$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer File: 19D983F92968E71520E086B32ACAFEFB5BF04943.cer (raw, json) Hash identifier: 3lEzFDTnM2Pqr4z+x0XUQfCy529hTQn8jf0Sif4G1bY= Subject key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5736A5DBF9E4F1B9792B1E923CB11D54518BA372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft caRepository: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 20:39:09 +0000 Certificate not after: Mon 30 Jun 2025 20:44:09 +0000 Subordinate resources: IP: 103.18.144.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:36:a5:db:f9:e4:f1:b9:79:2b:1e:92:3c:b1:1d:54:51:8b:a3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 20:39:09 2024 GMT Not After : Jun 30 20:44:09 2025 GMT Subject: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a4:19:dc:c2:02:28:6c:6d:c5:e3:7a:50:cd: 87:9d:40:c9:ce:ff:16:9f:24:25:b9:a1:fe:b0:37: 00:48:f9:ae:ec:ce:f3:f4:28:c9:0d:eb:4b:4c:7c: 95:41:7c:d2:b2:56:c6:9c:09:4e:65:9b:dd:86:71: 61:2a:81:10:5b:5d:bf:b6:6b:0c:bf:13:48:77:ee: c0:87:d0:41:da:8a:05:71:c3:a7:45:fc:76:2f:c9: 73:f5:48:8c:30:4e:fd:71:ab:73:13:68:e1:22:2c: 08:8b:b2:c1:80:11:91:cb:81:db:19:3c:f7:e9:32: 1b:7e:a0:86:5c:6c:74:35:cf:ed:1c:ff:96:51:99: 3d:05:ae:0a:a4:f0:75:8d:6e:06:5b:3e:4f:0d:01: 66:86:ba:4a:22:c8:5f:e2:f0:2b:b6:68:59:6a:59: ec:53:d4:31:c7:68:95:42:8a:39:da:0a:80:16:a7: 11:91:bc:ad:54:95:50:11:0f:e2:5a:e1:b7:bd:2a: 43:e1:8d:75:ae:d2:64:50:2b:b0:8d:74:26:e9:4f: b2:50:c8:9a:69:c8:3c:fa:24:f4:a5:f7:b0:e2:1c: 28:b7:9d:d1:10:70:21:21:db:b1:a1:42:e2:a0:cc: 99:e0:2b:97:50:cf:09:91:6c:ae:53:de:48:c2:bf: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.144.0/22 Signature Algorithm: sha256WithRSAEncryption 65:a9:07:75:f5:37:c0:30:cd:75:3f:73:10:bd:37:e8:04:04: a8:93:43:1e:60:f4:12:aa:e4:c5:4a:4a:e5:da:61:95:a2:ee: b7:e5:6d:a2:86:be:ca:60:5b:30:90:31:dd:b3:c2:5c:e9:11: b6:45:f9:99:8b:83:e3:da:f4:ff:34:ba:69:60:a6:5f:6d:ac: da:53:84:ae:51:af:4e:7a:62:4c:84:e9:f3:b8:1a:30:c6:89: c3:fb:e4:1f:81:5d:4b:25:0c:d0:e3:fa:b4:27:8b:4e:24:b5: 2e:72:91:75:ff:91:af:54:8b:1c:11:40:86:f3:3e:80:01:89: 4a:c3:c0:1f:b4:b9:a9:ba:d8:7b:d8:12:bd:cd:07:ed:ba:b5: 94:35:bc:84:64:ab:1e:ef:b7:32:50:5e:f3:11:8b:d2:5e:c7: d4:73:5e:bf:c4:4a:9d:22:91:a6:80:8c:66:c4:6d:85:41:b5: 2f:06:12:42:be:63:e2:73:df:e2:7f:0a:dc:ca:aa:87:23:35: 42:95:4a:89:e8:d1:1a:d0:8e:97:1e:58:e4:91:cb:9f:9d:53: 8c:36:fb:0f:f0:56:95:96:93:c2:39:35:2a:cb:35:94:c1:e5: a4:a4:ca:66:e9:58:25:d8:7d:8a:1c:4f:66:d8:8a:34:05:27: 11:94:e1:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVzal2/nk8bl5Kx6SPLEdVFGLo3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTIwMzkwOVoX DTI1MDYzMDIwNDQwOVowMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4 NkIzMkFDQUZFRkI1QkYwNDk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2kGdzCAihsbcXjelDNh51Ayc7/Fp8kJbmh/rA3AEj5ruzO8/QoyQ3rS0x8 lUF80rJWxpwJTmWb3YZxYSqBEFtdv7ZrDL8TSHfuwIfQQdqKBXHDp0X8di/Jc/VI jDBO/XGrcxNo4SIsCIuywYARkcuB2xk89+kyG36ghlxsdDXP7Rz/llGZPQWuCqTw dY1uBls+Tw0BZoa6SiLIX+LwK7ZoWWpZ7FPUMcdolUKKOdoKgBanEZG8rVSVUBEP 4lrht70qQ+GNda7SZFArsI10JulPslDImmnIPPok9KX3sOIcKLed0RBwISHbsaFC 4qDMmeArl1DPCZFsrlPeSMK/n9cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnZg/kpaOcVIOCGsyrK/vtb8ElDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yY2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjYjFmMTA5 LWI5ZmUtNDMyMy04NGUzLWI2MGJiNGRjMWVjYy8wLzE5RDk4M0Y5Mjk2OEU3MTUy MEUwODZCMzJBQ0FGRUZCNUJGMDQ5NDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnEpAwDQYJKoZIhvcNAQELBQADggEBAGWpB3X1N8AwzXU/cxC9N+gEBKiTQx5g 9BKq5MVKSuXaYZWi7rflbaKGvspgWzCQMd2zwlzpEbZF+ZmLg+Pa9P80umlgpl9t rNpThK5Rr056YkyE6fO4GjDGicP75B+BXUslDNDj+rQni04ktS5ykXX/ka9UixwR QIbzPoABiUrDwB+0uam62HvYEr3NB+26tZQ1vIRkqx7vtzJQXvMRi9Jex9RzXr/E Sp0ikaaAjGbEbYVBtS8GEkK+Y+Jz3+J/CtzKqocjNUKVSono0RrQjpceWOSRy5+d U4w2+w/wVpWWk8I5NSrLNZTB5aSkymbpWCXYfYocT2bYijQFJxGU4WA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org