$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer (raw, json) Hash identifier: /eDHlcwiUdxtHWwAOWTD57269lZqvZI77csrc//ui1w= Subject key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1977173B70A706065490372D21B947501F7CC4A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jun 2023 05:03:50 +0000 Certificate not after: Fri 21 Jun 2024 05:08:50 +0000 Subordinate resources: IP: 103.162.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:77:17:3b:70:a7:06:06:54:90:37:2d:21:b9:47:50:1f:7c:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 05:03:50 2023 GMT Not After : Jun 21 05:08:50 2024 GMT Subject: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:9b:80:fa:3d:79:44:18:34:3e:d5:59:52: c0:b9:78:e6:9e:ec:21:15:a1:12:5c:16:0e:ff:a5: 04:98:87:fc:79:4b:4d:0d:97:cc:14:ae:73:8e:94: 6d:c3:d5:df:91:07:f4:5c:59:75:91:c1:77:07:ac: 5b:13:52:d6:e4:b5:0e:07:f3:ff:bb:59:69:3c:df: 57:84:5d:b2:a8:a7:09:14:9b:9d:b8:53:03:c9:62: 2f:da:0b:57:89:2e:e9:47:67:90:9b:9d:32:07:ff: 3f:0f:c6:bc:a9:71:8f:21:3d:fe:55:4b:4c:fa:90: fb:40:88:4f:0a:e8:05:f7:c0:74:40:f1:04:10:ea: 83:1d:74:a8:2e:81:4f:a9:50:57:91:36:ac:3f:58: 41:aa:e3:62:ac:cb:89:7f:cc:7d:05:0d:9f:d7:c8: 6b:3f:b0:43:89:4f:8a:4c:0d:99:be:b2:c0:47:3d: 0e:27:c6:12:98:f2:a2:05:8b:d1:23:0d:23:66:15: e5:11:4e:eb:15:9d:75:db:cc:b5:b5:ab:c1:e3:ef: 84:12:74:52:ba:5d:c9:5a:b1:6a:e9:53:0b:a3:11: cd:ee:fd:a7:34:d9:63:ac:cc:fb:00:2d:6f:57:ca: ae:0f:44:15:e1:05:bd:1d:02:34:04:2e:72:df:11: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.62.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:34:32:e0:b5:41:69:aa:fa:a8:d0:36:70:c9:dd:b2:77:c5: d8:50:c4:7e:19:b2:56:af:2d:ad:f1:09:e4:6e:b2:95:c6:b4: 52:f8:52:13:b3:d9:81:67:7d:6e:54:b4:63:3a:f1:2f:5f:d5: 9b:84:07:0c:d2:d8:81:ce:c5:69:f4:80:5e:0d:c5:7d:5a:16: 9c:d4:af:9c:87:f3:23:f4:ce:20:87:fd:e7:66:8a:b2:8a:5e: d0:43:0a:24:86:94:6f:ec:92:7f:6f:ac:da:f1:fc:f3:e3:68: 14:8a:1e:97:a7:e4:df:ca:4c:06:64:fe:25:cb:58:1a:20:5c: 32:d4:4f:78:f5:84:35:e7:dc:24:9c:a9:db:49:17:db:0a:26: 8c:15:43:5a:7e:65:57:a1:7f:b9:13:f1:f1:b3:29:da:10:c0: c7:e4:4c:a6:d2:0c:40:76:27:42:4d:28:fe:b4:62:24:c7:47: 14:af:82:58:fd:5b:68:a8:1e:9e:d1:1b:5f:3c:ba:73:e6:0f: 0b:dc:81:9d:4a:f3:69:2b:9d:07:a5:29:27:8d:61:4f:20:18: 1f:b6:2c:83:51:1f:73:fa:ba:df:ea:cc:2e:54:67:6a:74:b7: f5:7e:7e:85:0a:4e:f5:11:82:5a:22:e5:fa:3c:97:59:14:d5: 1d:f8:bf:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGXcXO3CnBgZUkDctIblHUB98xKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMzA1MDM1MFoX DTI0MDYyMTA1MDg1MFowMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VD OUUwRDhGQzg1OUFDMUE3Njc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo1m4D6PXlEGDQ+1VlSwLl45p7sIRWhElwWDv+lBJiH/HlLTQ2XzBSuc46U bcPV35EH9FxZdZHBdwesWxNS1uS1Dgfz/7tZaTzfV4RdsqinCRSbnbhTA8liL9oL V4ku6UdnkJudMgf/Pw/GvKlxjyE9/lVLTPqQ+0CITwroBffAdEDxBBDqgx10qC6B T6lQV5E2rD9YQarjYqzLiX/MfQUNn9fIaz+wQ4lPikwNmb6ywEc9DifGEpjyogWL 0SMNI2YV5RFO6xWdddvMtbWrwePvhBJ0UrpdyVqxaulTC6MRze79pzTZY6zM+wAt b1fKrg9EFeEFvR0CNAQuct8RZxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDFrDXgVqH9aoH7J4Nj8hZrBp2eUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExY2E5NDM1 LTcyMjQtNDdhOC05NTFiLWMxYjQyZWIwZTJmNy8wLzMxNkIwRDc4MTVBODdGNUFB MDdFQzlFMEQ4RkM4NTlBQzFBNzY3OTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoj4wDQYJKoZIhvcNAQELBQADggEBAD00MuC1QWmq+qjQNnDJ3bJ3xdhQxH4Z slavLa3xCeRuspXGtFL4UhOz2YFnfW5UtGM68S9f1ZuEBwzS2IHOxWn0gF4NxX1a FpzUr5yH8yP0ziCH/edmirKKXtBDCiSGlG/skn9vrNrx/PPjaBSKHpen5N/KTAZk /iXLWBogXDLUT3j1hDXn3CScqdtJF9sKJowVQ1p+ZVehf7kT8fGzKdoQwMfkTKbS DEB2J0JNKP60YiTHRxSvglj9W2ioHp7RG188unPmDwvcgZ1K82krnQelKSeNYU8g GB+2LINRH3P6ut/qzC5UZ2p0t/V+foUKTvURgloi5fo8l1kU1R34vyI= -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org