$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer (raw, json) Hash identifier: kO0JMkNcXvEPDXNRjH8i3CeZflt2/meciNWKWtkKKcY= Subject key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FBB6071CA5D7333957879636AA1DE6D573054D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft caRepository: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Aug 2023 11:54:21 +0000 Certificate not after: Thu 22 Aug 2024 11:59:21 +0000 Subordinate resources: IP: 103.20.88.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bb:60:71:ca:5d:73:33:95:78:79:63:6a:a1:de:6d:57:30:54:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 11:54:21 2023 GMT Not After : Aug 22 11:59:21 2024 GMT Subject: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:09:af:83:18:f9:bb:5f:46:b0:3e:6e:5a: 21:ac:82:07:a4:a1:4a:60:6c:12:92:90:4f:d7:a1: be:ee:a6:91:6a:77:3d:4c:99:88:d6:f5:2c:33:2c: 9d:1c:99:ab:bf:ae:bd:be:b6:97:0d:8b:11:0d:e5: 7a:58:42:35:d0:2a:87:91:00:c8:9f:17:88:6a:cf: 92:e5:f1:02:54:98:36:c2:6e:1d:f2:cc:f1:f0:93: be:ba:c0:8d:25:e8:b1:8f:e3:72:fe:a9:16:ee:4d: b5:a6:e0:90:00:a9:9e:26:75:9f:4f:cf:f9:69:bd: c4:0e:0e:ac:eb:9d:91:65:fb:dc:c7:ff:4a:27:1c: 79:85:fd:00:19:17:8c:b5:60:33:07:41:79:0a:2e: b9:59:c0:a0:07:a7:c1:27:52:2a:89:28:73:c5:a5: 04:4c:04:e0:1a:13:0e:5b:0c:82:ca:9a:f6:40:92: bf:b3:74:a7:34:9e:2f:15:fc:23:33:6e:3c:cc:5c: 97:3f:13:c8:47:0e:78:bc:6a:39:f7:e8:fc:7d:b9: f9:ae:0b:8b:ca:80:16:59:43:a5:63:74:68:19:af: e0:90:85:8b:b1:ea:26:76:14:df:7a:c7:e7:30:f8: ea:8d:ca:7c:13:73:91:fa:2c:8e:e5:d3:05:0f:b9: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.88.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:00:3d:cf:48:f2:b6:3b:e3:8e:dd:d9:56:3e:34:af:3b:ad: 21:35:19:62:6e:5f:84:97:7c:5f:a5:17:6a:7e:15:5b:e4:de: ac:c4:4f:59:4f:45:57:bf:9e:d4:e2:69:21:44:45:b5:78:42: 0b:09:93:28:04:07:8d:86:de:ea:eb:47:45:4e:af:db:f4:44: 8e:c8:12:7f:a8:76:94:d0:c4:7c:e8:d0:1d:e4:32:92:71:c3: c3:e7:53:97:73:9f:08:92:41:8e:c4:b4:23:07:af:45:97:a8: 53:e3:36:3c:33:9b:0e:ed:23:a6:fd:06:e5:e8:20:cb:0d:c3: 00:ea:ee:de:19:36:d7:88:a0:c0:41:29:3f:dc:01:e8:39:5b: b1:cd:27:9d:37:9e:d3:6c:34:c5:68:23:00:2e:fe:89:7c:81: d1:b3:4c:18:d9:fb:31:2f:a6:57:9f:96:2e:41:49:98:2b:eb: 19:85:f0:1f:c6:97:eb:9e:bd:b0:20:bf:48:13:9b:66:7d:1b: f2:7c:88:f6:bc:e9:ce:b1:be:6a:65:10:f4:db:9c:e5:e9:c0: f8:4d:eb:be:39:21:00:12:08:a1:ad:fd:0a:65:25:b6:85:94: b6:7e:55:31:78:98:fc:cf:b6:96:9f:dd:92:fa:f4:70:95:35: e3:64:65:33 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX7tgccpdczOVeHljaqHebVcwVNYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNDExNTQyMVoX DTI0MDgyMjExNTkyMVowMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FB NzFEMENCNkIyMjY4NDE2MTYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmKCa+DGPm7X0awPm5aIayCB6ShSmBsEpKQT9ehvu6mkWp3PUyZiNb1LDMs nRyZq7+uvb62lw2LEQ3lelhCNdAqh5EAyJ8XiGrPkuXxAlSYNsJuHfLM8fCTvrrA jSXosY/jcv6pFu5NtabgkACpniZ1n0/P+Wm9xA4OrOudkWX73Mf/SicceYX9ABkX jLVgMwdBeQouuVnAoAenwSdSKokoc8WlBEwE4BoTDlsMgsqa9kCSv7N0pzSeLxX8 IzNuPMxclz8TyEcOeLxqOffo/H25+a4Li8qAFllDpWN0aBmv4JCFi7HqJnYU33rH 5zD46o3KfBNzkfosjuXTBQ+5spkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBqNXFyV2hurWTqnHQy2siaEFhYzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmY2MxZWY2 LTc2OWYtNGFhZi05ZDE0LTJlNWIxNWE2ZmYyMy8wLzFBOEQ1QzVDOTVEQTFCQUI1 OTNBQTcxRDBDQjZCMjI2ODQxNjE2MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnFFgwDQYJKoZIhvcNAQELBQADggEBAE8APc9I8rY7447d2VY+NK87rSE1GWJu X4SXfF+lF2p+FVvk3qzET1lPRVe/ntTiaSFERbV4QgsJkygEB42G3urrR0VOr9v0 RI7IEn+odpTQxHzo0B3kMpJxw8PnU5dznwiSQY7EtCMHr0WXqFPjNjwzmw7tI6b9 BuXoIMsNwwDq7t4ZNteIoMBBKT/cAeg5W7HNJ503ntNsNMVoIwAu/ol8gdGzTBjZ +zEvplefli5BSZgr6xmF8B/Gl+uevbAgv0gTm2Z9G/J8iPa86c6xvmplEPTbnOXp wPhN6745IQASCKGt/QplJbaFlLZ+VTF4mPzPtpaf3ZL69HCVNeNkZTM= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org