$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.cer (raw, json) Hash identifier: yxyIMnJllZg0cyEGmRL570Z2/lM1CIEPT0/xkc6l+ms= Subject key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4FDCB719DD6E807C43D3CBBAAF74DFB6AA49AEFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft caRepository: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jun 2023 07:51:40 +0000 Certificate not after: Fri 28 Jun 2024 07:56:40 +0000 Subordinate resources: IP: 103.167.2.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:dc:b7:19:dd:6e:80:7c:43:d3:cb:ba:af:74:df:b6:aa:49:ae:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 07:51:40 2023 GMT Not After : Jun 28 07:56:40 2024 GMT Subject: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:13:6e:56:87:b6:35:aa:53:65:4f:77:77: 1b:e6:da:1c:b1:72:37:a7:aa:23:a3:43:1c:f2:26: 3b:46:ab:1b:48:b5:05:61:02:18:18:fb:de:27:9f: e0:1d:61:27:f5:38:72:4b:d9:40:9a:d6:5d:75:41: b9:31:92:46:1b:75:6f:6d:4e:2c:9a:49:3d:a3:93: 00:df:ff:92:b8:04:5c:02:42:15:bf:c7:7a:be:90: bb:a5:fb:7a:31:71:c3:1e:60:a8:50:f8:56:d8:46: 61:5b:16:94:b4:70:1e:4f:9c:8f:ea:a2:21:dc:44: 0c:d7:0c:79:5c:22:ca:82:24:73:d3:17:34:7c:f0: 82:10:4c:0f:b5:4b:cc:4a:d8:96:68:2d:bb:1b:40: 6f:5e:47:fe:20:2a:77:11:ed:aa:df:b1:8e:e8:26: 38:4a:08:1e:65:43:3b:8e:98:02:04:f7:60:ab:24: 13:d0:7f:fa:3b:d4:bf:dc:69:3e:ca:2c:f5:80:ec: 6e:60:78:e6:b1:c6:f8:c2:77:cd:c2:f0:c9:38:29: e8:df:f0:79:f4:2f:ae:3f:db:b0:23:e4:33:a0:c2: c4:48:ea:43:e2:94:74:ab:40:d8:0c:ee:41:69:ee: c4:59:02:f6:29:a5:6b:c3:15:39:76:0b:be:93:e8: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.2.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:79:92:87:93:31:3c:c2:90:fa:66:12:1a:7f:2b:02:78:31: 0e:58:fa:9b:59:ba:8a:9b:22:69:96:42:5e:49:d3:92:c8:bb: fc:fb:7f:99:68:74:15:96:26:ad:ed:79:fa:aa:0f:62:63:bb: cf:5a:62:69:3e:6f:ce:84:99:7c:10:b7:74:14:56:bc:bb:67: 08:75:aa:f7:00:d1:41:01:6b:1f:a8:ec:6f:3f:7e:d0:19:62: 63:dc:d0:4a:8d:e9:31:7f:85:ba:2e:2b:fd:de:81:14:6c:9f: 52:0a:25:32:61:4e:f5:49:03:46:6f:03:04:cc:5c:a8:4b:ce: 40:63:49:e6:c0:04:1b:1e:96:48:8b:03:c7:d7:eb:8f:f1:aa: 50:ca:dc:ab:34:bf:df:91:7b:66:b3:b0:56:3c:f1:ba:dd:ef: f2:22:cb:47:23:0d:97:4d:d2:38:7a:0a:14:ed:26:82:36:1c: 1b:61:1d:33:8c:dc:14:dc:8c:fd:a5:55:c8:41:c8:96:8d:68: b4:02:e4:68:e6:e4:58:7e:b0:d9:fb:32:56:1d:24:7f:c6:ed: 2f:44:41:75:72:d6:7a:45:47:3a:eb:76:92:e2:a6:77:4c:8e: 93:80:29:56:7e:62:36:8d:f8:d1:43:57:57:69:f4:ef:3a:1c: 2c:77:e3:b2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUT9y3Gd1ugHxD08u6r3TftqpJrvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYzMDA3NTE0MFoX DTI0MDYyODA3NTY0MFowMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2 ODAzMzRCNEY2MDRCNEI0RTc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMARE25Wh7Y1qlNlT3d3G+baHLFyN6eqI6NDHPImO0arG0i1BWECGBj73ief 4B1hJ/U4ckvZQJrWXXVBuTGSRht1b21OLJpJPaOTAN//krgEXAJCFb/Her6Qu6X7 ejFxwx5gqFD4VthGYVsWlLRwHk+cj+qiIdxEDNcMeVwiyoIkc9MXNHzwghBMD7VL zErYlmgtuxtAb15H/iAqdxHtqt+xjugmOEoIHmVDO46YAgT3YKskE9B/+jvUv9xp Psos9YDsbmB45rHG+MJ3zcLwyTgp6N/wefQvrj/bsCPkM6DCxEjqQ+KUdKtA2Azu QWnuxFkC9imla8MVOXYLvpPomc0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEEHGq8MDmvYSHdoAzS09gS0tOeGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlMjdiM2Ux LWY2MTEtNGFmZS05YTQ5LTVmYTRmZDU1NzY1My8wLzQxMDcxQUFGMEMwRTZCRDg0 ODc3NjgwMzM0QjRGNjA0QjRCNEU3ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpwIwDQYJKoZIhvcNAQELBQADggEBAJt5koeTMTzCkPpmEhp/KwJ4MQ5Y+ptZ uoqbImmWQl5J05LIu/z7f5lodBWWJq3tefqqD2Jju89aYmk+b86EmXwQt3QUVry7 Zwh1qvcA0UEBax+o7G8/ftAZYmPc0EqN6TF/hbouK/3egRRsn1IKJTJhTvVJA0Zv AwTMXKhLzkBjSebABBselkiLA8fX64/xqlDK3Ks0v9+Re2azsFY88brd7/Iiy0cj DZdN0jh6ChTtJoI2HBthHTOM3BTcjP2lVchByJaNaLQC5Gjm5Fh+sNn7MlYdJH/G 7S9EQXVy1npFRzrrdpLipndMjpOAKVZ+YjaN+NFDV1dp9O86HCx347I= -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org