$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer (raw, json) Hash identifier: c3TxQcVphUFoGMyML9JYw2c38qSwegQ0nDCCEJNHkr4= Subject key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A75F7048E4CC31C7A180AF3EF36150BF82CDA77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft caRepository: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 15 Jan 2024 09:16:19 +0000 Certificate not after: Mon 13 Jan 2025 09:21:19 +0000 Subordinate resources: IP: 103.79.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:75:f7:04:8e:4c:c3:1c:7a:18:0a:f3:ef:36:15:0b:f8:2c:da:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 15 09:16:19 2024 GMT Not After : Jan 13 09:21:19 2025 GMT Subject: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:b6:c3:76:82:f2:b8:c9:a8:30:7b:a5:ca: a8:2e:7c:9c:ce:12:16:b1:99:56:4a:74:3f:9a:eb: 8f:97:8f:32:b7:0c:dd:3c:2c:c8:01:ab:22:95:26: 34:ce:0a:ff:44:67:57:cb:6e:41:60:18:b9:5a:56: a5:10:57:c5:30:14:75:97:bf:72:fc:c2:51:8c:5f: e1:02:07:65:42:97:f8:6f:a0:e2:0c:54:8b:5a:cb: cb:1d:15:95:85:5c:2a:80:1c:ca:a5:6f:fb:65:e5: 50:8d:df:66:85:22:49:77:0d:93:fe:0d:39:77:47: 65:10:ea:ac:5a:fa:c5:d3:d6:27:36:25:0f:d9:ca: 45:02:16:cc:15:b0:ea:e3:88:25:66:99:93:37:de: 5d:c8:5b:5b:0d:25:ca:14:18:a1:c9:45:32:0e:38: aa:de:3c:05:f2:c7:57:b0:76:2b:12:ea:a8:73:5b: a8:4f:2a:bc:4b:d2:ab:e3:c5:02:e3:a7:28:e2:71: 90:21:da:eb:91:7e:d0:ff:7f:64:00:22:d0:32:fd: 71:84:ff:8c:a1:62:46:65:60:79:46:49:c6:49:3a: 5b:83:92:8c:ec:40:2a:d8:bb:79:05:b7:ab:50:a5: 6f:76:92:c0:b9:ee:91:8b:82:96:f5:84:84:8f:4d: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.50.0/23 Signature Algorithm: sha256WithRSAEncryption 01:3d:c3:83:c1:e7:4d:01:4a:6b:96:9e:d5:ac:2b:c5:5a:40: bc:e6:06:d9:9a:d4:ea:93:e0:1e:17:9c:ca:b6:92:74:a9:ca: 07:0e:05:a1:fb:62:4e:23:65:0a:51:ff:5c:a7:52:12:49:c9: a1:7f:a8:07:cd:b8:13:0a:b7:98:f0:5f:87:be:cf:93:dc:08: a3:fc:e1:43:52:91:73:cb:58:b5:4b:ae:f1:69:f6:19:48:f9: db:e0:70:c9:5e:d5:6c:01:7c:c0:9f:34:9b:8a:22:45:ac:1d: df:37:dc:c2:7a:ec:11:0a:75:3b:66:88:ef:ea:b7:ce:60:49: 49:d1:25:bb:47:06:c3:cd:64:0b:8a:0a:3a:43:32:19:80:aa: 8c:8e:2c:42:e8:47:e6:36:27:a7:99:1d:60:32:9c:11:e5:4a: f1:5a:d7:1d:18:f7:77:26:5f:9c:57:96:d1:4d:6b:f9:f5:74: 9f:06:22:3d:0f:78:b9:ff:ad:3f:85:46:23:f4:07:bd:d1:db: 59:0e:03:21:f5:ed:2a:e7:6b:6b:e8:9e:f8:53:66:ff:76:b1: 7f:16:5b:4d:33:36:00:43:e7:8c:2c:14:68:5f:5e:c7:5e:2c: 37:bb:26:95:de:d8:58:a0:ee:95:6e:ca:81:f5:96:c6:9b:f7: d0:ac:4f:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUanX3BI5Mwxx6GArz7zYVC/gs2ncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNTA5MTYxOVoX DTI1MDExMzA5MjExOVowMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRC QjA2OTVGN0RENDE2QzE3Q0M5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOArtsN2gvK4yagwe6XKqC58nM4SFrGZVkp0P5rrj5ePMrcM3TwsyAGrIpUm NM4K/0RnV8tuQWAYuVpWpRBXxTAUdZe/cvzCUYxf4QIHZUKX+G+g4gxUi1rLyx0V lYVcKoAcyqVv+2XlUI3fZoUiSXcNk/4NOXdHZRDqrFr6xdPWJzYlD9nKRQIWzBWw 6uOIJWaZkzfeXchbWw0lyhQYoclFMg44qt48BfLHV7B2KxLqqHNbqE8qvEvSq+PF AuOnKOJxkCHa65F+0P9/ZAAi0DL9cYT/jKFiRmVgeUZJxkk6W4OSjOxAKti7eQW3 q1Clb3aSwLnukYuClvWEhI9NbqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHX4fhnz18oSimS7BpX33UFsF8yWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiY2FlYTNi LWJkN2YtNDgxYS05YmM3LWFhMTYwZDA1ZDI2Mi8wLzc1Rjg3RTE5RjNEN0NBMTI4 QTY0QkIwNjk1RjdERDQxNkMxN0NDOTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnTzIwDQYJKoZIhvcNAQELBQADggEBAAE9w4PB500BSmuWntWsK8VaQLzmBtma 1OqT4B4XnMq2knSpygcOBaH7Yk4jZQpR/1ynUhJJyaF/qAfNuBMKt5jwX4e+z5Pc CKP84UNSkXPLWLVLrvFp9hlI+dvgcMle1WwBfMCfNJuKIkWsHd833MJ67BEKdTtm iO/qt85gSUnRJbtHBsPNZAuKCjpDMhmAqoyOLELoR+Y2J6eZHWAynBHlSvFa1x0Y 93cmX5xXltFNa/n1dJ8GIj0PeLn/rT+FRiP0B73R21kOAyH17Srna2vonvhTZv92 sX8WW00zNgBD54wsFGhfXsdeLDe7JpXe2Fig7pVuyoH1lsab99CsT1A= -----END CERTIFICATE-----Generated at Thu May 9 00:29:12 2024 by rpki-client on console-ams.rpki-client.org