$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer File: 581E644EEC44F9523CF189893E102BCC6008F9BE.cer (raw, json) Hash identifier: PmX+PiCxSvWEOx3qlgvWOKfNLdZUZOne0CaWwfRRqTw= Subject key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F285EE718E4F13E9D3A4E95317B30E5DFB2CF9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Oct 2023 16:06:29 +0000 Certificate not after: Tue 01 Oct 2024 16:11:29 +0000 Subordinate resources: IP: 103.189.120.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:28:5e:e7:18:e4:f1:3e:9d:3a:4e:95:31:7b:30:e5:df:b2:cf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 3 16:06:29 2023 GMT Not After : Oct 1 16:11:29 2024 GMT Subject: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:60:7a:48:8f:55:bc:67:b0:e0:5d:24:cf: 12:4e:90:67:14:43:a5:eb:c5:6a:a0:5d:c8:28:d3: 3a:14:47:56:45:29:b1:fc:b0:64:db:13:7a:c1:f5: 23:26:0f:84:7a:2d:c8:ef:40:87:77:c1:e8:b2:a4: 2d:85:bc:2f:e1:29:39:69:6a:ea:36:7c:33:60:8c: ae:68:b6:f1:8c:57:dd:fd:8f:99:0b:72:cd:69:88: 82:d2:37:78:55:2c:3d:ec:08:a3:37:fc:ff:69:bd: 5d:cc:c8:c6:98:3e:a8:be:c9:2d:46:7b:5b:9d:c5: a2:5c:7c:0b:d6:24:17:f3:03:5c:59:33:1b:21:4e: 89:63:a8:cc:05:53:fd:90:3c:fd:ea:6a:a2:95:7a: 0e:a0:26:98:3f:4e:ae:6a:21:cf:6e:cb:7b:47:7e: 7a:22:49:d9:2b:cb:e0:a3:c3:ef:df:0d:ac:4a:b4: ad:05:de:c9:fc:dd:c9:82:ee:b7:d6:2d:c8:af:86: 60:83:ae:28:1e:bd:7d:1b:bd:3b:a2:79:e9:09:d1: c1:c2:94:fe:a9:91:d4:3a:56:fe:17:48:d1:89:b2: 12:1f:38:24:69:9b:d5:1e:b0:51:72:58:46:d9:5c: a5:69:32:03:73:2a:c0:df:60:87:9b:0c:61:8f:33: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.120.0/23 Signature Algorithm: sha256WithRSAEncryption 30:47:7b:0b:08:42:2d:d2:7f:4c:47:b9:af:6c:12:c1:e2:ef: 52:f7:83:bf:84:3a:de:22:46:e1:3b:3e:98:8b:0b:3c:3a:71: 1a:4f:9a:21:59:8a:d3:22:68:fc:f6:91:a7:86:79:30:8c:f7: 84:13:7a:30:a1:fb:24:70:f2:b8:39:63:bc:3e:8e:91:73:10: 9b:94:12:5e:e2:13:67:db:84:49:24:13:d0:5c:f9:11:41:3a: e8:0a:0b:0b:1f:29:96:26:fd:e9:44:0f:ba:b3:81:c3:1b:71: 17:80:4d:fb:17:b0:42:62:74:e1:df:bf:8f:8d:4d:d9:3c:d0: f9:7d:72:5c:0a:c1:a7:74:79:1f:ec:03:72:55:ce:18:b9:8c: 60:b4:af:a7:ce:1a:d9:f3:85:ff:91:d4:ec:b6:8e:d4:c6:f2: 66:2a:5e:2e:9d:f0:c4:62:78:18:30:56:fb:64:4c:18:ee:91: 40:46:2f:fb:ca:db:86:b9:84:ef:2e:d0:a1:5a:0f:fa:a9:ae: bc:27:16:58:af:3e:e0:a9:b7:f4:99:4c:ae:0e:2e:25:a7:17: a2:b3:9b:a6:df:7f:32:8f:64:26:2a:31:54:21:6a:c9:86:4e: cd:a9:d1:9f:44:d8:04:05:d9:af:4d:a4:d3:55:5b:37:b2:15: 88:3b:b4:8f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHyhe5xjk8T6dOk6VMXsw5d+yz50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwMzE2MDYyOVoX DTI0MTAwMTE2MTEyOVowMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4 OTg5M0UxMDJCQ0M2MDA4RjlCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaTYHpIj1W8Z7DgXSTPEk6QZxRDpevFaqBdyCjTOhRHVkUpsfywZNsTesH1 IyYPhHotyO9Ah3fB6LKkLYW8L+EpOWlq6jZ8M2CMrmi28YxX3f2PmQtyzWmIgtI3 eFUsPewIozf8/2m9XczIxpg+qL7JLUZ7W53Folx8C9YkF/MDXFkzGyFOiWOozAVT /ZA8/epqopV6DqAmmD9Ormohz27Le0d+eiJJ2SvL4KPD798NrEq0rQXeyfzdyYLu t9YtyK+GYIOuKB69fRu9O6J56QnRwcKU/qmR1DpW/hdI0YmyEh84JGmb1R6wUXJY RtlcpWkyA3MqwN9gh5sMYY8zJqkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFgeZE7sRPlSPPGJiT4QK8xgCPm+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzk0N2Fh LWNlNjktNDAxMy1hMjU2LTU4Nzk5YTU2NTgxYy8wLzU4MUU2NDRFRUM0NEY5NTIz Q0YxODk4OTNFMTAyQkNDNjAwOEY5QkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXgwDQYJKoZIhvcNAQELBQADggEBADBHewsIQi3Sf0xHua9sEsHi71L3g7+E Ot4iRuE7PpiLCzw6cRpPmiFZitMiaPz2kaeGeTCM94QTejCh+yRw8rg5Y7w+jpFz EJuUEl7iE2fbhEkkE9Bc+RFBOugKCwsfKZYm/elED7qzgcMbcReATfsXsEJidOHf v4+NTdk80Pl9clwKwad0eR/sA3JVzhi5jGC0r6fOGtnzhf+R1Oy2jtTG8mYqXi6d 8MRieBgwVvtkTBjukUBGL/vK24a5hO8u0KFaD/qprrwnFlivPuCpt/SZTK4OLiWn F6Kzm6bffzKPZCYqMVQhasmGTs2p0Z9E2AQF2a9NpNNVWzeyFYg7tI8= -----END CERTIFICATE-----Generated at Wed May 8 17:45:18 2024 by rpki-client on console-ams.rpki-client.org