$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer File: 164D60A5876A6B9B50D1CB09453536273A893898.cer (raw, json) Hash identifier: I6DwkHBhGGm7w7lSC7PLsrOB9TQLsgjUXJYsaz/4Eww= Subject key identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 25F25B6486A6B24EB87EC6E8D9D038E11FDF5579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft caRepository: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jul 2024 14:49:08 +0000 Certificate not after: Thu 10 Jul 2025 14:54:08 +0000 Subordinate resources: IP: 103.238.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f2:5b:64:86:a6:b2:4e:b8:7e:c6:e8:d9:d0:38:e1:1f:df:55:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 14:49:08 2024 GMT Not After : Jul 10 14:54:08 2025 GMT Subject: CN=164D60A5876A6B9B50D1CB09453536273A893898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:6c:29:04:57:fe:36:d3:bf:72:f5:9d:05: 8f:7d:b5:9b:81:34:50:3d:84:cd:05:a2:5d:85:91: f4:16:33:94:36:08:b4:5d:94:c3:f3:47:95:eb:e4: e4:dd:09:74:95:73:b7:2e:b8:97:e4:30:d7:c6:6b: 5e:c1:fd:18:57:32:a7:85:51:52:ec:7d:2a:9f:70: 09:98:e3:d3:a0:f9:81:00:e1:6d:e4:03:7f:5e:36: a6:18:a9:1d:9a:99:40:f3:02:a7:81:51:7d:52:86: 5f:f4:53:7c:7a:c2:a4:ce:eb:37:8d:18:ef:d5:d9: f8:00:2d:fe:68:70:e1:96:2b:de:35:65:dc:48:44: 17:a6:a5:da:2d:d9:ff:04:9c:08:4e:d9:05:a5:97: 3e:3a:fe:56:e8:57:2e:02:03:f9:41:4e:93:d3:bd: ad:ff:13:fe:f4:f5:8b:c2:8d:b3:7c:32:11:da:eb: d6:96:92:a7:d9:6f:b3:03:38:0d:f2:7c:ec:55:27: c0:bf:fe:a4:b5:8d:1c:a2:85:3b:f0:c8:3a:0d:e9: da:2a:45:7f:a4:5c:80:bd:ac:f2:22:46:b4:29:19: b8:1a:04:3a:ef:38:dc:1a:9d:1c:89:f9:bc:fd:91: 13:d4:94:1d:ff:e8:0c:1c:23:b6:3b:56:e9:e2:a4: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.218.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:c9:ff:4b:cf:9c:30:f9:2d:37:a9:f6:cd:b1:09:77:7b:fb: c6:02:4e:46:c3:c7:da:b3:67:02:46:19:47:c8:45:4b:34:b4: 06:0a:cf:b5:0c:6b:25:0f:43:1e:97:60:4e:dc:62:45:1d:ff: 63:eb:11:a1:88:21:e8:a6:58:25:37:e7:11:23:f2:33:ca:b6: 32:91:80:eb:4d:1d:46:bc:d3:55:9d:94:f7:20:e4:6e:c7:ab: 3f:58:37:35:38:24:cd:2f:7e:85:e0:3b:4c:c3:82:ee:d8:d8: d9:a4:49:61:df:df:81:fe:63:7d:84:b3:90:1a:2a:7b:d7:4f: 19:9d:1e:78:33:98:71:ca:cd:95:9a:d2:e1:25:56:c0:be:66: 26:23:36:f5:17:92:0f:5c:d0:15:26:29:50:d7:66:da:21:a7: 6c:c3:c2:55:8d:8a:e4:27:28:34:e9:2f:85:77:72:d4:38:d3: 3a:b5:60:41:b8:c2:9a:f9:9f:4a:e0:3f:6f:b1:d3:49:e9:20: 45:51:e1:3b:cb:b9:9d:61:19:0a:d7:79:0a:f1:d9:f6:5c:81: 77:c9:fe:58:a5:b6:e3:58:0d:60:d2:b2:61:18:a3:2b:9a:2f: 58:60:8a:db:d4:91:7e:d6:ba:74:56:ef:6b:3c:b0:df:64:77: 35:70:80:02 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJfJbZIamsk64fsbo2dA44R/fVXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMTE0NDkwOFoX DTI1MDcxMDE0NTQwOFowMzExMC8GA1UEAxMoMTY0RDYwQTU4NzZBNkI5QjUwRDFD QjA5NDUzNTM2MjczQTg5Mzg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtAbCkEV/42079y9Z0Fj321m4E0UD2EzQWiXYWR9BYzlDYItF2Uw/NHlevk 5N0JdJVzty64l+Qw18ZrXsH9GFcyp4VRUux9Kp9wCZjj06D5gQDhbeQDf142phip HZqZQPMCp4FRfVKGX/RTfHrCpM7rN40Y79XZ+AAt/mhw4ZYr3jVl3EhEF6al2i3Z /wScCE7ZBaWXPjr+VuhXLgID+UFOk9O9rf8T/vT1i8KNs3wyEdrr1paSp9lvswM4 DfJ87FUnwL/+pLWNHKKFO/DIOg3p2ipFf6RcgL2s8iJGtCkZuBoEOu843BqdHIn5 vP2RE9SUHf/oDBwjtjtW6eKk8UkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBZNYKWHamubUNHLCUU1Nic6iTiYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lN2IxZjE0Zi00ZDkwLTQ2YzUtOWZiYy05YzlhYTZiOWRmYTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3YjFmMTRm LTRkOTAtNDZjNS05ZmJjLTljOWFhNmI5ZGZhNS8wLzE2NEQ2MEE1ODc2QTZCOUI1 MEQxQ0IwOTQ1MzUzNjI3M0E4OTM4OTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7towDQYJKoZIhvcNAQELBQADggEBAH7J/0vPnDD5LTep9s2xCXd7+8YCTkbD x9qzZwJGGUfIRUs0tAYKz7UMayUPQx6XYE7cYkUd/2PrEaGIIeimWCU35xEj8jPK tjKRgOtNHUa801WdlPcg5G7Hqz9YNzU4JM0vfoXgO0zDgu7Y2NmkSWHf34H+Y32E s5AaKnvXTxmdHngzmHHKzZWa0uElVsC+ZiYjNvUXkg9c0BUmKVDXZtohp2zDwlWN iuQnKDTpL4V3ctQ40zq1YEG4wpr5n0rgP2+x00npIEVR4TvLuZ1hGQrXeQrx2fZc gXfJ/liltuNYDWDSsmEYoyuaL1hgitvUkX7WunRW72s8sN9kdzVwgAI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org