$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer File: 179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer (raw, json) Hash identifier: Dnu0XrPLMasCoDE9A6hviMqn0fqK1pvqUFpor4t4Cdg= Subject key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F325570A7647BF4A24CA10CC02E9723C6FD4753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Jul 2023 16:53:54 +0000 Certificate not after: Tue 16 Jul 2024 16:58:54 +0000 Subordinate resources: IP: 103.149.140.0/23 IP: 2001:df3:2980::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:32:55:70:a7:64:7b:f4:a2:4c:a1:0c:c0:2e:97:23:c6:fd:47:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 16:53:54 2023 GMT Not After : Jul 16 16:58:54 2024 GMT Subject: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:ea:25:dc:7a:b8:9a:40:32:b3:c9:ac:1f: d0:64:b9:0f:d1:11:22:ba:c5:4e:89:a7:c6:ba:5f: 32:bf:84:0c:33:3b:3e:53:56:75:47:af:ab:e5:db: 3b:18:f9:1e:2f:23:e4:91:a9:86:5a:20:ad:8d:2a: 5d:12:9a:bc:33:bf:65:51:d1:69:2e:9e:b6:54:a7: 92:d0:55:0a:3b:8f:9f:ed:a8:6d:42:59:e8:1b:ec: a0:e3:d9:6b:b5:77:7a:20:ab:d8:6f:06:b1:69:13: 05:06:12:87:47:65:b9:0b:f2:85:70:55:73:c7:6b: 48:c6:99:30:11:1a:73:7b:31:77:34:ce:f4:54:e6: 02:5c:48:97:0e:21:98:45:fd:09:22:0f:d3:d6:50: ca:8a:24:35:20:24:b4:9e:0f:3e:f3:1d:08:0f:72: b9:2a:7d:90:35:22:32:81:96:f3:09:53:83:86:ac: 0d:e0:53:ef:52:c6:93:17:d7:22:ad:e7:57:4c:3c: 3d:36:ee:61:b9:db:25:f1:a0:69:bb:14:92:1e:66: d7:a1:97:a0:e5:23:ff:af:50:cf:4f:86:51:91:35: cb:8f:9f:0c:62:b1:30:62:f9:79:98:c6:6a:83:8a: da:36:3a:5a:7f:38:3a:0f:12:c4:fb:9b:98:c3:d1: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.140.0/23 IPv6: 2001:df3:2980::/48 Signature Algorithm: sha256WithRSAEncryption 10:64:40:1f:ff:e3:54:0d:36:31:1b:e3:bf:00:d3:53:fc:af: 90:96:66:e0:76:4c:d4:4d:5d:b6:e1:c2:40:45:cb:3d:6d:d4: 3c:06:e2:06:c4:be:23:41:55:77:ea:37:bb:4b:72:5e:51:e4: c8:76:40:4f:a7:87:40:9b:5d:80:00:2e:e5:c6:11:b8:e9:72: e3:92:a7:a0:b3:f1:c2:b6:75:d3:af:6f:af:7f:f5:0a:c7:bd: b2:35:87:b4:6c:d7:ff:15:0a:2b:18:ca:06:58:55:5a:c6:0f: fc:b9:3a:a8:59:1c:0f:f6:e1:71:98:31:7c:77:75:9c:17:1a: 04:9d:5f:c1:3c:e4:e6:ea:8f:c8:76:ab:71:2f:76:5e:75:15: 5a:41:f4:b9:b0:f1:7f:cb:71:57:c2:9e:c3:cf:c2:84:47:a3: 36:45:6f:63:c6:f7:7d:3f:65:88:a0:d5:c1:81:26:1f:37:1e: dd:c7:a5:03:26:6d:81:b1:c7:26:f4:7d:18:3a:94:bd:f4:06: 7b:08:a3:c2:d2:2c:e4:fc:5e:ed:f1:dd:7b:74:16:ba:3f:4c: 62:e2:99:95:cd:83:e0:37:fd:9f:a1:2c:68:ea:a0:8e:1e:56: e5:a3:e7:be:7b:97:f2:a9:f7:67:d5:a8:46:8f:64:c5:fa:48: 11:d5:29:a4 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUPzJVcKdke/SiTKEMwC6XI8b9R1MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxODE2NTM1NFoX DTI0MDcxNjE2NTg1NFowMzExMC8GA1UEAxMoMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4 MjU0RDhGOEJEREQxQ0NCNkU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJql6iXceriaQDKzyawf0GS5D9ERIrrFTomnxrpfMr+EDDM7PlNWdUevq+Xb Oxj5Hi8j5JGphlogrY0qXRKavDO/ZVHRaS6etlSnktBVCjuPn+2obUJZ6BvsoOPZ a7V3eiCr2G8GsWkTBQYSh0dluQvyhXBVc8drSMaZMBEac3sxdzTO9FTmAlxIlw4h mEX9CSIP09ZQyookNSAktJ4PPvMdCA9yuSp9kDUiMoGW8wlTg4asDeBT71LGkxfX Iq3nV0w8PTbuYbnbJfGgabsUkh5m16GXoOUj/69Qz0+GUZE1y4+fDGKxMGL5eZjG aoOK2jY6Wn84Og8SxPubmMPRVIkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBebTrIzDibs13yCVNj4vd0cy25/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTdmMGU2Yy0xNDVhLTRjZjMtYjI4My00MmM0YWY4MTkxODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YwZTZj LTE0NWEtNGNmMy1iMjgzLTQyYzRhZjgxOTE4OC8wLzE3OUI0RUIyMzMwRTI2RUNE NzdDODI1NEQ4RjhCREREMUNDQjZFN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlYwwDwQCAAIwCQMHACABDfMpgDANBgkqhkiG9w0BAQsFAAOCAQEAEGRAH//j VA02MRvjvwDTU/yvkJZm4HZM1E1dtuHCQEXLPW3UPAbiBsS+I0FVd+o3u0tyXlHk yHZAT6eHQJtdgAAu5cYRuOly45KnoLPxwrZ1069vr3/1Cse9sjWHtGzX/xUKKxjK BlhVWsYP/Lk6qFkcD/bhcZgxfHd1nBcaBJ1fwTzk5uqPyHarcS92XnUVWkH0ubDx f8txV8Kew8/ChEejNkVvY8b3fT9liKDVwYEmHzce3celAyZtgbHHJvR9GDqUvfQG ewijwtIs5Pxe7fHde3QWuj9MYuKZlc2D4Df9n6EsaOqgjh5W5aPnvnuX8qn3Z9Wo Ro9kxfpIEdUppA== -----END CERTIFICATE-----Generated at Wed May 8 22:46:36 2024 by rpki-client on console-ams.rpki-client.org