$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer (raw, json) Hash identifier: mWjK+279Mv2fkXwYYBFE8VCFDdi181DYL+vFcPFBHK4= Subject key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B2918CE862973E7337C439DB62960FA4623E54D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Sep 2024 20:32:54 +0000 Certificate not after: Tue 16 Sep 2025 20:37:54 +0000 Subordinate resources: IP: 103.166.178.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:29:18:ce:86:29:73:e7:33:7c:43:9d:b6:29:60:fa:46:23:e5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 20:32:54 2024 GMT Not After : Sep 16 20:37:54 2025 GMT Subject: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:08:11:91:59:b6:05:d4:e7:1f:81:2b:4a: bf:6f:bb:b6:cf:ef:39:05:9b:9c:b1:3e:16:f7:21: cb:db:70:98:69:5f:f5:ff:e2:1b:f4:32:3e:f9:87: d2:39:11:bf:35:ab:e0:08:5e:f6:9c:d6:e3:57:8b: 8b:7d:e4:12:df:e5:67:d6:af:c4:83:7a:cb:92:e0: cf:8b:79:e4:96:bc:7b:21:31:df:c9:6d:18:36:ac: 50:5e:ae:2b:5d:34:93:c6:71:af:ce:4f:fe:cd:83: 36:49:f4:c3:21:a7:6b:fe:1b:af:46:29:18:d9:80: e1:08:c6:39:1e:06:13:d1:c6:f8:a0:fe:32:9c:85: 20:9b:51:cb:2e:1b:6d:42:43:32:7a:18:f5:8c:1f: 78:e1:86:dd:c9:88:0e:3c:b0:33:03:f0:dd:90:61: db:9f:df:b8:40:6c:f3:24:c5:85:b3:40:c0:ae:d2: 0c:71:40:f1:3c:1e:c8:ab:0e:ab:8f:19:b0:e7:e0: 1d:1a:9d:2b:64:64:c7:29:8e:e0:e4:4c:17:0d:bc: 2f:cf:68:13:53:73:1f:22:57:bd:d3:86:90:e8:3d: 8b:69:16:2d:77:fa:83:43:09:17:9c:b6:17:0e:d5: e0:34:f2:43:c5:17:f3:ab:4b:4c:65:ae:d0:88:da: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.178.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:a6:db:40:bc:53:45:4f:28:bd:b1:f1:5f:23:65:fe:7a:d5: 68:b8:15:32:8e:37:9a:96:0f:a5:a8:55:6b:ff:ca:b2:24:51: 89:c3:e7:e5:80:1c:8f:24:7e:6e:52:8d:04:f9:18:00:47:ef: cf:83:2c:28:a3:36:ed:3d:d3:85:3e:f9:83:a6:56:a5:ab:72: df:24:4d:46:42:f7:77:7d:cd:56:a4:a7:38:4f:33:13:7f:09: 31:43:4b:1c:f7:4f:96:c5:51:10:92:30:5b:1b:64:da:a3:2f: 03:27:b8:d8:70:82:41:34:17:96:14:6a:64:8b:22:e4:ae:cd: 52:0b:44:46:a2:3c:6e:22:03:b6:f3:1e:2e:f5:e9:c5:79:77: cf:84:96:75:38:27:55:ca:89:bd:31:69:cb:3b:5a:14:56:ff: 51:ff:cf:ec:02:98:cb:cd:ff:15:8a:5d:f5:27:f7:a0:d6:b1: de:ee:0a:df:a5:57:80:8d:80:3c:ec:f7:17:68:06:e2:f5:16: 11:8c:73:f4:23:2f:75:1d:01:7f:06:df:86:fe:f5:bf:24:1c: 06:2a:b0:9a:47:3d:a6:ab:e1:e5:23:e5:eb:d8:5c:f8:81:f9: e0:07:68:60:83:f0:f6:48:7d:16:31:9a:85:18:dc:50:29:b0: d4:98:80:05 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOykYzoYpc+czfEOdtilg+kYj5U0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNzIwMzI1NFoX DTI1MDkxNjIwMzc1NFowMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1 Njg3NUVGNjE4N0Y4MzQyM0NCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxmCBGRWbYF1OcfgStKv2+7ts/vOQWbnLE+Fvchy9twmGlf9f/iG/QyPvmH 0jkRvzWr4Ahe9pzW41eLi33kEt/lZ9avxIN6y5Lgz4t55Ja8eyEx38ltGDasUF6u K100k8Zxr85P/s2DNkn0wyGna/4br0YpGNmA4QjGOR4GE9HG+KD+MpyFIJtRyy4b bUJDMnoY9YwfeOGG3cmIDjywMwPw3ZBh25/fuEBs8yTFhbNAwK7SDHFA8TweyKsO q48ZsOfgHRqdK2RkxymO4ORMFw28L89oE1NzHyJXvdOGkOg9i2kWLXf6g0MJF5y2 Fw7V4DTyQ8UX86tLTGWu0Ija5QsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBe2Lw5d9fIwbwZWh172GH+DQjy9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MGFjNWNh LTM1ZGYtNDYwNy05NDA1LTM5N2I3YWFkYjJhNy8wLzE3QjYyRjBFNURGNUYyMzA2 RjA2NTY4NzVFRjYxODdGODM0MjNDQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnprIwDQYJKoZIhvcNAQELBQADggEBAFum20C8U0VPKL2x8V8jZf561Wi4FTKO N5qWD6WoVWv/yrIkUYnD5+WAHI8kfm5SjQT5GABH78+DLCijNu0904U++YOmVqWr ct8kTUZC93d9zVakpzhPMxN/CTFDSxz3T5bFURCSMFsbZNqjLwMnuNhwgkE0F5YU amSLIuSuzVILREaiPG4iA7bzHi716cV5d8+ElnU4J1XKib0xacs7WhRW/1H/z+wC mMvN/xWKXfUn96DWsd7uCt+lV4CNgDzs9xdoBuL1FhGMc/QjL3UdAX8G34b+9b8k HAYqsJpHPaar4eUj5evYXPiB+eAHaGCD8PZIfRYxmoUY3FApsNSYgAU= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:45 2024 by rpki-client on console-fra.rpki-client.org