 by rpki-client on console-fra.rpki-client.org