$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer File: 19B904DED71657E1E79F9B50507DCCCB817E9635.cer (raw, json) Hash identifier: l+ZbBtng0ebKGuHbQoNyO2ys2zUfgMW899oGFt+ikKY= Subject key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55BFF81D262F75A5C5E6A059F496F4425FEB9B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft caRepository: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 10 Oct 2024 22:39:47 +0000 Certificate not after: Thu 09 Oct 2025 22:44:47 +0000 Subordinate resources: IP: 103.83.84.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bf:f8:1d:26:2f:75:a5:c5:e6:a0:59:f4:96:f4:42:5f:eb:9b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 10 22:39:47 2024 GMT Not After : Oct 9 22:44:47 2025 GMT Subject: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:2e:8c:76:89:f2:c6:03:5a:88:14:ff:35: 4a:22:09:58:2e:a0:08:08:58:f6:b9:15:fe:d6:b6: 67:59:bc:e3:63:6e:b5:13:fb:73:d8:8f:84:fe:18: 72:67:51:75:18:13:6f:85:78:10:59:91:e3:f6:3e: cd:5a:30:44:60:94:42:a6:78:bb:c6:4c:e0:3d:d9: 5d:b4:fd:41:7f:d8:12:e1:c7:31:ae:12:bf:b1:cd: 06:07:f1:85:17:df:ae:1d:4a:21:e8:55:c5:45:f8: 88:88:2c:e5:c0:fd:bd:c1:8f:bd:8c:06:07:82:a5: 6c:70:3d:6e:bd:0b:3c:e6:65:65:fe:12:4e:4e:86: 6f:f8:50:17:08:5f:a9:71:23:1a:5d:4b:0c:fa:35: e7:9f:7c:04:d0:1e:d7:6c:61:a3:76:aa:11:63:65: 97:df:b0:94:a4:65:aa:e6:05:8f:b0:0d:8b:f4:4d: 7a:99:61:ab:29:d8:34:94:e3:a5:48:df:bb:d1:e1: a8:41:15:85:d9:3d:93:1a:81:91:7a:72:f9:4b:77: 87:bb:75:30:f9:54:a9:a2:99:56:10:57:60:8f:c1: 0a:cb:72:6e:8a:82:42:24:a7:cc:6f:4e:80:68:c7: f8:a8:e8:3e:93:ef:bb:09:c6:67:b9:78:6b:32:56: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.84.0/24 Signature Algorithm: sha256WithRSAEncryption 82:58:68:e5:07:a7:ea:8d:73:74:eb:da:c9:dd:3a:f0:98:a2: 70:0a:8a:52:90:4b:63:ae:0f:8f:83:9a:b4:7a:48:01:2b:46: 46:ad:11:4f:73:39:f0:96:58:49:03:f2:80:3b:04:3c:cb:ad: c1:d1:2d:b5:36:fa:61:d5:2f:67:48:00:f7:c1:34:1f:7f:05: 82:71:34:d1:6c:90:d0:f2:51:79:c1:86:dc:8f:94:11:74:27: 48:07:41:ea:af:b0:87:fe:e9:eb:c6:68:82:36:d9:23:c1:0f: 2e:bc:4c:2a:02:80:eb:13:c0:83:18:43:cd:f2:38:6d:21:92: d3:da:8b:5e:c1:34:c0:c1:0c:ad:fd:65:4b:ec:50:22:67:93: 3b:ff:46:3f:62:49:b1:b8:b2:3a:c3:e5:67:ab:70:4d:57:b1: 10:57:66:4d:12:ca:3b:4a:4d:76:78:2d:0c:8a:46:3c:52:2b: 83:1e:79:33:89:5c:9a:0e:61:1e:67:45:0f:a4:0e:87:57:c8: 3c:db:b2:2d:a5:ed:a8:ee:d4:57:53:fd:cc:2f:c2:94:26:ee: ea:aa:4c:d5:1f:8b:1c:9e:e8:02:b5:ff:59:c0:57:89:7e:74: 4b:0f:41:bb:6a:7f:7c:c8:dd:07:af:59:82:e2:0c:a9:11:26: d3:7f:d2:23 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVb/4HSYvdaXF5qBZ9Jb0Ql/rmxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxMDIyMzk0N1oX DTI1MTAwOTIyNDQ0N1owMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5 QjUwNTA3RENDQ0I4MTdFOTYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9fLox2ifLGA1qIFP81SiIJWC6gCAhY9rkV/ta2Z1m842NutRP7c9iPhP4Y cmdRdRgTb4V4EFmR4/Y+zVowRGCUQqZ4u8ZM4D3ZXbT9QX/YEuHHMa4Sv7HNBgfx hRffrh1KIehVxUX4iIgs5cD9vcGPvYwGB4KlbHA9br0LPOZlZf4STk6Gb/hQFwhf qXEjGl1LDPo15598BNAe12xho3aqEWNll9+wlKRlquYFj7ANi/RNeplhqynYNJTj pUjfu9HhqEEVhdk9kxqBkXpy+Ut3h7t1MPlUqaKZVhBXYI/BCstyboqCQiSnzG9O gGjH+KjoPpPvuwnGZ7l4azJW8sUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBm5BN7XFlfh55+bUFB9zMuBfpY1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZTQwYTk4 LTkzZWYtNGFmOC1hNDM2LTQ2OTc0MDE1NDc4Mi8wLzE5QjkwNERFRDcxNjU3RTFF NzlGOUI1MDUwN0RDQ0NCODE3RTk2MzUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnU1QwDQYJKoZIhvcNAQELBQADggEBAIJYaOUHp+qNc3Tr2sndOvCYonAKilKQ S2OuD4+DmrR6SAErRkatEU9zOfCWWEkD8oA7BDzLrcHRLbU2+mHVL2dIAPfBNB9/ BYJxNNFskNDyUXnBhtyPlBF0J0gHQeqvsIf+6evGaII22SPBDy68TCoCgOsTwIMY Q83yOG0hktPai17BNMDBDK39ZUvsUCJnkzv/Rj9iSbG4sjrD5WercE1XsRBXZk0S yjtKTXZ4LQyKRjxSK4MeeTOJXJoOYR5nRQ+kDodXyDzbsi2l7aju1FdT/cwvwpQm 7uqqTNUfixye6AK1/1nAV4l+dEsPQbtqf3zI3QevWYLiDKkRJtN/0iM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org