$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer (raw, json) Hash identifier: Qa9BldTkSqnmLD7Yly4i8gjoy1TxEKOSbq9jpOhQ/AQ= Subject key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 745BA882518887E567F136125CDFB1598FD39EC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Jun 2023 09:04:07 +0000 Certificate not after: Thu 06 Jun 2024 09:09:07 +0000 Subordinate resources: IP: 103.158.58.0/23 IP: 2406:b140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:a8:82:51:88:87:e5:67:f1:36:12:5c:df:b1:59:8f:d3:9e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 8 09:04:07 2023 GMT Not After : Jun 6 09:09:07 2024 GMT Subject: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:8d:d9:a9:b5:3e:4b:a7:45:5d:d1:e9:64: 9a:1e:d0:a8:36:a9:2f:e9:2b:e2:00:0d:bc:40:21: a7:f3:cb:c3:64:95:42:c9:ad:51:00:ba:a7:2a:47: 5e:93:19:fb:a6:dc:ab:cb:34:83:0c:ff:3c:b7:c9: b4:63:ab:3d:d0:f2:3c:55:a5:e9:27:09:e5:a2:ca: 33:0b:46:f3:1c:20:b6:6f:15:bf:98:18:38:3e:34: b1:af:8e:cb:69:a9:d4:84:c2:4d:16:4a:21:2f:ac: b9:34:94:d5:c4:5e:58:be:c5:0a:22:0d:19:0b:23: cc:1e:ef:05:e8:7a:e3:8e:a4:af:32:72:d2:67:ad: 23:c7:61:8f:9d:7b:96:ff:c6:f6:98:1f:16:2c:1a: 22:99:90:16:68:69:d7:6b:6a:bb:d8:4f:87:b8:2c: 71:1d:45:52:58:cd:8c:c1:a6:d4:fe:d6:4e:d7:f3: 9b:4d:12:ac:95:a5:95:c1:f5:32:cb:db:49:50:41: df:4d:c2:a5:f0:bc:4d:51:33:69:98:8f:9c:cc:8c: 05:48:14:18:d5:be:af:8c:c1:10:06:22:ae:c1:45: 4d:cb:b5:65:78:1b:cb:87:4b:f3:f2:60:57:66:58: 39:8b:02:3b:95:fc:be:f5:31:5e:51:70:d1:e4:cc: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.58.0/23 IPv6: 2406:b140::/32 Signature Algorithm: sha256WithRSAEncryption 97:2f:95:7b:f0:a1:23:d1:9e:fe:80:85:dc:33:93:dd:69:94: fc:04:69:38:72:4f:ac:ad:ae:48:51:50:c6:01:1f:1d:cb:52: d6:db:b5:ec:ad:1c:dd:97:e9:44:32:7b:b2:90:80:b9:7b:d3: 5a:1b:c5:69:0e:fe:5f:2d:0a:31:9f:d3:6a:b0:6e:ee:aa:e5: 33:0d:57:75:74:b7:cd:59:f5:19:c6:68:5c:ce:62:bc:43:11: 84:44:02:75:ec:a0:3c:c9:c3:e2:38:19:b3:cc:cc:0e:67:ce: d6:a1:6c:e2:32:4e:0d:4c:a4:30:48:59:49:1c:7d:19:01:94: 4b:a5:2b:ce:a7:d5:42:ce:96:5f:fb:f1:20:51:ee:96:37:b6: 19:37:6d:5d:9a:95:9f:4a:d8:b5:4a:bd:9a:34:d7:eb:c7:52: 3d:2e:60:eb:d7:6d:ec:f5:ad:d4:53:fe:56:1f:28:49:ce:5a: d8:83:54:76:7f:02:6f:c3:a7:4c:60:7d:6c:da:0a:61:c3:09: 2a:0d:a5:bc:17:9b:75:0e:5b:00:28:17:25:ad:c5:5e:13:e8: 92:36:ad:4d:69:f3:a2:03:af:5c:5a:60:e5:4a:63:0d:61:b8: 2a:4d:7d:e7:b7:af:04:c2:d9:2d:7e:1c:e6:79:25:08:9b:66: f2:f7:e7:65 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUdFuoglGIh+Vn8TYSXN+xWY/TnsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwODA5MDQwN1oX DTI0MDYwNjA5MDkwN1owMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZB REE0QzcwQTQzQ0FBODIzNzQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsfjdmptT5Lp0Vd0elkmh7QqDapL+kr4gANvEAhp/PLw2SVQsmtUQC6pypH XpMZ+6bcq8s0gwz/PLfJtGOrPdDyPFWl6ScJ5aLKMwtG8xwgtm8Vv5gYOD40sa+O y2mp1ITCTRZKIS+suTSU1cReWL7FCiINGQsjzB7vBeh6446krzJy0metI8dhj517 lv/G9pgfFiwaIpmQFmhp12tqu9hPh7gscR1FUljNjMGm1P7WTtfzm00SrJWllcH1 MsvbSVBB303CpfC8TVEzaZiPnMyMBUgUGNW+r4zBEAYirsFFTcu1ZXgby4dL8/Jg V2ZYOYsCO5X8vvUxXlFw0eTMr48CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHidt4n+GfHwuSatpMcKQ8qoI3RpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzRkNzZi LTViMTYtNGFiNS1hYmNmLWU0YTg2MDdhMjhiMi8wLzc4OURCNzg5RkUxOUYxRjBC OTI2QURBNEM3MEE0M0NBQTgyMzc0NjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnjowDQQCAAIwBwMFACQGsUAwDQYJKoZIhvcNAQELBQADggEBAJcvlXvwoSPR nv6Ahdwzk91plPwEaThyT6ytrkhRUMYBHx3LUtbbteytHN2X6UQye7KQgLl701ob xWkO/l8tCjGf02qwbu6q5TMNV3V0t81Z9RnGaFzOYrxDEYREAnXsoDzJw+I4GbPM zA5nztahbOIyTg1MpDBIWUkcfRkBlEulK86n1ULOll/78SBR7pY3thk3bV2alZ9K 2LVKvZo01+vHUj0uYOvXbez1rdRT/lYfKEnOWtiDVHZ/Am/Dp0xgfWzaCmHDCSoN pbwXm3UOWwAoFyWtxV4T6JI2rU1p86IDr1xaYOVKYw1huCpNfee3rwTC2S1+HOZ5 JQibZvL352U= -----END CERTIFICATE-----Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org