$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer File: 157748842D6BEE36DEE3B1999F10079808FF41C0.cer (raw, json) Hash identifier: pSYQmhd+jzMH5mX3bu7tU5a4XhdBlUzx+lfwajhvHGU= Subject key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 439BD5EBDA7D4D27052269F8CAF82857CB1FE084 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft caRepository: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 11 Nov 2023 18:25:32 +0000 Certificate not after: Sat 09 Nov 2024 18:30:32 +0000 Subordinate resources: IP: 103.148.196.0/23 IP: 2001:df2:e780::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9b:d5:eb:da:7d:4d:27:05:22:69:f8:ca:f8:28:57:cb:1f:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 18:25:32 2023 GMT Not After : Nov 9 18:30:32 2024 GMT Subject: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:fd:98:e9:a0:a5:bd:40:52:7b:4c:73:b1: ba:ce:1b:b5:c9:58:9a:da:0c:f2:17:1d:5d:3b:5a: 35:54:22:e1:62:16:f8:1e:ba:5c:93:f1:d5:cc:4e: 23:bb:ae:96:b4:1f:7f:0a:76:25:b2:a0:00:9f:23: 24:5f:aa:a5:b2:2d:ae:aa:c2:79:9f:72:5c:49:d9: 60:15:c6:3d:be:88:d9:cb:89:49:ef:04:43:9d:4b: 1c:ae:64:9f:c8:77:ea:b1:70:46:e6:84:79:e9:f5: 9b:a4:07:07:8d:a0:0a:95:d0:a1:19:7b:90:67:b0: 18:2c:e6:83:28:58:ae:af:57:c7:11:0f:2d:82:7d: 7f:31:30:e3:31:4b:62:d4:1b:36:98:f1:1b:96:29: 27:17:7d:74:cd:2a:e9:b5:2b:0d:75:32:74:f9:8a: dd:e6:33:f5:71:d7:ad:96:91:81:2c:67:b0:a5:ba: 43:f4:da:66:26:0c:44:08:58:4f:a5:bb:37:2f:2d: 41:78:17:a0:91:68:29:eb:dd:92:33:56:81:ec:89: 2a:62:5e:52:01:1a:1c:f8:00:88:c4:fa:26:98:6a: e1:e5:f6:1e:66:dd:ec:40:47:a8:0e:02:69:16:25: 5c:22:d4:53:3d:79:a0:80:a8:21:f5:88:d4:35:90: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.196.0/23 IPv6: 2001:df2:e780::/48 Signature Algorithm: sha256WithRSAEncryption 02:56:89:dd:f8:14:d6:55:58:d4:eb:30:e6:d4:74:6f:94:cc: b7:85:6b:f2:d7:0d:f1:28:59:6d:0a:5b:8a:c2:aa:a7:ac:7a: 18:52:00:ee:f0:2a:4b:68:b9:fd:a8:35:b9:9b:cb:bc:03:e8: 4f:71:0e:5c:35:7c:62:17:f4:a5:44:4c:25:c1:fb:06:78:9a: 6b:24:15:12:86:d0:f4:5f:fd:ac:66:d7:e3:b0:c7:ca:e4:63: b0:a3:87:c6:35:56:7a:18:82:e4:7f:ac:4c:88:a4:53:7a:7a: 39:32:a9:15:d0:88:8c:de:0d:b3:09:30:8e:8e:f9:6f:76:fc: 9b:81:69:41:31:0b:ad:b7:b3:52:9d:35:2b:31:4f:f5:fb:cb: 95:6e:86:9c:f1:26:ef:57:2d:05:5a:94:55:6b:02:c9:23:64: 39:23:f4:c0:18:d0:f9:f2:e2:41:dd:0a:61:4d:e3:af:31:af: 4e:4d:07:f9:3b:36:5e:dd:4e:cf:47:54:fc:ff:21:af:50:ac: 9b:33:0c:73:86:4e:e2:96:64:5a:ce:42:45:76:6a:a9:16:1e: 85:33:16:27:5a:ff:1f:2e:54:20:2e:bc:c9:c0:bc:ff:8e:da: e6:1d:30:c1:a2:2c:25:8b:cc:62:b3:dd:fe:54:c3:dc:f0:46: 29:c8:5a:47 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUQ5vV69p9TScFImn4yvgoV8sf4IQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExMTE4MjUzMloX DTI0MTEwOTE4MzAzMlowMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNC MTk5OUYxMDA3OTgwOEZGNDFDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJN/ZjpoKW9QFJ7THOxus4btclYmtoM8hcdXTtaNVQi4WIW+B66XJPx1cxO I7uulrQffwp2JbKgAJ8jJF+qpbItrqrCeZ9yXEnZYBXGPb6I2cuJSe8EQ51LHK5k n8h36rFwRuaEeen1m6QHB42gCpXQoRl7kGewGCzmgyhYrq9XxxEPLYJ9fzEw4zFL YtQbNpjxG5YpJxd9dM0q6bUrDXUydPmK3eYz9XHXrZaRgSxnsKW6Q/TaZiYMRAhY T6W7Ny8tQXgXoJFoKevdkjNWgeyJKmJeUgEaHPgAiMT6Jphq4eX2Hmbd7EBHqA4C aRYlXCLUUz15oICoIfWI1DWQ7+sCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBV3SIQta+423uOxmZ8QB5gI/0HAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0NmY1YTA1 LTMyYjUtNGQzYy1iNGUwLWFiZGRjZjczZjVlOS8wLzE1Nzc0ODg0MkQ2QkVFMzZE RUUzQjE5OTlGMTAwNzk4MDhGRjQxQzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlMQwDwQCAAIwCQMHACABDfLngDANBgkqhkiG9w0BAQsFAAOCAQEAAlaJ3fgU 1lVY1Osw5tR0b5TMt4Vr8tcN8ShZbQpbisKqp6x6GFIA7vAqS2i5/ag1uZvLvAPo T3EOXDV8Yhf0pURMJcH7BniaayQVEobQ9F/9rGbX47DHyuRjsKOHxjVWehiC5H+s TIikU3p6OTKpFdCIjN4Nswkwjo75b3b8m4FpQTELrbezUp01KzFP9fvLlW6GnPEm 71ctBVqUVWsCySNkOSP0wBjQ+fLiQd0KYU3jrzGvTk0H+Ts2Xt1Oz0dU/P8hr1Cs mzMMc4ZO4pZkWs5CRXZqqRYehTMWJ1r/Hy5UIC68ycC8/47a5h0wwaIsJYvMYrPd /lTD3PBGKchaRw== -----END CERTIFICATE-----Generated at Wed May 8 18:12:03 2024 by rpki-client on console-fra.rpki-client.org