$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer (raw, json) Hash identifier: aA3L2jepKOfXhg7B85HO4eR6HfcpWqpYdjFZkquaP0Q= Subject key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02AB1EE7D981B3E4E948042E47D34D80770E0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Jan 2024 08:33:39 +0000 Certificate not after: Tue 21 Jan 2025 08:38:39 +0000 Subordinate resources: IP: 103.68.214.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ab:1e:e7:d9:81:b3:e4:e9:48:04:2e:47:d3:4d:80:77:0e:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 23 08:33:39 2024 GMT Not After : Jan 21 08:38:39 2025 GMT Subject: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:85:7c:cf:d2:5a:50:cf:df:32:27:4d:a7: 75:b2:b9:d3:77:33:1c:41:55:2b:2d:e5:ab:1c:0f: 78:85:e6:7b:65:e3:25:8d:4f:db:b3:42:14:42:59: d2:39:9e:05:70:5c:8d:e5:1c:a6:de:71:89:d5:d4: 69:4b:50:70:b9:4c:23:a7:1f:f5:b7:c6:9d:fc:09: 2a:a7:7a:8a:57:bf:48:c5:e3:bd:0c:4e:0e:9e:9a: 3a:d0:1b:8a:64:13:c0:24:d7:69:ae:63:6f:d0:d6: 8b:4c:81:12:34:cb:7b:bd:21:ec:f8:02:08:45:4f: fd:4f:5b:41:18:e8:a7:f1:7e:c3:41:73:ae:52:24: 62:b3:dd:c8:7a:6c:0a:db:26:92:34:1b:44:77:41: e0:8c:7d:8c:39:73:cf:3b:2f:a2:b7:69:0e:ca:f3: 72:70:6c:90:b3:89:eb:f9:51:d0:84:c1:0c:35:b8: 96:9d:59:6b:17:20:14:17:8a:81:85:dd:29:81:a6: 1d:46:f0:ae:7e:bb:50:e9:b9:78:c7:b9:46:45:71: aa:88:b5:f9:21:54:4d:4a:b6:d7:a7:a9:4e:52:c4: ea:17:74:2c:c3:cf:5d:09:9e:26:b8:ac:8f:4d:cd: 8d:cf:3f:d9:70:8d:a5:c3:29:3f:52:af:64:22:29: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.214.0/23 Signature Algorithm: sha256WithRSAEncryption 43:d0:06:06:12:85:35:6e:a2:c7:75:3e:2d:b6:3e:ae:ab:82: 8c:31:89:24:88:ea:d5:55:97:49:62:90:53:13:40:96:6a:7e: f1:09:b5:80:38:ee:e6:0e:94:aa:53:25:38:70:84:21:85:0d: ad:a0:a1:03:af:ca:69:8d:3f:18:76:62:3b:e8:91:e2:d1:68: 43:dc:bf:ee:6c:3c:a1:ad:fb:73:79:69:49:da:42:35:e4:eb: 11:bd:3d:3e:4c:19:e0:39:64:39:9a:9f:cd:97:81:91:27:8d: 39:00:35:c3:8d:73:84:c2:7c:f6:bc:fa:da:0a:01:fd:6e:b7: dd:64:90:f4:94:07:96:5c:dd:93:50:0c:8f:62:a3:d7:19:02: 3a:ec:19:5e:83:36:5b:c1:a2:a4:e3:8c:8f:e2:ad:b2:5f:a7: 4c:ef:42:42:71:a5:4c:4f:c3:86:3e:de:3e:88:aa:e9:1b:74: 3d:28:5d:92:1f:6c:a1:73:95:45:8b:39:b5:8b:94:72:6b:70: 21:36:44:0a:db:47:9c:07:40:ab:ba:97:76:9a:4d:6b:ce:85: 68:9f:f8:a8:04:57:c7:2e:49:18:01:d6:e0:4b:62:36:6b:fc: 2f:1a:bf:66:a7:5d:e7:c8:4b:f5:c9:30:12:a5:63:c6:12:44: 2b:d3:6e:d2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAqse59mBs+TpSAQuR9NNgHcOCBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyMzA4MzMzOVoX DTI1MDEyMTA4MzgzOVowMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlD MzUxRUIwNDBEMjg0Q0Y3OTFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIrhXzP0lpQz98yJ02ndbK503czHEFVKy3lqxwPeIXme2XjJY1P27NCFEJZ 0jmeBXBcjeUcpt5xidXUaUtQcLlMI6cf9bfGnfwJKqd6ile/SMXjvQxODp6aOtAb imQTwCTXaa5jb9DWi0yBEjTLe70h7PgCCEVP/U9bQRjop/F+w0FzrlIkYrPdyHps CtsmkjQbRHdB4Ix9jDlzzzsvordpDsrzcnBskLOJ6/lR0ITBDDW4lp1ZaxcgFBeK gYXdKYGmHUbwrn67UOm5eMe5RkVxqoi1+SFUTUq216epTlLE6hd0LMPPXQmeJris j03Njc8/2XCNpcMpP1KvZCIpkk8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkoC49apPvexnnDUesEDShM95G+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlYmY2M2Vk LWQ0NTAtNDc3ZS1iMzFiLWFmOTJiMTcyNmQyZS8wLzE5MjgwQjhGNUFBNEZCREVD Njc5QzM1MUVCMDQwRDI4NENGNzkxQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnRNYwDQYJKoZIhvcNAQELBQADggEBAEPQBgYShTVuosd1Pi22Pq6rgowxiSSI 6tVVl0likFMTQJZqfvEJtYA47uYOlKpTJThwhCGFDa2goQOvymmNPxh2YjvokeLR aEPcv+5sPKGt+3N5aUnaQjXk6xG9PT5MGeA5ZDman82XgZEnjTkANcONc4TCfPa8 +toKAf1ut91kkPSUB5Zc3ZNQDI9io9cZAjrsGV6DNlvBoqTjjI/irbJfp0zvQkJx pUxPw4Y+3j6IqukbdD0oXZIfbKFzlUWLObWLlHJrcCE2RArbR5wHQKu6l3aaTWvO hWif+KgEV8cuSRgB1uBLYjZr/C8av2anXefIS/XJMBKlY8YSRCvTbtI= -----END CERTIFICATE-----Generated at Wed May 8 17:45:15 2024 by rpki-client on console-ams.rpki-client.org