$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.cer (raw, json) Hash identifier: iJseShTWCUDlezySueGIkUjD09CsYQcLOrdFI7JU2eA= Subject key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72AC2F7593AD3152F4A528C68F658A24BA780C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Sep 2024 16:40:52 +0000 Certificate not after: Thu 25 Sep 2025 16:45:52 +0000 Subordinate resources: IP: 103.147.134.0/23 IP: 2405:b940::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ac:2f:75:93:ad:31:52:f4:a5:28:c6:8f:65:8a:24:ba:78:0c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 16:40:52 2024 GMT Not After : Sep 25 16:45:52 2025 GMT Subject: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:51:fe:8e:c1:ba:0d:65:55:a5:51:29:b4: a3:2f:dd:c7:d9:30:15:ce:8b:1f:0e:6e:92:06:95: f5:aa:6a:64:a9:fe:6d:3f:53:97:e9:1c:10:60:a8: 92:90:6b:d5:13:af:02:b5:a5:43:1b:6d:5e:b9:7e: f6:4c:f7:f7:73:eb:88:38:d3:00:ff:94:d3:6d:71: fa:f5:27:ab:a1:44:60:e2:3e:ae:54:14:07:28:a9: da:2f:02:25:37:6b:e4:e9:37:a3:0c:44:0a:b7:e1: 82:2d:a1:3e:b4:cd:58:49:9e:f2:da:18:7a:9c:88: cf:e8:5a:b0:d6:3d:ea:eb:c0:1a:48:01:ed:e0:8f: c0:15:b6:8d:3e:e9:4b:71:52:dd:93:67:78:7a:d1: 2a:ee:18:46:c5:44:97:8b:3f:ce:44:83:ad:9f:4b: ac:f8:66:21:f9:a4:4f:95:bc:a2:ef:d1:f0:5d:21: cc:61:eb:56:e8:a9:08:21:54:52:17:be:98:47:f9: bf:0e:75:dd:c4:1d:71:ec:12:13:ca:11:3d:4a:72: 6d:95:26:3c:7d:4f:91:4b:0c:05:12:07:cd:62:1c: 30:bf:a4:20:d8:04:dd:c5:d9:e3:39:72:49:c3:51: d2:2c:ef:a8:bf:9c:50:c7:db:62:1e:f7:30:70:2b: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.134.0/23 IPv6: 2405:b940::/32 Signature Algorithm: sha256WithRSAEncryption 34:3c:59:65:82:05:35:03:ce:8b:c0:3e:cb:81:1a:32:62:5c: 97:32:70:26:10:d8:c9:e4:83:8c:ea:59:6d:00:8a:75:0a:37: a3:1c:3e:45:c8:ae:b6:13:d9:d8:fd:09:6a:41:1e:c8:9f:ed: 38:64:a4:8c:05:fe:08:2c:a5:27:d6:fd:eb:88:bc:bf:a7:40: 08:d7:89:bd:47:07:c4:1e:34:ed:b6:86:28:50:0f:3c:09:dd: 7d:e0:f3:67:b8:b4:29:01:ff:90:17:0f:0a:de:f7:d7:4b:64: 04:ac:86:89:79:61:9b:9c:22:fb:20:09:30:0b:31:c7:d1:82: 23:15:85:91:44:3c:f5:35:a6:8a:53:50:f7:dc:56:59:bb:f4: 6b:62:6a:3e:c9:f4:e6:db:54:9d:a1:89:35:9a:75:c3:47:b7: 7a:10:db:6d:9d:79:77:8f:38:6c:ca:8c:10:7c:5f:7c:01:f9: 3c:27:97:02:ae:fd:a5:e0:40:47:8b:b3:50:6a:94:0e:53:d8: aa:d9:ae:cd:4d:4d:ec:ce:36:bb:d1:59:76:63:5e:6f:25:ff: aa:41:c5:17:47:30:d6:1f:46:ca:8c:d6:b6:36:f1:d0:d4:f3: 17:9c:87:14:97:c0:7e:9e:a6:fd:24:86:36:26:ba:47:68:94: 98:e6:8d:db -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcqwvdZOtMVL0pSjGj2WKJLp4DE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyNjE2NDA1MloX DTI1MDkyNTE2NDU1MlowMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1 MTA4NTYwM0RBOEU3REU1MzlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYWUf6OwboNZVWlUSm0oy/dx9kwFc6LHw5ukgaV9apqZKn+bT9Tl+kcEGCo kpBr1ROvArWlQxttXrl+9kz393PriDjTAP+U021x+vUnq6FEYOI+rlQUByip2i8C JTdr5Ok3owxECrfhgi2hPrTNWEme8toYepyIz+hasNY96uvAGkgB7eCPwBW2jT7p S3FS3ZNneHrRKu4YRsVEl4s/zkSDrZ9LrPhmIfmkT5W8ou/R8F0hzGHrVuipCCFU Uhe+mEf5vw513cQdcewSE8oRPUpybZUmPH1PkUsMBRIHzWIcML+kINgE3cXZ4zly ScNR0izvqL+cUMfbYh73MHAr/i8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBbNeHfJGheaCmdRCFYD2o595TnwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0OGI2NTgz LTQxMjItNDY5ZC04Mzg0LTNhZjFiY2M2NjA3Zi8wLzE2Q0Q3ODc3QzkxQTE3OUEw QTY3NTEwODU2MDNEQThFN0RFNTM5RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk4YwDQQCAAIwBwMFACQFuUAwDQYJKoZIhvcNAQELBQADggEBADQ8WWWCBTUD zovAPsuBGjJiXJcycCYQ2Mnkg4zqWW0AinUKN6McPkXIrrYT2dj9CWpBHsif7Thk pIwF/ggspSfW/euIvL+nQAjXib1HB8QeNO22hihQDzwJ3X3g82e4tCkB/5AXDwre 99dLZASshol5YZucIvsgCTALMcfRgiMVhZFEPPU1popTUPfcVlm79Gtiaj7J9Obb VJ2hiTWadcNHt3oQ222deXePOGzKjBB8X3wB+TwnlwKu/aXgQEeLs1BqlA5T2KrZ rs1NTezONrvRWXZjXm8l/6pBxRdHMNYfRsqM1rY28dDU8xechxSXwH6epv0khjYm ukdolJjmjds= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org