$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer (raw, json) Hash identifier: l7YMaBRHhh8VjZq/xuPnbr1YxC/YA+J3i3IGYAvDWfE= Subject key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6427B3584B4F101F65DC6C5545B086E4189BA4E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft caRepository: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:39:34 +0000 Certificate not after: Sun 28 Jul 2024 23:44:34 +0000 Subordinate resources: IP: 103.30.180.0/22 IP: 112.78.40.0/21 IP: 157.119.220.0/22 IP: 2403:9100::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:27:b3:58:4b:4f:10:1f:65:dc:6c:55:45:b0:86:e4:18:9b:a4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 23:39:34 2023 GMT Not After : Jul 28 23:44:34 2024 GMT Subject: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:7f:67:11:14:2d:f2:8a:ca:7e:44:67:bf: 4b:3f:08:24:56:a9:15:4d:96:f3:36:8c:0e:2b:50: f5:b8:ff:cb:45:fc:30:0f:b5:f2:c0:2f:76:0e:e4: 39:bb:29:e7:7e:a7:bd:bd:b6:02:b2:64:90:f7:40: cf:e6:76:8e:78:93:ba:08:a1:f3:05:44:ad:1b:99: 65:83:4b:31:56:ef:9b:dc:e3:8c:af:91:c5:94:f7: c1:15:b1:00:86:33:b4:96:8f:47:9e:9a:b0:b1:5f: 25:a5:52:51:4d:63:b2:dd:7f:95:fc:31:52:8e:5d: 9b:b0:8a:a8:b5:a9:90:bf:71:01:2c:00:36:df:ae: d5:2a:62:d4:a4:47:53:2d:8b:9d:58:4c:87:cc:86: 6c:a1:b5:f8:fd:ed:d2:c1:79:6e:6d:f5:ea:b1:25: 54:ea:a2:b7:c3:83:22:a4:56:cb:21:08:78:c4:9d: d8:4b:ee:a3:0d:11:21:73:ce:63:eb:02:9f:58:01: cb:2c:47:c5:68:2d:1b:81:ce:6d:1b:fc:51:2c:76: 1c:66:87:ca:d2:37:40:7c:58:0c:fe:a1:60:52:b5: 40:d3:d9:a9:86:c8:87:dc:fc:ef:51:71:43:8d:96: 11:45:53:ca:14:a1:b9:71:4a:1d:cd:55:c8:58:34: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.180.0/22 112.78.40.0/21 157.119.220.0/22 IPv6: 2403:9100::/32 Signature Algorithm: sha256WithRSAEncryption 55:c8:5d:01:1e:df:95:4b:a4:4f:15:64:2c:f3:de:16:7d:e4: 5f:00:d9:a4:48:f3:31:16:3a:c0:42:79:92:45:6e:aa:c6:73: fe:8f:b5:91:9c:d3:5f:03:1b:16:28:fb:aa:a9:a2:5d:ac:b4: 73:ec:68:91:95:0f:22:f9:5e:18:8a:4e:f0:11:f7:dc:f0:e6: a6:f1:72:85:ee:b3:ab:49:fe:2d:af:cf:a8:76:b6:8a:60:d2: ef:d7:b8:d4:13:c9:99:15:03:d8:b4:21:15:84:9b:60:2d:10: 6e:ce:a6:ee:0c:f9:06:19:2d:db:20:30:f7:72:e5:38:b0:55: 0a:f1:af:e8:2e:9a:a4:41:5a:9f:bc:f1:a1:7e:53:c2:a2:77: ec:31:3a:c5:bb:31:3d:4a:77:51:d6:52:31:0f:40:1a:ee:9a: 03:47:13:58:09:d3:68:38:25:6c:0a:17:29:66:2b:7f:fc:6e: 5d:6e:f2:ed:b6:f3:e1:e0:61:80:ab:40:1f:83:b5:ae:bf:d8: 30:26:c0:62:cc:19:64:dd:4c:b6:3b:bc:c8:6d:0f:eb:3a:53: 44:66:47:92:00:94:79:7f:6f:61:db:26:cd:c8:52:3f:52:06: a4:91:91:5c:f3:40:c1:21:b0:76:62:13:62:e5:54:ac:42:b6: 67:5c:57:73 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUZCezWEtPEB9l3GxVRbCG5BibpOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIzMzkzNFoX DTI0MDcyODIzNDQzNFowMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1 QUVFRjQ0RkMxNjM4N0U2NUMzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHof2cRFC3yisp+RGe/Sz8IJFapFU2W8zaMDitQ9bj/y0X8MA+18sAvdg7k Obsp536nvb22ArJkkPdAz+Z2jniTugih8wVErRuZZYNLMVbvm9zjjK+RxZT3wRWx AIYztJaPR56asLFfJaVSUU1jst1/lfwxUo5dm7CKqLWpkL9xASwANt+u1Spi1KRH Uy2LnVhMh8yGbKG1+P3t0sF5bm316rElVOqit8ODIqRWyyEIeMSd2Evuow0RIXPO Y+sCn1gByyxHxWgtG4HObRv8USx2HGaHytI3QHxYDP6hYFK1QNPZqYbIh9z871Fx Q42WEUVTyhShuXFKHc1VyFg0+PcCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmhlvXluroxkmxa7vRPwWOH5lw8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiODg1OGUw LWVjZjAtNGU1My1hNDkwLTNiN2MyZGUxNjkzYy8wLzE5QTE5NkY1RTVCQUJBMzE5 MjZDNUFFRUY0NEZDMTYzODdFNjVDM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAJnHrQDBANwTigDBAKdd9wwDQQCAAIwBwMFACQDkQAwDQYJKoZIhvcNAQELBQAD ggEBAFXIXQEe35VLpE8VZCzz3hZ95F8A2aRI8zEWOsBCeZJFbqrGc/6PtZGc018D GxYo+6qpol2stHPsaJGVDyL5XhiKTvAR99zw5qbxcoXus6tJ/i2vz6h2topg0u/X uNQTyZkVA9i0IRWEm2AtEG7Opu4M+QYZLdsgMPdy5TiwVQrxr+gumqRBWp+88aF+ U8Kid+wxOsW7MT1Kd1HWUjEPQBrumgNHE1gJ02g4JWwKFylmK3/8bl1u8u228+Hg YYCrQB+Dta6/2DAmwGLMGWTdTLY7vMhtD+s6U0RmR5IAlHl/b2HbJs3IUj9SBqSR kVzzQMEhsHZiE2LlVKxCtmdcV3M= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org