$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer File: 19960F4C3FEEC60D5A59281148061FB21094449A.cer (raw, json) Hash identifier: yTyt6doPssXqNy/1tL4B0nNbLiIEiyMs2HXgZoPYatI= Subject key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7FD1DDE52B4740060456D7406ADEDE8854C62230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft caRepository: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 07 Sep 2023 13:52:10 +0000 Certificate not after: Thu 05 Sep 2024 13:57:10 +0000 Subordinate resources: IP: 103.16.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d1:dd:e5:2b:47:40:06:04:56:d7:40:6a:de:de:88:54:c6:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 7 13:52:10 2023 GMT Not After : Sep 5 13:57:10 2024 GMT Subject: CN=19960F4C3FEEC60D5A59281148061FB21094449A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:7c:82:6a:84:59:03:c1:ab:dc:91:8e:26: 94:03:33:5e:d9:ff:52:5e:e4:0e:17:f9:87:e3:18: bc:40:8f:fe:82:17:93:b4:3b:10:e4:2f:95:37:2b: 1c:b5:9d:c1:25:f0:2e:8b:a7:fa:98:9d:bc:6c:4f: 60:d9:b7:45:64:76:fd:99:77:56:ae:6e:0e:71:e8: 23:d8:b1:fa:a5:42:19:a9:a2:d7:77:9a:f8:e1:31: 73:ef:f9:01:6b:fd:5d:8f:11:79:b6:03:08:cd:ce: 76:c8:a6:0c:13:b1:b7:ce:6b:d8:9e:4f:57:98:42: 77:35:f8:03:da:e5:af:39:76:1e:12:07:08:5c:ba: 7b:ad:73:88:22:70:17:9f:18:33:b0:08:60:d8:00: 69:ec:96:16:d8:65:25:3a:e3:ef:54:d1:3a:4c:07: e8:62:1c:e7:66:24:7d:05:ea:79:cb:b8:c4:0d:44: 8c:51:95:ba:6d:e0:06:02:e1:2b:c7:7d:d4:7c:de: 52:9d:5f:d7:49:0f:7f:61:c7:45:81:ff:00:88:5b: a6:53:be:f7:81:dd:3c:9d:5d:e0:63:d7:69:ff:20: 53:ef:98:4d:92:82:a1:07:fe:a5:cb:14:31:d5:e9: c7:b9:d9:31:a1:c8:b4:57:60:f0:db:10:84:2d:6e: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.116.0/23 Signature Algorithm: sha256WithRSAEncryption 25:7b:a5:ff:db:ef:8f:11:bd:ec:83:7c:81:11:21:a1:7b:12: 4f:15:97:10:64:57:03:a9:89:a5:ba:0d:f7:7a:db:92:e6:20: 3d:cd:9d:df:bf:b1:ec:08:d9:23:d0:01:ed:4c:b3:50:e2:31: 28:30:f1:ab:4c:e6:e4:75:2d:66:8b:a8:c8:43:f8:0b:01:7c: e2:b8:ed:c0:e9:38:b6:7f:1b:3f:ca:35:1d:9e:f1:02:a9:13: 8f:f1:69:c4:57:70:61:56:f7:06:fc:ca:49:9c:70:7f:96:f1: c8:b0:0b:22:86:86:a1:a7:16:06:54:6c:3a:e3:72:fc:67:35: 2a:f4:37:c3:4b:6c:d4:1c:a2:21:7d:0c:52:96:3c:7a:59:ff: d7:64:29:b4:9e:71:9c:24:ed:e8:2d:b2:5c:73:b2:29:f6:e4: fd:f4:f2:4f:4c:e5:6e:b8:79:fc:48:f6:ee:8b:02:2e:7a:82: 03:aa:88:71:28:bb:fa:e9:d0:6a:c0:04:6f:31:23:cd:34:fc: 63:2f:d1:53:a0:ea:12:38:26:3d:ce:4e:69:a7:1a:f4:6f:20: ce:4e:5c:c0:83:6e:a8:a2:47:74:dc:d4:50:c6:ff:e3:ad:1b: fb:8b:37:f6:37:89:e3:f6:6b:ea:a9:a1:46:c6:22:70:ae:e1: b3:ed:ce:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUf9Hd5StHQAYEVtdAat7eiFTGIjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwNzEzNTIxMFoX DTI0MDkwNTEzNTcxMFowMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTky ODExNDgwNjFGQjIxMDk0NDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjofIJqhFkDwavckY4mlAMzXtn/Ul7kDhf5h+MYvECP/oIXk7Q7EOQvlTcr HLWdwSXwLoun+pidvGxPYNm3RWR2/Zl3Vq5uDnHoI9ix+qVCGami13ea+OExc+/5 AWv9XY8RebYDCM3OdsimDBOxt85r2J5PV5hCdzX4A9rlrzl2HhIHCFy6e61ziCJw F58YM7AIYNgAaeyWFthlJTrj71TROkwH6GIc52YkfQXqecu4xA1EjFGVum3gBgLh K8d91HzeUp1f10kPf2HHRYH/AIhbplO+94HdPJ1d4GPXaf8gU++YTZKCoQf+pcsU MdXpx7nZMaHItFdg8NsQhC1uknkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmWD0w/7sYNWlkoEUgGH7IQlESaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZThiY2M5 LTQzYTEtNGJhYi1iNmQ4LTFhOTdkMGQzYzIxZC8wLzE5OTYwRjRDM0ZFRUM2MEQ1 QTU5MjgxMTQ4MDYxRkIyMTA5NDQ0OUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHQwDQYJKoZIhvcNAQELBQADggEBACV7pf/b748RveyDfIERIaF7Ek8VlxBk VwOpiaW6Dfd625LmID3Nnd+/sewI2SPQAe1Ms1DiMSgw8atM5uR1LWaLqMhD+AsB fOK47cDpOLZ/Gz/KNR2e8QKpE4/xacRXcGFW9wb8ykmccH+W8ciwCyKGhqGnFgZU bDrjcvxnNSr0N8NLbNQcoiF9DFKWPHpZ/9dkKbSecZwk7egtslxzsin25P308k9M 5W64efxI9u6LAi56ggOqiHEou/rp0GrABG8xI800/GMv0VOg6hI4Jj3OTmmnGvRv IM5OXMCDbqiiR3Tc1FDG/+OtG/uLN/Y3ieP2a+qpoUbGInCu4bPtzok= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org