$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer File: 381455361E726B6ECCDAF271673BD59B1555336E.cer (raw, json) Hash identifier: EIRNBT/6h/qMGyrhGi/ngENFRpCPNrT7qIqvP6krK3w= Subject key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1241ECC66706B44EBC47548E4A5915C936E2B1AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 06 May 2024 00:44:33 +0000 Certificate not after: Mon 05 May 2025 00:49:33 +0000 Subordinate resources: IP: 103.151.162.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:ec:c6:67:06:b4:4e:bc:47:54:8e:4a:59:15:c9:36:e2:b1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 00:44:33 2024 GMT Not After : May 5 00:49:33 2025 GMT Subject: CN=381455361E726B6ECCDAF271673BD59B1555336E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:af:65:a1:af:8b:c4:6c:4c:3f:b0:c2:ac: d6:86:aa:d8:07:1d:2b:78:7d:6f:37:84:bc:0e:44: 86:01:53:04:db:36:6d:d0:fc:62:25:09:0b:96:72: 81:83:7c:aa:13:85:dc:39:1f:d1:5b:22:bb:72:47: bb:a1:23:2e:78:8c:6a:18:1f:5a:c5:ef:d2:96:35: eb:a4:84:fa:b5:6c:fd:7b:24:eb:7f:20:9f:29:8c: 16:f8:7d:3b:00:12:04:7a:0d:f0:3e:48:8f:1d:9a: 13:fd:bf:6e:5a:d7:9a:dc:c2:87:62:ed:9b:47:30: fe:43:36:88:ef:6e:a1:24:88:bd:fc:f9:52:ae:e7: 10:85:ff:51:ec:72:15:bf:6b:2a:f1:d5:63:a7:f0: 4d:77:4c:ae:30:89:09:1f:94:35:d8:63:bc:63:16: 97:12:2f:c3:5f:53:f8:ce:f6:6e:9d:92:74:3e:26: c1:72:08:b5:d3:81:0b:a7:d1:ae:21:ac:47:36:c6: 1b:4e:a6:d9:aa:01:8a:db:5c:a4:3e:f2:ea:05:c4: c5:a1:d2:e9:fa:ed:d5:1e:6b:7f:96:95:6b:92:a8: 1e:07:af:1a:25:12:4e:e1:5c:f5:a1:08:a5:aa:09: 33:50:58:d7:bc:75:5c:5c:fa:15:ad:08:de:15:1f: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.162.0/23 Signature Algorithm: sha256WithRSAEncryption 03:71:1b:e6:f5:0b:83:73:6c:3d:05:21:7d:bf:5e:0a:d6:cf: 8f:33:8a:4c:34:24:95:ae:71:93:d6:f9:d6:87:28:03:a9:33: 3e:b0:04:7c:86:ca:6b:8b:fd:4a:98:0a:fd:a8:5b:b0:71:ee: 32:01:e8:f2:c7:26:7e:08:de:df:3f:9c:ed:38:51:78:e8:26: f0:d4:44:41:c4:22:3a:d8:c6:52:13:c3:9d:c0:3f:67:11:e2: d8:c4:87:2e:9a:1c:20:84:1b:2f:d8:1b:b2:77:87:d5:d2:b7: be:b1:44:c6:df:d4:8b:e0:1d:de:cb:b3:48:59:45:a9:17:98: 5e:7b:6b:2a:e1:54:b6:f2:5c:98:bd:0d:03:cf:e9:d3:c9:d1: f2:14:4e:6c:6e:57:7c:9a:22:8b:6c:5a:49:74:ec:ae:bf:dd: 35:a0:11:d8:d7:cb:54:01:0e:c3:72:1d:04:22:1f:0e:e4:4d: 89:7e:f9:da:00:34:01:09:5d:03:49:ea:1e:85:ca:d9:3c:e9: a2:45:36:68:42:fa:5d:5c:d0:49:da:cf:cc:64:25:cb:3d:6c: ec:2e:3f:56:fd:6b:02:d6:58:83:06:6e:c0:26:69:88:1d:5c: f1:40:a9:ea:f0:05:aa:17:56:1d:1c:ff:16:d3:5b:c3:23:e7: 80:e0:94:3a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEkHsxmcGtE68R1SOSlkVyTbisa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwNjAwNDQzM1oX DTI1MDUwNTAwNDkzM1owMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFG MjcxNjczQkQ1OUIxNTU1MzM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpjr2Whr4vEbEw/sMKs1oaq2AcdK3h9bzeEvA5EhgFTBNs2bdD8YiUJC5Zy gYN8qhOF3Dkf0Vsiu3JHu6EjLniMahgfWsXv0pY166SE+rVs/Xsk638gnymMFvh9 OwASBHoN8D5Ijx2aE/2/blrXmtzCh2Ltm0cw/kM2iO9uoSSIvfz5Uq7nEIX/Uexy Fb9rKvHVY6fwTXdMrjCJCR+UNdhjvGMWlxIvw19T+M72bp2SdD4mwXIItdOBC6fR riGsRzbGG06m2aoBittcpD7y6gXExaHS6frt1R5rf5aVa5KoHgevGiUSTuFc9aEI paoJM1BY17x1XFz6Fa0I3hUfF08CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgUVTYecmtuzNrycWc71ZsVVTNuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMTk4NzRj LWE2YjItNGIwYi05Y2M2LTU1OWE0ZTdjZDk1YS8wLzM4MTQ1NTM2MUU3MjZCNkVD Q0RBRjI3MTY3M0JENTlCMTU1NTMzNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnl6IwDQYJKoZIhvcNAQELBQADggEBAANxG+b1C4NzbD0FIX2/XgrWz48zikw0 JJWucZPW+daHKAOpMz6wBHyGymuL/UqYCv2oW7Bx7jIB6PLHJn4I3t8/nO04UXjo JvDUREHEIjrYxlITw53AP2cR4tjEhy6aHCCEGy/YG7J3h9XSt76xRMbf1IvgHd7L s0hZRakXmF57ayrhVLbyXJi9DQPP6dPJ0fIUTmxuV3yaIotsWkl07K6/3TWgEdjX y1QBDsNyHQQiHw7kTYl++doANAEJXQNJ6h6Fytk86aJFNmhC+l1c0Enaz8xkJcs9 bOwuP1b9awLWWIMGbsAmaYgdXPFAqerwBaoXVh0c/xbTW8Mj54DglDo= -----END CERTIFICATE-----Generated at Wed May 8 09:50:28 2024 by rpki-client on console-fra.rpki-client.org