$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.cer (raw, json) Hash identifier: p1FLcrFUZGjbxVTEnNy1XR4Ph7HiwSpIOgwz8XCDJlU= Subject key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63C80603D6DE6AF192037A14620CAF002F375B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 01 Aug 2023 07:47:14 +0000 Certificate not after: Tue 30 Jul 2024 07:52:14 +0000 Subordinate resources: IP: 103.29.10.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c8:06:03:d6:de:6a:f1:92:03:7a:14:62:0c:af:00:2f:37:5b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 07:47:14 2023 GMT Not After : Jul 30 07:52:14 2024 GMT Subject: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:cc:1f:6b:a1:8d:64:21:97:f5:62:79:2a: 96:49:ee:26:60:3f:e3:c4:87:c4:a1:2f:46:5a:bc: 4e:9c:54:c5:c0:31:fd:0c:e5:ea:2b:3b:6a:31:ba: 21:04:93:78:26:ef:59:97:d4:7e:be:2d:0d:66:d9: a4:e0:a2:2c:61:03:31:29:75:8e:81:43:55:cf:7f: 8e:78:bd:ac:74:21:89:51:67:3e:c7:e8:7f:d7:ea: d6:79:45:3d:b2:f9:a6:a9:4b:de:e4:18:0d:b0:b9: c4:e0:90:0a:ac:bf:2a:61:ee:d2:9c:78:c2:60:6b: 45:d3:e0:44:1c:ca:26:f8:37:e8:bd:be:04:e1:c2: ec:24:a4:4a:45:65:9b:a4:d6:39:61:0b:ec:09:d6: 86:d2:42:92:dd:eb:22:ce:0f:cd:59:8e:03:4c:7f: 0c:da:1e:0c:35:95:42:ec:f0:72:83:15:9f:5d:61: 79:c8:72:49:6b:7a:6a:80:d5:3f:4c:60:a2:37:37: 4b:6c:47:b1:f6:70:c8:18:d4:76:fa:02:03:7c:ba: 06:56:13:3f:2e:5a:4e:fb:d7:e3:25:4f:69:66:c2: eb:58:aa:da:10:59:a1:23:48:79:9f:53:6b:00:e2: 4b:c2:99:83:3a:b3:b9:69:54:20:72:f6:cc:0e:4e: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.10.0/23 Signature Algorithm: sha256WithRSAEncryption 57:81:ad:a7:8f:6a:ef:02:82:ef:5d:52:1f:90:39:c4:0c:04: ea:e5:58:4e:bf:c7:82:c9:6b:65:e3:d5:13:8c:2b:96:35:a7: 9b:7a:3a:3d:17:dd:a0:4f:67:32:38:f9:02:97:b0:e3:3a:5f: 50:a6:cb:47:8d:c2:65:42:c0:d5:1f:15:81:2c:db:b1:b5:0e: 66:21:99:ad:67:49:4a:98:0b:cc:23:49:8b:1a:15:08:91:5a: 51:5d:ec:90:e3:88:ca:0b:e9:ea:49:23:b2:08:f1:81:ae:ec: fd:48:b4:7d:dc:88:85:fc:db:fa:64:05:be:67:eb:44:3c:7b: 32:e1:f1:47:4f:8a:d4:65:b5:0d:13:58:fc:db:cc:d3:20:e7: 74:d8:62:2f:da:eb:c6:e2:b5:e8:64:48:ae:91:09:8a:7c:3b: 69:0a:65:18:e8:17:a1:db:9f:19:d1:5f:4e:87:1a:07:11:7c: db:b0:8e:41:ea:6a:f2:e0:e7:3b:24:d5:ed:97:71:9d:04:6e: da:b0:88:9b:a6:0f:3e:47:d0:75:b0:aa:97:63:ff:b6:ba:dd: a6:22:dd:c3:1d:a1:45:74:63:c6:a4:cc:16:3e:d4:e1:03:f0: 03:b3:02:3c:6e:03:cf:09:c0:3a:8a:2c:88:8c:bc:41:5d:7f: df:de:e1:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY8gGA9beavGSA3oUYgyvAC83W2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMTA3NDcxNFoX DTI0MDczMDA3NTIxNFowMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBG QUNDNERFNzM2OUI2NTM2N0VCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODmzB9roY1kIZf1YnkqlknuJmA/48SHxKEvRlq8TpxUxcAx/Qzl6is7ajG6 IQSTeCbvWZfUfr4tDWbZpOCiLGEDMSl1joFDVc9/jni9rHQhiVFnPsfof9fq1nlF PbL5pqlL3uQYDbC5xOCQCqy/KmHu0px4wmBrRdPgRBzKJvg36L2+BOHC7CSkSkVl m6TWOWEL7AnWhtJCkt3rIs4PzVmOA0x/DNoeDDWVQuzwcoMVn11hechySWt6aoDV P0xgojc3S2xHsfZwyBjUdvoCA3y6BlYTPy5aTvvX4yVPaWbC61iq2hBZoSNIeZ9T awDiS8KZgzqzuWlUIHL2zA5O2GMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHEFTjwC4i1gepD6zE3nNptlNn69MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTMyYzY1 LTgwYmUtNGZkZS04N2QwLTM2YzViZDI4OGNkOC8wLzcxMDU0RTNDMDJFMjJENjA3 QTkwRkFDQzRERTczNjlCNjUzNjdFQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnHQowDQYJKoZIhvcNAQELBQADggEBAFeBraePau8Cgu9dUh+QOcQMBOrlWE6/ x4LJa2Xj1ROMK5Y1p5t6Oj0X3aBPZzI4+QKXsOM6X1Cmy0eNwmVCwNUfFYEs27G1 DmYhma1nSUqYC8wjSYsaFQiRWlFd7JDjiMoL6epJI7II8YGu7P1ItH3ciIX82/pk Bb5n60Q8ezLh8UdPitRltQ0TWPzbzNMg53TYYi/a68bitehkSK6RCYp8O2kKZRjo F6HbnxnRX06HGgcRfNuwjkHqavLg5zsk1e2XcZ0EbtqwiJumDz5H0HWwqpdj/7a6 3aYi3cMdoUV0Y8akzBY+1OED8AOzAjxuA88JwDqKLIiMvEFdf9/e4cI= -----END CERTIFICATE-----Generated at Wed May 8 17:45:19 2024 by rpki-client on console-ams.rpki-client.org