$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer (raw, json) Hash identifier: yyNHs6C+LZGjiu35oxi/Mn39/VdnUF4EdmcRePRrIIU= Subject key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 34B3A9CFF74888BAA1E3745EF16A60DE6819BB71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft caRepository: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 May 2024 16:09:41 +0000 Certificate not after: Thu 01 May 2025 16:14:41 +0000 Subordinate resources: IP: 103.170.198.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b3:a9:cf:f7:48:88:ba:a1:e3:74:5e:f1:6a:60:de:68:19:bb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 16:09:41 2024 GMT Not After : May 1 16:14:41 2025 GMT Subject: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:e9:51:e5:2f:7c:af:ba:e1:eb:4a:96:fd: 50:8b:bb:b6:2c:39:4d:a1:6b:54:41:ca:be:df:9d: c6:4c:41:3a:d0:0a:4b:cb:69:41:3f:e7:18:e9:b0: 42:5c:51:d7:ca:19:cd:4f:c9:4c:35:17:26:ab:df: a7:48:81:15:2b:4a:c7:3c:f6:86:72:f2:00:7c:fb: 5e:4f:94:4a:67:38:85:35:ba:55:22:6d:3b:bf:55: 49:28:06:62:97:5d:ab:c5:ff:e1:8b:cc:8c:00:77: 98:da:7b:a3:14:ab:dd:48:c0:d0:7b:e7:15:30:ea: b8:6b:a5:1e:9b:92:3d:7a:ae:b9:dc:74:4f:ab:86: ba:81:14:81:86:df:70:75:85:89:d6:9d:d2:89:0a: f2:8e:3c:e7:94:66:3b:32:37:46:72:1f:c1:19:da: 55:59:62:8b:a4:cf:bf:30:fd:b8:b9:fd:b4:af:3d: ae:10:51:cf:73:02:d8:92:e4:3d:50:68:b2:70:57: c2:1a:b6:d8:34:b1:66:a3:d4:76:eb:69:35:93:a3: 4f:80:fe:98:aa:e5:bd:0c:22:c3:4e:71:21:37:57: 93:65:f4:22:31:25:66:2c:dc:96:ee:d2:aa:05:3c: 2b:c0:dc:73:8d:dd:94:d4:7c:f0:39:e6:30:75:d2: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.198.0/24 Signature Algorithm: sha256WithRSAEncryption 36:14:ea:d9:8f:1d:a0:69:ee:f5:e4:d2:b3:85:82:c4:8c:1f: f3:50:94:ea:12:e5:26:dc:a8:74:a8:79:8f:1b:cd:71:13:8a: 5e:90:14:e9:95:8a:f7:7e:bc:d6:bc:d8:2a:1d:24:6c:de:ae: f2:ce:61:c5:b5:7b:3e:da:cd:ee:54:ff:81:6a:3f:e7:2e:04: a0:ae:79:7a:3b:8e:46:37:c8:7f:3a:4b:ae:e7:32:26:1b:4c: 19:5a:ec:7a:d4:4e:2e:ab:97:06:b1:ce:de:cc:54:7b:24:d8: aa:6d:d0:54:5f:ff:fd:ba:8e:f0:66:f6:9c:a0:4e:94:9b:d9: 60:80:ad:1a:92:9f:f6:1f:9b:f1:ac:97:2f:73:de:60:c7:1d: 7f:d2:f0:31:d7:28:ed:99:84:c1:17:fe:87:34:8e:c4:57:f3: 3a:5f:3f:28:17:39:dd:ab:84:db:ab:22:dc:c1:e6:b3:af:37: e0:3c:fe:d5:15:f3:33:dd:19:b9:28:eb:08:69:d6:a2:44:ed: 0c:d3:13:a9:58:a5:a6:85:46:6e:fa:e5:fa:6d:96:40:55:30: b4:b4:8d:70:73:b9:8f:36:a1:3a:7e:7a:75:c5:76:41:a8:d0: 74:d9:a1:58:4b:17:66:ed:e1:5d:dd:8e:d6:e9:18:68:e1:7a: 73:d5:6e:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNLOpz/dIiLqh43Re8Wpg3mgZu3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwMjE2MDk0MVoX DTI1MDUwMTE2MTQ0MVowMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAy MjIyREY5M0QxQ0UyQkQ2RUEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWN6VHlL3yvuuHrSpb9UIu7tiw5TaFrVEHKvt+dxkxBOtAKS8tpQT/nGOmw QlxR18oZzU/JTDUXJqvfp0iBFStKxzz2hnLyAHz7Xk+USmc4hTW6VSJtO79VSSgG Ypddq8X/4YvMjAB3mNp7oxSr3UjA0HvnFTDquGulHpuSPXquudx0T6uGuoEUgYbf cHWFidad0okK8o4855RmOzI3RnIfwRnaVVlii6TPvzD9uLn9tK89rhBRz3MC2JLk PVBosnBXwhq22DSxZqPUdutpNZOjT4D+mKrlvQwiw05xITdXk2X0IjElZizclu7S qgU8K8Dcc43dlNR88DnmMHXS+UUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFl3NKJhWNd6btAiIt+T0c4r1uoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZGE1ODgy LWI4MDQtNDE1NC05NTliLTYzMzZiMjRlMThiMi8wLzU5NzczNEEyNjE1OEQ3N0E2 RUQwMjIyMkRGOTNEMUNFMkJENkVBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqsYwDQYJKoZIhvcNAQELBQADggEBADYU6tmPHaBp7vXk0rOFgsSMH/NQlOoS 5SbcqHSoeY8bzXETil6QFOmVivd+vNa82CodJGzervLOYcW1ez7aze5U/4FqP+cu BKCueXo7jkY3yH86S67nMiYbTBla7HrUTi6rlwaxzt7MVHsk2Kpt0FRf//26jvBm 9pygTpSb2WCArRqSn/Yfm/Gsly9z3mDHHX/S8DHXKO2ZhMEX/oc0jsRX8zpfPygX Od2rhNurItzB5rOvN+A8/tUV8zPdGbko6whp1qJE7QzTE6lYpaaFRm765fptlkBV MLS0jXBzuY82oTp+enXFdkGo0HTZoVhLF2bt4V3djtbpGGjhenPVboU= -----END CERTIFICATE-----Generated at Sun Jun 23 00:03:56 2024 by rpki-client on console-ams.rpki-client.org