$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer (raw, json) Hash identifier: My/s/DvPn38G0OH+oAcfsSbnMY7/AH7PIcDBoZP2DBU= Subject key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3466ECCEE3832BC321E05F9ABEEF4DA80A78BD07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Dec 2024 21:29:50 +0000 Certificate not after: Tue 23 Dec 2025 21:34:50 +0000 Subordinate resources: IP: 103.68.214.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:66:ec:ce:e3:83:2b:c3:21:e0:5f:9a:be:ef:4d:a8:0a:78:bd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 24 21:29:50 2024 GMT Not After : Dec 23 21:34:50 2025 GMT Subject: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:85:7c:cf:d2:5a:50:cf:df:32:27:4d:a7: 75:b2:b9:d3:77:33:1c:41:55:2b:2d:e5:ab:1c:0f: 78:85:e6:7b:65:e3:25:8d:4f:db:b3:42:14:42:59: d2:39:9e:05:70:5c:8d:e5:1c:a6:de:71:89:d5:d4: 69:4b:50:70:b9:4c:23:a7:1f:f5:b7:c6:9d:fc:09: 2a:a7:7a:8a:57:bf:48:c5:e3:bd:0c:4e:0e:9e:9a: 3a:d0:1b:8a:64:13:c0:24:d7:69:ae:63:6f:d0:d6: 8b:4c:81:12:34:cb:7b:bd:21:ec:f8:02:08:45:4f: fd:4f:5b:41:18:e8:a7:f1:7e:c3:41:73:ae:52:24: 62:b3:dd:c8:7a:6c:0a:db:26:92:34:1b:44:77:41: e0:8c:7d:8c:39:73:cf:3b:2f:a2:b7:69:0e:ca:f3: 72:70:6c:90:b3:89:eb:f9:51:d0:84:c1:0c:35:b8: 96:9d:59:6b:17:20:14:17:8a:81:85:dd:29:81:a6: 1d:46:f0:ae:7e:bb:50:e9:b9:78:c7:b9:46:45:71: aa:88:b5:f9:21:54:4d:4a:b6:d7:a7:a9:4e:52:c4: ea:17:74:2c:c3:cf:5d:09:9e:26:b8:ac:8f:4d:cd: 8d:cf:3f:d9:70:8d:a5:c3:29:3f:52:af:64:22:29: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.214.0/23 Signature Algorithm: sha256WithRSAEncryption 14:f7:19:df:b6:13:24:ff:fa:cc:d9:6f:64:ff:2b:ca:05:3f: c4:df:ab:3d:46:17:e6:5e:d1:54:7e:26:48:c6:76:38:ef:87: 09:68:92:48:72:6e:3f:0e:ba:b8:3e:4d:d9:ff:66:cd:98:98: ad:64:df:9c:2e:92:05:1b:55:b0:4e:92:fa:01:8a:38:b1:9e: 83:dc:4f:33:b7:f5:26:17:fb:11:aa:27:00:c5:dd:05:12:4c: 67:be:ca:14:7b:99:a0:a9:e3:6c:9a:88:1b:d3:f7:08:61:35: f8:46:02:5f:a7:69:bd:2a:0a:e8:a1:d6:48:10:79:b4:4e:50: db:c0:a0:31:c9:5c:b6:92:26:be:27:77:6c:88:2d:b9:e0:ba: b2:d7:d2:5e:ba:04:4d:83:da:fa:36:9a:46:1e:93:4f:b1:0a: 7b:ee:f8:8a:37:57:e2:05:e3:2d:67:5a:04:52:3a:95:31:0a: 18:ae:6c:e5:74:6c:ed:d1:4b:7c:2c:2c:43:4b:d3:0f:a6:c3: 92:f6:79:5f:e1:18:53:3a:70:4d:2b:cd:dc:e9:9b:0f:a8:ee: db:c6:a7:0f:fc:0d:46:45:64:a5:24:a6:3f:6c:21:c7:ab:d4: 01:c2:2e:56:fc:96:92:50:17:cd:f9:aa:cb:a3:85:11:7b:67: d3:1d:8f:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNGbszuODK8Mh4F+avu9NqAp4vQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNDIxMjk1MFoX DTI1MTIyMzIxMzQ1MFowMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlD MzUxRUIwNDBEMjg0Q0Y3OTFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIrhXzP0lpQz98yJ02ndbK503czHEFVKy3lqxwPeIXme2XjJY1P27NCFEJZ 0jmeBXBcjeUcpt5xidXUaUtQcLlMI6cf9bfGnfwJKqd6ile/SMXjvQxODp6aOtAb imQTwCTXaa5jb9DWi0yBEjTLe70h7PgCCEVP/U9bQRjop/F+w0FzrlIkYrPdyHps CtsmkjQbRHdB4Ix9jDlzzzsvordpDsrzcnBskLOJ6/lR0ITBDDW4lp1ZaxcgFBeK gYXdKYGmHUbwrn67UOm5eMe5RkVxqoi1+SFUTUq216epTlLE6hd0LMPPXQmeJris j03Njc8/2XCNpcMpP1KvZCIpkk8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkoC49apPvexnnDUesEDShM95G+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlYmY2M2Vk LWQ0NTAtNDc3ZS1iMzFiLWFmOTJiMTcyNmQyZS8wLzE5MjgwQjhGNUFBNEZCREVD Njc5QzM1MUVCMDQwRDI4NENGNzkxQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnRNYwDQYJKoZIhvcNAQELBQADggEBABT3Gd+2EyT/+szZb2T/K8oFP8Tfqz1G F+Ze0VR+JkjGdjjvhwlokkhybj8Ourg+Tdn/Zs2YmK1k35wukgUbVbBOkvoBijix noPcTzO39SYX+xGqJwDF3QUSTGe+yhR7maCp42yaiBvT9whhNfhGAl+nab0qCuih 1kgQebROUNvAoDHJXLaSJr4nd2yILbngurLX0l66BE2D2vo2mkYek0+xCnvu+Io3 V+IF4y1nWgRSOpUxChiubOV0bO3RS3wsLENL0w+mw5L2eV/hGFM6cE0rzdzpmw+o 7tvGpw/8DUZFZKUkpj9sIcer1AHCLlb8lpJQF835qsujhRF7Z9Mdj9g= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:37 2025 by rpki-client