$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer File: 19960F4C3FEEC60D5A59281148061FB21094449A.cer (raw, json) Hash identifier: w/yHFGx6tgmW5dlo2J8ZSUrQoGiM/DWW58YWm7h/e5I= Subject key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C392C2020759D61528DBA52DB4C3C93DD9E94CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft caRepository: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Aug 2024 21:25:53 +0000 Certificate not after: Thu 07 Aug 2025 21:30:53 +0000 Subordinate resources: IP: 103.16.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:39:2c:20:20:75:9d:61:52:8d:ba:52:db:4c:3c:93:dd:9e:94:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 21:25:53 2024 GMT Not After : Aug 7 21:30:53 2025 GMT Subject: CN=19960F4C3FEEC60D5A59281148061FB21094449A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:7c:82:6a:84:59:03:c1:ab:dc:91:8e:26: 94:03:33:5e:d9:ff:52:5e:e4:0e:17:f9:87:e3:18: bc:40:8f:fe:82:17:93:b4:3b:10:e4:2f:95:37:2b: 1c:b5:9d:c1:25:f0:2e:8b:a7:fa:98:9d:bc:6c:4f: 60:d9:b7:45:64:76:fd:99:77:56:ae:6e:0e:71:e8: 23:d8:b1:fa:a5:42:19:a9:a2:d7:77:9a:f8:e1:31: 73:ef:f9:01:6b:fd:5d:8f:11:79:b6:03:08:cd:ce: 76:c8:a6:0c:13:b1:b7:ce:6b:d8:9e:4f:57:98:42: 77:35:f8:03:da:e5:af:39:76:1e:12:07:08:5c:ba: 7b:ad:73:88:22:70:17:9f:18:33:b0:08:60:d8:00: 69:ec:96:16:d8:65:25:3a:e3:ef:54:d1:3a:4c:07: e8:62:1c:e7:66:24:7d:05:ea:79:cb:b8:c4:0d:44: 8c:51:95:ba:6d:e0:06:02:e1:2b:c7:7d:d4:7c:de: 52:9d:5f:d7:49:0f:7f:61:c7:45:81:ff:00:88:5b: a6:53:be:f7:81:dd:3c:9d:5d:e0:63:d7:69:ff:20: 53:ef:98:4d:92:82:a1:07:fe:a5:cb:14:31:d5:e9: c7:b9:d9:31:a1:c8:b4:57:60:f0:db:10:84:2d:6e: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.116.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:90:28:84:33:dd:68:12:ef:de:30:11:df:0f:ca:31:6a:8c: b8:25:2c:36:cf:8f:24:8b:29:4b:06:3d:04:75:de:95:49:24: 71:63:4c:90:2f:e4:f8:c4:c4:da:c9:27:cb:ef:3c:ac:29:a7: 13:60:ba:66:29:14:3d:35:25:b7:e3:63:a2:b8:ca:36:80:53: 25:76:bb:43:ec:de:35:cc:0c:e2:a3:f5:65:5c:2a:c0:78:0f: ab:e7:1f:71:8c:98:60:72:47:f1:40:ad:90:79:62:87:4d:fc: dc:09:06:58:5a:7a:7a:6a:e0:af:39:a0:4a:77:9b:1f:42:8a: 26:67:f5:44:1d:c2:0c:85:aa:4f:0f:ca:94:e0:bb:d3:2e:66: fa:c3:df:94:31:aa:90:a4:7d:ca:26:e8:26:2a:cd:19:cb:04: 3a:7a:25:f9:57:af:97:c4:98:3a:8f:40:34:6f:e2:93:6f:f9: 0f:7c:19:ac:8b:c8:c0:77:18:18:ad:2a:d9:bc:12:74:91:80: 9f:c8:61:43:c1:36:e3:73:d7:48:dc:22:a8:14:c0:d2:32:ef: fa:7a:78:0e:75:a4:86:d4:fd:e3:e9:b7:ed:2e:be:40:30:11: 9e:2d:32:1a:da:83:1b:c5:7a:49:b3:7d:9b:1d:72:c6:78:0f: 2b:a5:1b:3b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULDksICB1nWFSjbpS20w8k92elMwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwODIxMjU1M1oX DTI1MDgwNzIxMzA1M1owMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTky ODExNDgwNjFGQjIxMDk0NDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjofIJqhFkDwavckY4mlAMzXtn/Ul7kDhf5h+MYvECP/oIXk7Q7EOQvlTcr HLWdwSXwLoun+pidvGxPYNm3RWR2/Zl3Vq5uDnHoI9ix+qVCGami13ea+OExc+/5 AWv9XY8RebYDCM3OdsimDBOxt85r2J5PV5hCdzX4A9rlrzl2HhIHCFy6e61ziCJw F58YM7AIYNgAaeyWFthlJTrj71TROkwH6GIc52YkfQXqecu4xA1EjFGVum3gBgLh K8d91HzeUp1f10kPf2HHRYH/AIhbplO+94HdPJ1d4GPXaf8gU++YTZKCoQf+pcsU MdXpx7nZMaHItFdg8NsQhC1uknkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmWD0w/7sYNWlkoEUgGH7IQlESaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZThiY2M5 LTQzYTEtNGJhYi1iNmQ4LTFhOTdkMGQzYzIxZC8wLzE5OTYwRjRDM0ZFRUM2MEQ1 QTU5MjgxMTQ4MDYxRkIyMTA5NDQ0OUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHQwDQYJKoZIhvcNAQELBQADggEBAG+QKIQz3WgS794wEd8PyjFqjLglLDbP jySLKUsGPQR13pVJJHFjTJAv5PjExNrJJ8vvPKwppxNgumYpFD01JbfjY6K4yjaA UyV2u0Ps3jXMDOKj9WVcKsB4D6vnH3GMmGByR/FArZB5YodN/NwJBlhaenpq4K85 oEp3mx9CiiZn9UQdwgyFqk8PypTgu9MuZvrD35QxqpCkfcom6CYqzRnLBDp6JflX r5fEmDqPQDRv4pNv+Q98GayLyMB3GBitKtm8EnSRgJ/IYUPBNuNz10jcIqgUwNIy 7/p6eA51pIbU/ePpt+0uvkAwEZ4tMhragxvFekmzfZsdcsZ4DyulGzs= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:18 2024 by rpki-client on console-ams.rpki-client.org