$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer (raw, json) Hash identifier: pmRmKQgk9Wdew7kCLM6TBjF6zynhxQ9yn9MXxwZhGRo= Subject key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A2898FA84040F92C33BA7DDA9E5421D0C77BFB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 31 May 2024 17:11:00 +0000 Certificate not after: Fri 30 May 2025 17:16:00 +0000 Subordinate resources: IP: 103.180.196.0/23 IP: 2001:df0:60c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:28:98:fa:84:04:0f:92:c3:3b:a7:dd:a9:e5:42:1d:0c:77:bf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 31 17:11:00 2024 GMT Not After : May 30 17:16:00 2025 GMT Subject: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:d9:0c:38:ae:f8:6d:35:6f:e3:42:fa:e0: 39:f5:82:d6:9f:05:b1:31:45:57:bc:0d:b5:01:59: 91:80:17:0c:4e:d9:34:72:51:7a:3e:91:58:41:b6: a5:ff:6f:16:ca:8d:b1:f0:2d:97:f6:5e:e3:29:53: 2c:05:00:4a:9f:d3:54:74:82:84:7c:54:55:1f:3c: 4c:ab:a5:90:0c:e1:fa:2f:6b:02:25:a8:08:02:f3: cf:a2:f9:ed:c1:1c:29:7d:09:84:c2:fa:9f:8a:d5: 1d:e2:7d:88:e6:d1:51:d8:e8:f9:8b:6b:e4:f2:eb: 41:0c:e3:02:b7:f4:3d:9b:33:00:92:a8:eb:cb:24: 05:6d:10:a0:e4:c6:e6:45:f2:0f:7a:7b:f7:76:cc: aa:cc:cc:24:2f:65:5f:f5:5c:1b:a1:ae:d4:63:fc: a8:fb:a8:32:3b:12:2e:20:ea:23:b0:51:4c:2e:14: 4f:2f:97:0c:09:f1:8d:ab:48:70:7b:9f:74:06:a0: c5:8c:d9:e7:84:54:04:5c:df:c1:04:14:ed:48:2a: 7e:b6:9f:c6:7e:eb:5d:c3:ae:82:2c:1d:f0:03:7f: 91:52:a2:0e:d7:e8:f0:fb:cb:90:21:81:e2:81:cb: d8:19:d2:60:a5:a9:27:b4:06:1c:5c:b9:ab:d2:08: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.196.0/23 IPv6: 2001:df0:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:64:63:3b:6d:d8:f2:d6:06:b4:6d:17:81:5d:74:ea:45:ee: be:ec:79:54:67:06:50:54:1d:81:f8:ae:d8:49:4b:08:71:ea: 15:99:73:2b:e5:17:ab:e6:e7:8f:a0:8f:55:34:9e:12:aa:d7: b3:08:5a:86:04:ba:93:d5:65:d4:d0:5e:e7:f6:c3:a1:54:6d: b1:23:b9:77:c5:0a:82:3f:fa:a6:1c:00:c0:d8:c2:94:ca:4e: c9:da:1b:20:21:6f:0d:11:46:4f:f3:eb:0e:3f:31:55:d8:67: 9d:c0:1a:b8:e6:88:5c:45:e3:37:a0:9d:e6:d3:b4:8f:5b:72: 18:fe:7e:ee:35:0c:1d:6a:83:2f:b1:95:a3:6c:14:25:20:bc: 14:cc:78:85:4e:c0:90:20:70:17:58:d2:49:dd:02:a6:63:74: 07:45:bd:9b:40:f3:b7:c0:c1:ad:15:c5:90:08:ae:bd:0f:88: 2d:82:62:be:ab:18:23:90:8c:d4:33:f1:5a:9b:21:f6:2c:4e: 20:0a:61:98:ce:78:2c:0d:a9:ee:6d:3a:fb:ef:55:25:c2:75: 33:b4:b1:ed:da:32:28:14:ac:41:1e:e3:3d:64:ff:f6:77:65: 3f:17:d2:91:a4:28:8e:33:ec:6f:f8:3e:95:8e:db:5b:53:01: 5d:26:42:7b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUKiiY+oQED5LDO6fdqeVCHQx3v7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUzMTE3MTEwMFoX DTI1MDUzMDE3MTYwMFowMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQy QjAyRDdEMUMyMzYyQTZGRjg3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMw2Qw4rvhtNW/jQvrgOfWC1p8FsTFFV7wNtQFZkYAXDE7ZNHJRej6RWEG2 pf9vFsqNsfAtl/Ze4ylTLAUASp/TVHSChHxUVR88TKulkAzh+i9rAiWoCALzz6L5 7cEcKX0JhML6n4rVHeJ9iObRUdjo+Ytr5PLrQQzjArf0PZszAJKo68skBW0QoOTG 5kXyD3p793bMqszMJC9lX/VcG6Gu1GP8qPuoMjsSLiDqI7BRTC4UTy+XDAnxjatI cHufdAagxYzZ54RUBFzfwQQU7Ugqfrafxn7rXcOugiwd8AN/kVKiDtfo8PvLkCGB 4oHL2BnSYKWpJ7QGHFy5q9IIwUECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnteXrbuNCjGE0rAtfRwjYqb/h+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MWQ2Yzlj LWVhZDctNDVmZS1hMTlhLTQyMjM1ZmM1Mzc4MC8wLzE5RUQ3OTdBREJCOEQwQTMx ODREMkIwMkQ3RDFDMjM2MkE2RkY4N0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFntMQwDwQCAAIwCQMHACABDfBgwDANBgkqhkiG9w0BAQsFAAOCAQEAgWRjO23Y 8tYGtG0XgV106kXuvux5VGcGUFQdgfiu2ElLCHHqFZlzK+UXq+bnj6CPVTSeEqrX swhahgS6k9Vl1NBe5/bDoVRtsSO5d8UKgj/6phwAwNjClMpOydobICFvDRFGT/Pr Dj8xVdhnncAauOaIXEXjN6Cd5tO0j1tyGP5+7jUMHWqDL7GVo2wUJSC8FMx4hU7A kCBwF1jSSd0CpmN0B0W9m0Dzt8DBrRXFkAiuvQ+ILYJivqsYI5CM1DPxWpsh9ixO IAphmM54LA2p7m06++9VJcJ1M7Sx7doyKBSsQR7jPWT/9ndlPxfSkaQojjPsb/g+ lY7bW1MBXSZCew== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org