$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer File: 19B904DED71657E1E79F9B50507DCCCB817E9635.cer (raw, json) Hash identifier: VwB85TMEqJ2cH2wrVB4bD+HkHaANen0JbE7M4usJWaE= Subject key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B7944D532394E4F72B73F9D52A94708F4832032 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft caRepository: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Nov 2023 14:15:51 +0000 Certificate not after: Thu 07 Nov 2024 14:20:51 +0000 Subordinate resources: IP: 103.83.84.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:79:44:d5:32:39:4e:4f:72:b7:3f:9d:52:a9:47:08:f4:83:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 9 14:15:51 2023 GMT Not After : Nov 7 14:20:51 2024 GMT Subject: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:2e:8c:76:89:f2:c6:03:5a:88:14:ff:35: 4a:22:09:58:2e:a0:08:08:58:f6:b9:15:fe:d6:b6: 67:59:bc:e3:63:6e:b5:13:fb:73:d8:8f:84:fe:18: 72:67:51:75:18:13:6f:85:78:10:59:91:e3:f6:3e: cd:5a:30:44:60:94:42:a6:78:bb:c6:4c:e0:3d:d9: 5d:b4:fd:41:7f:d8:12:e1:c7:31:ae:12:bf:b1:cd: 06:07:f1:85:17:df:ae:1d:4a:21:e8:55:c5:45:f8: 88:88:2c:e5:c0:fd:bd:c1:8f:bd:8c:06:07:82:a5: 6c:70:3d:6e:bd:0b:3c:e6:65:65:fe:12:4e:4e:86: 6f:f8:50:17:08:5f:a9:71:23:1a:5d:4b:0c:fa:35: e7:9f:7c:04:d0:1e:d7:6c:61:a3:76:aa:11:63:65: 97:df:b0:94:a4:65:aa:e6:05:8f:b0:0d:8b:f4:4d: 7a:99:61:ab:29:d8:34:94:e3:a5:48:df:bb:d1:e1: a8:41:15:85:d9:3d:93:1a:81:91:7a:72:f9:4b:77: 87:bb:75:30:f9:54:a9:a2:99:56:10:57:60:8f:c1: 0a:cb:72:6e:8a:82:42:24:a7:cc:6f:4e:80:68:c7: f8:a8:e8:3e:93:ef:bb:09:c6:67:b9:78:6b:32:56: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.84.0/24 Signature Algorithm: sha256WithRSAEncryption 93:cd:a4:3a:d5:ed:dc:d6:83:2b:a9:4c:47:c9:25:03:b3:72: 34:cd:8a:50:1c:b1:37:bc:7e:32:29:45:75:0b:27:9d:85:b7: 1e:4d:2e:65:c6:52:86:5a:82:33:87:85:60:7a:0a:46:eb:f4: 15:b6:c3:90:64:89:83:53:e1:07:04:4d:3b:93:81:c0:a1:8c: ca:55:cf:66:e5:03:f7:f9:77:62:0d:4b:74:a1:da:dd:dc:0c: e4:ba:ea:3e:f3:3c:37:ee:e5:5b:fc:20:e3:d6:93:63:a4:0f: b8:8a:2f:c8:44:68:4b:08:09:fa:e2:67:d9:2a:ea:de:5e:70: b7:ba:10:bd:d8:87:40:25:0a:eb:f5:5d:5f:1e:d2:fb:20:10: ea:38:71:ec:c2:8e:f5:3a:dd:66:ed:c8:b6:c1:b0:ea:01:2b: df:e7:45:05:0a:c3:e3:83:49:cc:09:74:6e:5a:62:55:a7:df: 80:1a:72:57:38:0b:2d:26:1f:5e:6a:62:9e:33:c9:c6:3a:91: c6:77:46:7a:20:53:27:65:4f:78:52:47:0d:ff:e9:36:fd:37: c9:77:74:73:26:61:4a:90:d0:74:f3:e4:9e:eb:9d:54:18:a3: e7:1b:1f:fb:db:4f:1d:94:4d:c6:48:88:51:19:55:4c:64:93: f9:f3:2f:04 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa3lE1TI5Tk9ytz+dUqlHCPSDIDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwOTE0MTU1MVoX DTI0MTEwNzE0MjA1MVowMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5 QjUwNTA3RENDQ0I4MTdFOTYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9fLox2ifLGA1qIFP81SiIJWC6gCAhY9rkV/ta2Z1m842NutRP7c9iPhP4Y cmdRdRgTb4V4EFmR4/Y+zVowRGCUQqZ4u8ZM4D3ZXbT9QX/YEuHHMa4Sv7HNBgfx hRffrh1KIehVxUX4iIgs5cD9vcGPvYwGB4KlbHA9br0LPOZlZf4STk6Gb/hQFwhf qXEjGl1LDPo15598BNAe12xho3aqEWNll9+wlKRlquYFj7ANi/RNeplhqynYNJTj pUjfu9HhqEEVhdk9kxqBkXpy+Ut3h7t1MPlUqaKZVhBXYI/BCstyboqCQiSnzG9O gGjH+KjoPpPvuwnGZ7l4azJW8sUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBm5BN7XFlfh55+bUFB9zMuBfpY1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZTQwYTk4 LTkzZWYtNGFmOC1hNDM2LTQ2OTc0MDE1NDc4Mi8wLzE5QjkwNERFRDcxNjU3RTFF NzlGOUI1MDUwN0RDQ0NCODE3RTk2MzUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnU1QwDQYJKoZIhvcNAQELBQADggEBAJPNpDrV7dzWgyupTEfJJQOzcjTNilAc sTe8fjIpRXULJ52Ftx5NLmXGUoZagjOHhWB6Ckbr9BW2w5BkiYNT4QcETTuTgcCh jMpVz2blA/f5d2INS3Sh2t3cDOS66j7zPDfu5Vv8IOPWk2OkD7iKL8hEaEsICfri Z9kq6t5ecLe6EL3Yh0AlCuv1XV8e0vsgEOo4cezCjvU63WbtyLbBsOoBK9/nRQUK w+ODScwJdG5aYlWn34Aaclc4Cy0mH15qYp4zycY6kcZ3RnogUydlT3hSRw3/6Tb9 N8l3dHMmYUqQ0HTz5J7rnVQYo+cbH/vbTx2UTcZIiFEZVUxkk/nzLwQ= -----END CERTIFICATE-----Generated at Wed May 8 04:37:47 2024 by rpki-client on console-fra.rpki-client.org