$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer File: 2370B87417B78EB4410F4394F29FB327D1401F0D.cer (raw, json) Hash identifier: XiK0ZgtdpnOdU+kc+fDbLVYobEq0XZrkvSGSE3awnDo= Subject key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6578A2205B603826C5EAE0E6DD21DE2B473BCDB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft caRepository: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Oct 2023 07:26:56 +0000 Certificate not after: Mon 21 Oct 2024 07:31:56 +0000 Subordinate resources: IP: 103.26.176.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:78:a2:20:5b:60:38:26:c5:ea:e0:e6:dd:21:de:2b:47:3b:cd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 23 07:26:56 2023 GMT Not After : Oct 21 07:31:56 2024 GMT Subject: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:f5:59:ac:26:a6:aa:12:31:69:ee:6a:8b: 1c:0b:43:fc:87:f0:eb:b5:c8:b6:22:8c:54:23:f5: 37:84:1f:20:d5:f6:39:7e:e8:74:13:2f:6d:58:49: 80:ef:4a:88:fe:81:e9:5a:a7:90:9e:22:bf:8d:cb: 34:b8:00:4b:f0:34:50:49:84:26:9e:33:2d:5a:20: 2d:50:8d:53:7c:71:12:49:dd:5e:6e:e6:6c:73:ea: c7:1b:f1:f0:80:1c:5e:f9:14:d1:b2:ae:65:b0:59: 8a:cb:94:f2:32:06:b8:4a:55:fc:a5:7f:ca:80:8a: 90:3f:d0:e9:e0:3b:26:8e:5f:de:ff:7c:8c:3e:43: 5b:0b:f2:7c:3b:73:0e:c3:ab:a4:00:56:d0:87:cd: 43:1b:99:ad:3f:61:2d:01:a4:d7:cd:ee:bd:a9:17: 77:39:3f:90:9b:28:70:b7:96:cc:4d:c0:8f:4c:17: eb:bf:50:30:33:24:80:a6:93:f7:30:a6:d2:48:a3: 17:35:ca:81:3d:65:a6:fe:11:77:65:2b:10:47:0e: 02:4a:3c:cf:56:5d:ba:1f:2c:ec:d8:4d:6e:17:06: a1:45:af:bb:62:ba:7b:f8:84:78:fb:7f:ff:05:d7: 5c:22:8d:93:fc:43:af:c9:7e:82:01:3a:fa:4e:43: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.176.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:94:08:2e:f0:10:b0:b5:bd:c1:59:35:72:d1:6e:ba:76:e3: e6:02:73:95:5b:f3:bf:2f:c2:98:14:f8:70:68:e3:72:c2:1e: 19:ff:0e:25:59:d8:11:f8:6e:f2:dc:53:cb:4c:ec:fa:82:c2: c7:60:71:d8:a4:a3:0f:af:d6:86:0b:63:91:56:40:4c:37:7a: ef:af:a8:93:db:b3:5a:63:62:b2:f9:5c:30:0b:c3:b5:cc:a7: 9b:7d:58:cf:9d:1d:9f:82:b3:e0:8a:f6:b5:d8:f6:89:8b:17: 86:05:ba:e1:2c:d8:47:4b:02:8d:04:bb:04:6f:8f:ca:e9:e8: 3e:a2:d3:59:04:e0:04:47:bf:72:cc:1a:f0:c7:a9:01:46:b2: 64:e0:84:d8:3f:cb:54:ec:df:41:b6:31:4b:c2:e1:13:82:aa: 82:bb:4a:81:0f:9a:29:f5:cc:6d:9a:1b:09:85:82:b2:dc:79: 01:1f:26:ae:ed:7b:1c:7b:2b:42:cf:16:17:78:b5:ca:54:7f: 49:36:71:80:76:fe:5d:b8:0a:dc:26:6e:8a:3c:53:59:8b:c5: 75:14:e7:6b:4c:81:e1:f0:bc:04:6f:0a:38:65:ab:47:6c:4a: 7a:15:58:64:9d:f1:2e:da:be:6e:ce:d2:b3:99:b0:5a:b1:af: d6:63:66:34 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZXiiIFtgOCbF6uDm3SHeK0c7zbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMzA3MjY1NloX DTI0MTAyMTA3MzE1NlowMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0 Mzk0RjI5RkIzMjdEMTQwMUYwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPb9VmsJqaqEjFp7mqLHAtD/Ifw67XItiKMVCP1N4QfINX2OX7odBMvbVhJ gO9KiP6B6VqnkJ4iv43LNLgAS/A0UEmEJp4zLVogLVCNU3xxEkndXm7mbHPqxxvx 8IAcXvkU0bKuZbBZisuU8jIGuEpV/KV/yoCKkD/Q6eA7Jo5f3v98jD5DWwvyfDtz DsOrpABW0IfNQxuZrT9hLQGk183uvakXdzk/kJsocLeWzE3Aj0wX679QMDMkgKaT 9zCm0kijFzXKgT1lpv4Rd2UrEEcOAko8z1Zduh8s7NhNbhcGoUWvu2K6e/iEePt/ /wXXXCKNk/xDr8l+ggE6+k5DnnsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCNwuHQXt460QQ9DlPKfsyfRQB8NMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3NGQwYmY5 LWNjOWEtNDJhMy04MzBhLTc2ZjZkMzJiMmY0NS8wLzIzNzBCODc0MTdCNzhFQjQ0 MTBGNDM5NEYyOUZCMzI3RDE0MDFGMEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnGrAwDQYJKoZIhvcNAQELBQADggEBAC2UCC7wELC1vcFZNXLRbrp24+YCc5Vb 878vwpgU+HBo43LCHhn/DiVZ2BH4bvLcU8tM7PqCwsdgcdikow+v1oYLY5FWQEw3 eu+vqJPbs1pjYrL5XDALw7XMp5t9WM+dHZ+Cs+CK9rXY9omLF4YFuuEs2EdLAo0E uwRvj8rp6D6i01kE4ARHv3LMGvDHqQFGsmTghNg/y1Ts30G2MUvC4ROCqoK7SoEP min1zG2aGwmFgrLceQEfJq7texx7K0LPFhd4tcpUf0k2cYB2/l24Ctwmboo8U1mL xXUU52tMgeHwvARvCjhlq0dsSnoVWGSd8S7avm7O0rOZsFqxr9ZjZjQ= -----END CERTIFICATE-----Generated at Thu May 9 00:29:09 2024 by rpki-client on console-ams.rpki-client.org