$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer (raw, json) Hash identifier: 3Xps86Q5xqpy+TCKkC3rvcib/OTTZdoGVhlxM6KySm8= Subject key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31869FC72465BD720DB492699483734E0C496E55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft caRepository: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Jul 2024 00:18:53 +0000 Certificate not after: Fri 25 Jul 2025 00:23:53 +0000 Subordinate resources: IP: 103.20.88.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:9f:c7:24:65:bd:72:0d:b4:92:69:94:83:73:4e:0c:49:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 26 00:18:53 2024 GMT Not After : Jul 25 00:23:53 2025 GMT Subject: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:09:af:83:18:f9:bb:5f:46:b0:3e:6e:5a: 21:ac:82:07:a4:a1:4a:60:6c:12:92:90:4f:d7:a1: be:ee:a6:91:6a:77:3d:4c:99:88:d6:f5:2c:33:2c: 9d:1c:99:ab:bf:ae:bd:be:b6:97:0d:8b:11:0d:e5: 7a:58:42:35:d0:2a:87:91:00:c8:9f:17:88:6a:cf: 92:e5:f1:02:54:98:36:c2:6e:1d:f2:cc:f1:f0:93: be:ba:c0:8d:25:e8:b1:8f:e3:72:fe:a9:16:ee:4d: b5:a6:e0:90:00:a9:9e:26:75:9f:4f:cf:f9:69:bd: c4:0e:0e:ac:eb:9d:91:65:fb:dc:c7:ff:4a:27:1c: 79:85:fd:00:19:17:8c:b5:60:33:07:41:79:0a:2e: b9:59:c0:a0:07:a7:c1:27:52:2a:89:28:73:c5:a5: 04:4c:04:e0:1a:13:0e:5b:0c:82:ca:9a:f6:40:92: bf:b3:74:a7:34:9e:2f:15:fc:23:33:6e:3c:cc:5c: 97:3f:13:c8:47:0e:78:bc:6a:39:f7:e8:fc:7d:b9: f9:ae:0b:8b:ca:80:16:59:43:a5:63:74:68:19:af: e0:90:85:8b:b1:ea:26:76:14:df:7a:c7:e7:30:f8: ea:8d:ca:7c:13:73:91:fa:2c:8e:e5:d3:05:0f:b9: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a6:72:a9:1c:9a:16:84:da:ac:55:17:08:0a:c7:c5:4a:34: dc:21:d3:3f:c4:ee:3a:c7:72:16:c6:1a:60:f0:0b:0e:ef:92: 00:c4:63:46:95:9e:45:a8:4d:c0:44:b2:27:d1:7b:01:ca:f9: 50:62:fc:d1:1f:2f:e1:49:64:72:bb:3e:5e:d7:b3:24:f9:ac: 8f:a5:26:32:2f:a0:28:51:0b:d5:ee:cc:e0:8d:08:75:0d:a1: aa:29:47:b8:aa:11:27:06:3a:0f:30:56:81:75:eb:29:66:a7: c8:17:cd:29:f6:d7:71:42:9e:b8:4f:c6:31:f5:87:01:0f:f9: 84:6f:0f:5e:2a:b2:cc:99:d0:ea:c7:86:fe:36:bd:5e:d5:ec: 58:ab:aa:a3:22:8b:f9:f1:0a:e0:ca:bd:3e:51:7f:75:51:72: 62:9b:16:02:86:ba:a5:19:09:fc:b6:aa:33:e2:5e:08:e3:c9: ea:aa:d2:5c:70:3c:78:b2:3b:dc:18:7f:49:37:1a:c5:d9:be: c9:b1:ff:86:8b:2f:68:5d:b5:e0:e4:33:f4:1b:c5:5b:d4:0a: 25:81:28:2a:95:1a:47:a4:07:62:af:1c:4f:56:b7:c5:c1:06: 07:51:92:3e:9b:10:1d:e6:57:25:a1:8e:b9:0a:6a:1f:5c:57: 39:0a:e7:ed -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMYafxyRlvXINtJJplINzTgxJblUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNjAwMTg1M1oX DTI1MDcyNTAwMjM1M1owMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FB NzFEMENCNkIyMjY4NDE2MTYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmKCa+DGPm7X0awPm5aIayCB6ShSmBsEpKQT9ehvu6mkWp3PUyZiNb1LDMs nRyZq7+uvb62lw2LEQ3lelhCNdAqh5EAyJ8XiGrPkuXxAlSYNsJuHfLM8fCTvrrA jSXosY/jcv6pFu5NtabgkACpniZ1n0/P+Wm9xA4OrOudkWX73Mf/SicceYX9ABkX jLVgMwdBeQouuVnAoAenwSdSKokoc8WlBEwE4BoTDlsMgsqa9kCSv7N0pzSeLxX8 IzNuPMxclz8TyEcOeLxqOffo/H25+a4Li8qAFllDpWN0aBmv4JCFi7HqJnYU33rH 5zD46o3KfBNzkfosjuXTBQ+5spkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBqNXFyV2hurWTqnHQy2siaEFhYzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmY2MxZWY2 LTc2OWYtNGFhZi05ZDE0LTJlNWIxNWE2ZmYyMy8wLzFBOEQ1QzVDOTVEQTFCQUI1 OTNBQTcxRDBDQjZCMjI2ODQxNjE2MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnFFgwDQYJKoZIhvcNAQELBQADggEBAIymcqkcmhaE2qxVFwgKx8VKNNwh0z/E 7jrHchbGGmDwCw7vkgDEY0aVnkWoTcBEsifRewHK+VBi/NEfL+FJZHK7Pl7XsyT5 rI+lJjIvoChRC9XuzOCNCHUNoaopR7iqEScGOg8wVoF16ylmp8gXzSn213FCnrhP xjH1hwEP+YRvD14qssyZ0OrHhv42vV7V7FirqqMii/nxCuDKvT5Rf3VRcmKbFgKG uqUZCfy2qjPiXgjjyeqq0lxwPHiyO9wYf0k3GsXZvsmx/4aLL2hdteDkM/QbxVvU CiWBKCqVGkekB2KvHE9Wt8XBBgdRkj6bEB3mVyWhjrkKah9cVzkK5+0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org