$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer (raw, json) Hash identifier: EQmgZn960fAuYjOXUZh3oWxUPYcNAl7Of8D2+1oVBWY= Subject key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08BF29A7A9D7504AB7CCFCC3E1951F979D2F0F8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft caRepository: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jul 2024 11:37:50 +0000 Certificate not after: Tue 15 Jul 2025 11:42:50 +0000 Subordinate resources: IP: 103.214.100.0/22 IP: 2404:c380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:29:a7:a9:d7:50:4a:b7:cc:fc:c3:e1:95:1f:97:9d:2f:0f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 16 11:37:50 2024 GMT Not After : Jul 15 11:42:50 2025 GMT Subject: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:27:59:83:e1:6b:bd:7a:f9:19:ed:c4:fa: 6b:8b:e6:c5:d2:45:6c:84:0f:b7:a6:34:7c:95:55: a2:40:e5:b3:27:b0:14:76:ae:71:8b:a9:8e:86:75: 1a:87:34:b1:7d:61:93:4e:17:0d:7d:df:93:51:5f: 91:83:71:bc:5a:e1:95:95:42:6e:6b:15:c5:03:1e: 83:a7:4e:a9:fe:81:23:e8:64:0e:00:20:16:5b:61: a7:9c:18:dc:89:0e:ae:32:ce:b6:c7:bf:ac:24:08: 24:d1:8c:48:53:c1:15:a3:0a:6b:4e:4d:a4:b9:b6: 89:f0:4f:54:91:e0:4a:4d:76:3d:d5:2e:61:9e:51: 5e:30:98:4f:59:04:1b:99:af:84:28:5f:c8:17:61: 54:af:c2:ed:28:65:b2:9f:1c:13:e7:84:2e:6d:18: 48:f0:ce:04:d7:40:ff:ae:40:7c:0f:0a:9a:64:65: 4f:fa:87:d2:06:7f:93:44:a3:b8:d3:6b:2c:bb:7b: ce:ed:fa:9e:71:31:af:e1:e7:cd:d1:c5:5f:ae:54: 0a:d7:d1:2b:e4:b3:4c:08:4a:96:8b:cf:a0:a8:6a: 44:61:84:b0:4f:3d:52:af:a4:68:49:c8:5c:e0:c3: 13:7c:59:26:2a:3a:4e:72:03:8a:5b:5b:f1:48:c1: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.100.0/22 IPv6: 2404:c380::/32 Signature Algorithm: sha256WithRSAEncryption 09:b0:74:24:12:27:f1:c3:3c:f5:a5:66:96:22:36:11:28:96: 9d:92:b8:8d:84:6d:cc:ac:97:fc:a1:a7:67:78:64:d5:40:f6: ea:ae:9d:22:1b:46:db:04:b2:bd:96:b2:c3:a1:ab:d0:9d:91: 29:90:4d:de:94:1b:c6:4c:fa:80:f7:ec:6e:b8:68:03:17:81: 21:af:31:9d:53:bf:9e:c6:2e:a3:1d:54:67:ee:3e:e6:ce:a7: ea:4d:00:74:24:e6:a7:bb:d1:39:55:c9:83:9f:a1:d0:11:f8: e5:94:50:42:79:4d:43:9e:77:36:52:b9:ff:54:94:d4:8c:07: aa:cf:14:57:60:de:55:d4:71:ed:67:74:f3:93:78:21:72:bb: 06:cd:27:82:ef:54:af:39:77:75:90:3e:de:7a:6e:c0:1e:27: 48:21:fa:58:ee:e6:3c:80:8c:41:98:7d:c4:31:6c:3b:6d:76: 29:dc:76:ca:92:11:7b:26:44:53:68:80:23:5a:bd:aa:1b:8c: fe:76:e3:02:d2:64:b3:90:6f:68:a4:93:42:22:51:8e:39:4f: ce:e2:04:24:32:5f:c8:70:59:d7:10:43:b0:19:66:58:1e:2a: 32:38:c3:7e:1b:d7:68:80:bc:b9:59:0e:d6:6a:ae:3f:27:e1: 19:a3:9f:47 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUCL8pp6nXUEq3zPzD4ZUfl50vD40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxNjExMzc1MFoX DTI1MDcxNTExNDI1MFowMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBG MEVGOTU5MDMzM0QzOEQwNDQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZJJ1mD4Wu9evkZ7cT6a4vmxdJFbIQPt6Y0fJVVokDlsyewFHaucYupjoZ1 Goc0sX1hk04XDX3fk1FfkYNxvFrhlZVCbmsVxQMeg6dOqf6BI+hkDgAgFlthp5wY 3IkOrjLOtse/rCQIJNGMSFPBFaMKa05NpLm2ifBPVJHgSk12PdUuYZ5RXjCYT1kE G5mvhChfyBdhVK/C7Shlsp8cE+eELm0YSPDOBNdA/65AfA8KmmRlT/qH0gZ/k0Sj uNNrLLt7zu36nnExr+HnzdHFX65UCtfRK+SzTAhKlovPoKhqRGGEsE89Uq+kaEnI XODDE3xZJio6TnIDiltb8UjBmacCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMrvfnZ8m8AHMDw75WQMz040EQQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZTUxODc1 LTUwODctNDI2NC1hOGJkLTQxNTZmNTViYWFhYi8wLzEzMkJCREY5RDlGMjZGMDAx Q0MwRjBFRjk1OTAzMzNEMzhEMDQ0MTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn1mQwDQQCAAIwBwMFACQEw4AwDQYJKoZIhvcNAQELBQADggEBAAmwdCQSJ/HD PPWlZpYiNhEolp2SuI2Ebcysl/yhp2d4ZNVA9uqunSIbRtsEsr2WssOhq9CdkSmQ Td6UG8ZM+oD37G64aAMXgSGvMZ1Tv57GLqMdVGfuPubOp+pNAHQk5qe70TlVyYOf odAR+OWUUEJ5TUOedzZSuf9UlNSMB6rPFFdg3lXUce1ndPOTeCFyuwbNJ4LvVK85 d3WQPt56bsAeJ0gh+lju5jyAjEGYfcQxbDttdincdsqSEXsmRFNogCNavaobjP52 4wLSZLOQb2ikk0IiUY45T87iBCQyX8hwWdcQQ7AZZlgeKjI4w34b12iAvLlZDtZq rj8n4Rmjn0c= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:18 2024 by rpki-client on console-ams.rpki-client.org