$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer (raw, json) Hash identifier: BEcej6h1j4Q3sbg425RfDTxUcE0iKxwaq5/92RSyHW8= Subject key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15C461C179B1AC79EED78421C38DBF06D2B1BAC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft caRepository: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Jun 2024 12:47:36 +0000 Certificate not after: Wed 18 Jun 2025 12:52:36 +0000 Subordinate resources: IP: 103.160.12.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c4:61:c1:79:b1:ac:79:ee:d7:84:21:c3:8d:bf:06:d2:b1:ba:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 19 12:47:36 2024 GMT Not After : Jun 18 12:52:36 2025 GMT Subject: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:89:34:f6:4b:eb:bd:92:a5:19:69:bf:dd: 59:52:5d:7c:cc:09:20:32:cd:4b:96:3f:c1:f2:c8: 35:a9:82:df:62:59:49:cb:d0:86:d1:07:11:80:9a: 29:18:93:b7:dc:36:3c:4f:45:e1:60:8d:29:b2:86: ae:9e:ef:73:2a:f3:87:0f:09:19:7d:a3:e3:57:0d: 1a:99:0d:ae:ea:2c:0e:3a:b1:37:74:c6:be:66:6c: 8e:20:47:f1:a5:00:11:c0:cd:a1:b3:e1:1e:d3:da: 67:af:b5:4b:30:0f:79:a5:a5:8c:e8:33:cb:c7:32: 43:d3:46:61:df:63:f1:a3:1d:a8:54:cd:3c:2c:cf: 8c:53:63:ba:14:8a:4c:c5:1b:22:ce:24:6a:ae:2d: a7:f2:64:ff:eb:ea:e1:da:84:85:1c:55:38:ec:5d: c1:c6:02:d7:04:82:9f:0f:64:39:c7:8c:52:68:67: cd:3f:be:42:a9:d0:b5:07:d9:8e:14:74:27:39:16: 0c:77:7e:f1:77:b7:a1:60:b2:d5:15:69:88:7f:56: 97:08:6f:d9:a7:30:7c:34:0e:58:3b:90:8d:8d:e9: 12:30:68:eb:b3:8a:b7:00:50:96:f6:d9:cf:66:31: f0:2a:7d:01:81:3a:f4:1d:cc:1a:51:c1:ad:6e:0d: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.12.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:1a:c7:2d:9b:19:fb:12:51:16:77:70:6b:d3:29:2c:5e:93: 98:88:9f:af:b2:b8:02:37:eb:ae:18:ca:0b:e3:6b:4f:de:12: 80:ac:b3:5b:3e:56:49:b6:39:02:05:a4:07:08:b2:fa:ac:70: 88:36:41:8e:7a:c9:9c:b4:15:ed:08:80:63:3a:28:dd:2f:65: 51:ce:80:a5:73:cc:c5:c1:7b:a6:0b:ea:74:0f:97:65:6d:19: 65:e7:3f:7d:de:53:13:85:d2:88:14:40:02:34:f3:94:47:15: f8:82:3d:be:29:01:bb:f6:62:da:99:25:df:0d:56:4d:ae:be: 08:7d:9b:11:34:3b:1e:75:00:5b:32:97:d3:97:a9:0a:5b:71: 85:f7:1f:16:7f:c9:12:40:39:15:45:cf:91:c5:0b:54:4f:ee: 22:d4:fa:12:a4:36:2c:dd:a3:4e:db:1d:18:72:fe:ef:68:92: 3c:3e:aa:77:be:b0:74:7c:13:35:13:bc:11:13:fc:60:f6:2b: dc:e4:8a:a1:41:e0:53:31:08:74:11:8f:1f:98:4b:c4:47:93: e8:c0:8b:61:b2:95:87:e2:ef:e8:fd:d8:31:fc:b3:a7:2b:27: 27:9d:0b:b9:2c:7d:57:c2:05:53:fe:7f:a0:7c:d9:01:79:fe: 7a:a5:c9:b6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFcRhwXmxrHnu14Qhw42/BtKxusMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxOTEyNDczNloX DTI1MDYxODEyNTIzNlowMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2 MTk2MDFFMEY2NDg4Q0I4RkQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY6iTT2S+u9kqUZab/dWVJdfMwJIDLNS5Y/wfLINamC32JZScvQhtEHEYCa KRiTt9w2PE9F4WCNKbKGrp7vcyrzhw8JGX2j41cNGpkNruosDjqxN3TGvmZsjiBH 8aUAEcDNobPhHtPaZ6+1SzAPeaWljOgzy8cyQ9NGYd9j8aMdqFTNPCzPjFNjuhSK TMUbIs4kaq4tp/Jk/+vq4dqEhRxVOOxdwcYC1wSCnw9kOceMUmhnzT++QqnQtQfZ jhR0JzkWDHd+8Xe3oWCy1RVpiH9Wlwhv2acwfDQOWDuQjY3pEjBo67OKtwBQlvbZ z2Yx8Cp9AYE69B3MGlHBrW4Ngh0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCyyHvM2tqtGQORhlgHg9kiMuP1SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YzZmNzcw LTY4NmEtNDVlZi04ZGZiLTBjM2E4N2QzZDhkYS8wLzJDQjIxRUYzMzZCNkFCNDY0 MEU0NjE5NjAxRTBGNjQ4OENCOEZENTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoAwwDQYJKoZIhvcNAQELBQADggEBAC0axy2bGfsSURZ3cGvTKSxek5iIn6+y uAI3664Yygvja0/eEoCss1s+Vkm2OQIFpAcIsvqscIg2QY56yZy0Fe0IgGM6KN0v ZVHOgKVzzMXBe6YL6nQPl2VtGWXnP33eUxOF0ogUQAI085RHFfiCPb4pAbv2YtqZ Jd8NVk2uvgh9mxE0Ox51AFsyl9OXqQpbcYX3HxZ/yRJAORVFz5HFC1RP7iLU+hKk Nizdo07bHRhy/u9okjw+qne+sHR8EzUTvBET/GD2K9zkiqFB4FMxCHQRjx+YS8RH k+jAi2GylYfi7+j92DH8s6crJyedC7ksfVfCBVP+f6B82QF5/nqlybY= -----END CERTIFICATE-----Generated at Sat Jun 22 23:53:55 2024 by rpki-client on console-fra.rpki-client.org