$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer (raw, json) Hash identifier: Dy+nYMGgGSDpxzfhIzRqp3RAauIn6ClahssAQRpdN6U= Subject key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D4E7B4D3A655E86287A3E6259FF992CBFF074DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 11 Aug 2024 23:53:48 +0000 Certificate not after: Sun 10 Aug 2025 23:58:48 +0000 Subordinate resources: IP: 103.47.132.0/22 IP: 2402:8780::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4e:7b:4d:3a:65:5e:86:28:7a:3e:62:59:ff:99:2c:bf:f0:74:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 23:53:48 2024 GMT Not After : Aug 10 23:58:48 2025 GMT Subject: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fe:87:b4:f9:97:78:c1:bf:09:9b:af:06:4c: 9d:33:fb:ba:18:7a:9b:d4:63:44:22:26:7a:3a:55: 08:4d:1d:07:0c:64:67:92:aa:d8:df:fe:92:28:55: 50:89:9a:a5:35:ae:ab:19:68:59:38:c1:e9:33:08: d8:15:3a:45:fc:9b:7a:61:12:18:9e:05:98:10:b3: ff:cc:c4:64:55:b4:6f:4b:9b:98:97:8a:2d:5a:66: 5f:12:68:68:b2:58:c0:a0:38:ae:c5:9d:26:9b:80: 33:9a:0f:15:38:c9:06:3e:78:1d:02:e2:99:0f:f7: a0:f3:95:44:c0:e0:ce:16:83:76:e0:cb:08:2b:68: 6d:82:3d:03:06:d9:28:ab:48:b6:12:02:fe:bf:08: cc:31:4d:1a:c8:32:0a:69:7e:01:85:37:90:f9:fc: 42:e6:29:b3:0d:7b:a1:f0:0f:bf:78:65:62:40:74: 57:f1:7d:99:f4:b3:7f:c9:0b:0e:3f:55:49:54:1d: aa:0b:c4:5e:a6:87:9a:d1:6f:6b:67:a9:d1:be:73: 14:47:20:6f:28:dc:7d:89:6c:76:71:87:5f:3f:dc: fc:6a:c1:96:2f:b6:80:a2:dc:c1:89:12:b5:a7:1c: ec:6f:ef:bf:69:5a:72:f4:18:a4:9b:07:71:f2:73: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.132.0/22 IPv6: 2402:8780::/32 Signature Algorithm: sha256WithRSAEncryption 41:e3:6c:55:ab:43:25:0a:5b:32:9a:ba:f3:61:02:81:ce:3f: 3a:ba:be:99:31:18:c2:f7:c1:68:cc:e7:e0:81:f5:ab:b4:d1: c7:74:9d:4b:64:06:69:95:f5:85:34:07:57:38:80:c0:40:14: e6:ec:31:00:30:b9:f0:6b:98:ab:bb:22:47:99:b1:13:ce:3e: 6f:da:9c:f8:2b:f1:0a:ce:f3:ed:56:a1:97:48:2b:0d:de:1a: e9:f6:b6:dc:5c:18:9c:37:cd:bd:4a:16:86:78:57:6e:8e:0d: 2b:b0:f8:7b:5f:0f:95:c6:52:5b:fa:2b:5a:f3:bc:91:1d:e3: 1a:43:ab:b5:da:94:ac:8f:8c:d2:68:36:f5:ca:07:0c:c8:26: 35:22:15:c7:11:a2:72:47:de:33:48:82:23:18:a1:f2:44:65: 9f:77:c9:1e:c7:06:85:03:05:07:9a:79:92:4f:f4:02:03:f5: 0e:f4:31:06:89:e3:28:ba:8b:a0:d9:fd:ed:39:24:d3:bc:1a: 48:88:59:69:c0:12:7d:e6:95:1e:90:20:51:4c:4f:82:99:37: 43:15:3e:2a:94:f7:1d:2f:b5:9a:24:b4:c4:96:71:6a:4a:0b: 15:df:ee:3a:87:2c:2e:d1:7d:9e:15:b7:c8:cc:47:b0:7e:01: c0:0d:80:f7 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTU57TTplXoYoej5iWf+ZLL/wdN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMTIzNTM0OFoX DTI1MDgxMDIzNTg0OFowMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVD QkM3Q0NDMzBBNTkyN0E3NDRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPT+h7T5l3jBvwmbrwZMnTP7uhh6m9RjRCImejpVCE0dBwxkZ5Kq2N/+kihV UImapTWuqxloWTjB6TMI2BU6RfybemESGJ4FmBCz/8zEZFW0b0ubmJeKLVpmXxJo aLJYwKA4rsWdJpuAM5oPFTjJBj54HQLimQ/3oPOVRMDgzhaDduDLCCtobYI9AwbZ KKtIthIC/r8IzDFNGsgyCml+AYU3kPn8QuYpsw17ofAPv3hlYkB0V/F9mfSzf8kL Dj9VSVQdqgvEXqaHmtFva2ep0b5zFEcgbyjcfYlsdnGHXz/c/GrBli+2gKLcwYkS tacc7G/vv2lacvQYpJsHcfJz+eECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBfQKxFtS7plEkXLx8zDClknp0TkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0 LWU1ZmEtNDBlYi04NTk4LWI3Y2QxMDEzNDNjYS8wLzE3RDAyQjExNkQ0QkJBNjUx MjQ1Q0JDN0NDQzMwQTU5MjdBNzQ0RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnL4QwDQQCAAIwBwMFACQCh4AwDQYJKoZIhvcNAQELBQADggEBAEHjbFWrQyUK WzKauvNhAoHOPzq6vpkxGML3wWjM5+CB9au00cd0nUtkBmmV9YU0B1c4gMBAFObs MQAwufBrmKu7IkeZsRPOPm/anPgr8QrO8+1WoZdIKw3eGun2ttxcGJw3zb1KFoZ4 V26ODSuw+HtfD5XGUlv6K1rzvJEd4xpDq7XalKyPjNJoNvXKBwzIJjUiFccRonJH 3jNIgiMYofJEZZ93yR7HBoUDBQeaeZJP9AID9Q70MQaJ4yi6i6DZ/e05JNO8GkiI WWnAEn3mlR6QIFFMT4KZN0MVPiqU9x0vtZoktMSWcWpKCxXf7jqHLC7RfZ4Vt8jM R7B+AcANgPc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org