$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer File: 619EF55758C22775EDCEBA183A59715E1452FD8B.cer (raw, json) Hash identifier: B+VBBKrIxdjZGUpZjjOD+fOMXNu9otti9B9iqeelrZ0= Subject key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 788FA691EA2DE5AD8B533A17BEF23B8124418109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft caRepository: rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Sep 2023 14:28:22 +0000 Certificate not after: Tue 24 Sep 2024 14:33:22 +0000 Subordinate resources: IP: 103.184.183.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:a6:91:ea:2d:e5:ad:8b:53:3a:17:be:f2:3b:81:24:41:81:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 14:28:22 2023 GMT Not After : Sep 24 14:33:22 2024 GMT Subject: CN=619EF55758C22775EDCEBA183A59715E1452FD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:1c:71:70:88:8a:ec:a0:f0:bd:30:ad:cf: ad:76:9e:81:da:ce:cd:46:9b:93:74:db:09:3a:01: a2:11:38:15:d1:dc:fd:34:f8:ab:38:4f:ed:70:59: a1:04:fe:a0:13:91:04:c5:51:48:fb:aa:4d:25:6f: c1:d2:fe:b4:7e:27:67:6f:f1:ef:b6:35:d1:be:8b: e8:b2:d3:91:ae:d0:21:40:06:c1:23:5e:52:9a:2f: 51:ac:03:f8:dc:5b:5b:ec:49:7e:e1:9e:0f:78:27: 39:ee:c6:5f:5f:40:fb:ce:2c:40:26:d6:46:1c:58: 5d:1b:92:e9:48:ca:78:60:66:d0:72:e7:6f:d8:62: 89:30:78:ee:d1:e2:67:45:ce:f7:25:5c:b5:35:f1: 99:49:dc:94:d3:33:bd:11:0f:b4:f7:3e:00:3c:1f: 27:54:6b:fc:fc:ac:92:be:f7:85:f1:0f:ef:98:aa: c3:de:d4:17:fc:96:18:bc:5e:81:6d:a9:7e:af:1c: 30:a4:e4:99:f2:a7:9f:00:5e:28:f2:09:f2:82:bf: e6:54:87:ec:3b:d2:6d:e4:7c:44:a2:28:cc:ee:cd: 45:86:75:68:6c:bc:1e:20:91:9d:ea:a4:9e:d7:7f: 6f:9c:73:01:2c:27:4b:f1:a6:8f:0d:47:ec:9b:ac: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.183.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6e:9a:d6:7d:a1:59:85:5c:43:80:ab:26:99:bb:f0:e1:dd: ff:1c:18:de:f7:21:8f:90:92:0e:5a:37:71:f5:b8:20:0d:c3: 07:eb:c0:86:cc:db:17:70:cb:12:b1:cd:a0:74:01:91:49:08: d4:ec:4c:3e:d9:2d:5e:5d:30:c5:3f:e7:fd:03:fe:3d:26:f2: e3:74:9c:36:71:bb:b8:8a:cc:89:1d:5a:b3:a3:79:5e:a7:0d: b1:da:8b:31:ce:82:96:f2:8b:30:da:37:0a:10:1f:ed:00:9f: be:2e:ca:e6:ee:85:13:6a:0b:bc:52:5a:7d:8b:25:9e:4c:ab: fc:1e:c5:8c:7f:d5:f0:f7:24:0f:74:8e:8b:09:c6:1a:ae:cf: e3:40:9f:26:79:88:f5:7c:fd:a4:cd:30:6b:dd:c5:1f:d0:c4: d2:b5:18:09:53:4c:be:65:ef:90:98:aa:c2:fc:20:58:8d:f8: a8:1a:e6:26:55:ec:d0:c8:3e:2a:ed:fa:c6:50:b6:4e:c9:5c: 74:a6:c4:6e:26:4b:12:2c:f2:d0:aa:66:35:97:91:98:90:1a: 8a:30:db:9e:39:ce:16:36:eb:50:f2:d5:72:16:1e:3f:f4:e1: d9:c3:7c:95:6b:30:0d:25:e1:b5:c2:33:34:71:85:10:b0:5a: 64:46:35:4d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeI+mkeot5a2LUzoXvvI7gSRBgQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNjE0MjgyMloX DTI0MDkyNDE0MzMyMlowMzExMC8GA1UEAxMoNjE5RUY1NTc1OEMyMjc3NUVEQ0VC QTE4M0E1OTcxNUUxNDUyRkQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxBHHFwiIrsoPC9MK3PrXaegdrOzUabk3TbCToBohE4FdHc/TT4qzhP7XBZ oQT+oBORBMVRSPuqTSVvwdL+tH4nZ2/x77Y10b6L6LLTka7QIUAGwSNeUpovUawD +NxbW+xJfuGeD3gnOe7GX19A+84sQCbWRhxYXRuS6UjKeGBm0HLnb9hiiTB47tHi Z0XO9yVctTXxmUnclNMzvREPtPc+ADwfJ1Rr/Pyskr73hfEP75iqw97UF/yWGLxe gW2pfq8cMKTkmfKnnwBeKPIJ8oK/5lSH7DvSbeR8RKIozO7NRYZ1aGy8HiCRneqk ntd/b5xzASwnS/Gmjw1H7Jus378CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGGe9VdYwid17c66GDpZcV4UUv2LMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjcxODA2Yy00M2QwLTQ2NDYtOGM4ZC02MTExN2MyMzQxYTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyNzE4MDZj LTQzZDAtNDY0Ni04YzhkLTYxMTE3YzIzNDFhMC8wLzYxOUVGNTU3NThDMjI3NzVF RENFQkExODNBNTk3MTVFMTQ1MkZEOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuLcwDQYJKoZIhvcNAQELBQADggEBABdumtZ9oVmFXEOAqyaZu/Dh3f8cGN73 IY+Qkg5aN3H1uCANwwfrwIbM2xdwyxKxzaB0AZFJCNTsTD7ZLV5dMMU/5/0D/j0m 8uN0nDZxu7iKzIkdWrOjeV6nDbHaizHOgpbyizDaNwoQH+0An74uyubuhRNqC7xS Wn2LJZ5Mq/wexYx/1fD3JA90josJxhquz+NAnyZ5iPV8/aTNMGvdxR/QxNK1GAlT TL5l75CYqsL8IFiN+Kga5iZV7NDIPirt+sZQtk7JXHSmxG4mSxIs8tCqZjWXkZiQ Goow2545zhY261Dy1XIWHj/04dnDfJVrMA0l4bXCMzRxhRCwWmRGNU0= -----END CERTIFICATE-----Generated at Wed May 8 18:12:08 2024 by rpki-client on console-fra.rpki-client.org