$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer (raw, json) Hash identifier: Qs2rJMT+vV54XHfxPBYLptxy+GEYov96W5xKZixnkM0= Subject key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 748F377B3A5E2759543450C1A7C5F5E535D759F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft caRepository: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Oct 2023 14:07:26 +0000 Certificate not after: Tue 15 Oct 2024 14:12:26 +0000 Subordinate resources: IP: 103.177.100.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8f:37:7b:3a:5e:27:59:54:34:50:c1:a7:c5:f5:e5:35:d7:59:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 14:07:26 2023 GMT Not After : Oct 15 14:12:26 2024 GMT Subject: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:58:9b:bb:c6:b6:de:19:e3:38:aa:3f:6b: a3:0d:68:df:54:95:85:f1:27:28:50:5c:90:35:16: 93:d8:c5:27:b6:d3:0d:36:74:da:1f:67:e9:1d:4c: d4:83:51:6d:b0:9f:c4:a2:bf:1a:5d:bf:2a:5b:79: 6d:d9:97:40:8d:fa:00:49:c4:88:bb:e4:fc:96:54: 85:c6:2b:92:3c:bd:a3:e9:7c:b6:a1:30:a2:3e:67: 97:d0:2b:7f:1c:ca:2e:4c:20:40:7c:cb:12:d0:03: 3b:3b:c9:c2:cc:4b:c3:27:0b:b5:a6:20:ef:a0:f9: cd:05:1a:d0:fa:7f:f2:ff:d5:09:98:90:18:62:3c: c0:12:cc:f2:3e:91:6d:61:7c:86:7d:58:b7:95:f3: 7d:a8:cc:74:8a:a0:48:00:7d:f4:cb:f0:45:98:19: 86:44:3f:69:13:2e:9a:93:28:2c:ec:0f:03:0e:18: 73:98:c4:f9:df:3c:f4:4f:05:82:66:b2:10:52:e6: 05:7d:03:82:9a:28:de:15:68:66:74:c2:cc:6a:bb: a8:39:fd:06:54:0f:f3:2c:2a:81:75:3a:b5:13:d5: 91:47:8c:a9:6b:38:34:a3:7e:7a:71:f7:69:1e:fd: 34:d0:62:2d:02:16:14:a9:83:96:c1:43:53:d1:e1: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.100.0/23 Signature Algorithm: sha256WithRSAEncryption 89:8b:e1:2d:3a:ba:3a:78:cd:bf:cc:06:87:86:45:92:9f:93: 4e:9c:47:8e:fa:c5:13:56:91:6e:b9:0b:5d:67:de:35:c9:d5: b7:d6:59:77:53:b2:1a:58:4d:d6:61:e3:d1:c1:bf:79:85:41: c5:9c:ef:2c:f6:3f:36:1a:d2:77:89:4d:f3:41:1c:9b:05:fd: b5:04:69:1b:e6:1a:c7:a7:69:f3:f8:dc:65:2d:46:57:b5:9e: 96:8b:0e:56:2c:ed:42:04:e5:0e:3b:5a:73:30:e5:0d:4a:c5: 68:3c:cf:9c:3d:9f:c6:59:b7:f6:9e:ac:a8:f2:52:d2:18:a4: 21:2d:48:41:09:18:a8:f1:9c:28:59:12:76:51:e0:15:09:d1: 14:43:6c:23:07:22:a4:a8:8b:6f:04:cb:1f:5b:85:1a:a0:d8: cd:db:97:0c:ea:00:a8:dc:d0:b9:c1:00:c0:5c:08:07:41:48: ce:67:38:b1:af:34:56:68:e6:e9:50:65:6b:d3:4c:0b:ee:7a: bd:72:bf:56:80:73:72:a6:c7:ba:2a:ac:b3:3b:c1:4e:45:b9: e3:87:6b:b0:5e:7e:59:dd:35:ec:84:31:65:e0:c7:28:fe:a2: 49:89:ed:79:46:0e:a7:f5:ce:33:a0:2b:f2:32:b0:23:72:1b: 03:d1:2e:8f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdI83ezpeJ1lUNFDBp8X15TXXWfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNzE0MDcyNloX DTI0MTAxNTE0MTIyNlowMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZD RDk5QjlBNkQyQ0M2MENFMEJBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfaWJu7xrbeGeM4qj9row1o31SVhfEnKFBckDUWk9jFJ7bTDTZ02h9n6R1M 1INRbbCfxKK/Gl2/Klt5bdmXQI36AEnEiLvk/JZUhcYrkjy9o+l8tqEwoj5nl9Ar fxzKLkwgQHzLEtADOzvJwsxLwycLtaYg76D5zQUa0Pp/8v/VCZiQGGI8wBLM8j6R bWF8hn1Yt5XzfajMdIqgSAB99MvwRZgZhkQ/aRMumpMoLOwPAw4Yc5jE+d889E8F gmayEFLmBX0Dgpoo3hVoZnTCzGq7qDn9BlQP8ywqgXU6tRPVkUeMqWs4NKN+enH3 aR79NNBiLQIWFKmDlsFDU9HhE20CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBv3EhlmRwent3bNmbmm0sxgzgurMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4OTg1ZjU5 LTBlZTYtNDIwOC05YTkwLTI5YzEwODYwMGNmYy8wLzFCRjcxMjE5NjY0NzA3QTdC Nzc2Q0Q5OUI5QTZEMkNDNjBDRTBCQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsWQwDQYJKoZIhvcNAQELBQADggEBAImL4S06ujp4zb/MBoeGRZKfk06cR476 xRNWkW65C11n3jXJ1bfWWXdTshpYTdZh49HBv3mFQcWc7yz2PzYa0neJTfNBHJsF /bUEaRvmGsenafP43GUtRle1npaLDlYs7UIE5Q47WnMw5Q1KxWg8z5w9n8ZZt/ae rKjyUtIYpCEtSEEJGKjxnChZEnZR4BUJ0RRDbCMHIqSoi28Eyx9bhRqg2M3blwzq AKjc0LnBAMBcCAdBSM5nOLGvNFZo5ulQZWvTTAvuer1yv1aAc3Kmx7oqrLM7wU5F ueOHa7BeflndNeyEMWXgxyj+okmJ7XlGDqf1zjOgK/IysCNyGwPRLo8= -----END CERTIFICATE-----Generated at Fri May 3 03:08:25 2024 by rpki-client on console-ams.rpki-client.org