$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.cer (raw, json) Hash identifier: TZKvg2dKO1QyynzjGQU9K3szQBSuJvEnH/GzovoJH0w= Subject key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 246B7D76C2AE0922075A46FFF45794C927784FFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft caRepository: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 15:34:43 +0000 Certificate not after: Mon 30 Jun 2025 15:39:43 +0000 Subordinate resources: IP: 103.106.116.0/24 IP: 2001:df3:a500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6b:7d:76:c2:ae:09:22:07:5a:46:ff:f4:57:94:c9:27:78:4f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 15:34:43 2024 GMT Not After : Jun 30 15:39:43 2025 GMT Subject: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:18:8b:2c:24:0d:9f:83:e3:5c:5c:e4:84: 9c:55:19:37:f3:71:ff:18:3a:bc:07:f4:db:44:59: 41:0c:65:bb:4a:02:ab:a0:8e:5b:93:65:7c:d8:1b: df:73:3b:de:88:78:4f:a7:94:bb:05:e9:63:25:98: d2:97:ca:a3:3d:fe:28:9e:a2:72:0d:2c:63:25:c3: 58:3f:ff:25:d9:1e:ca:9a:de:0b:15:e6:91:c2:f2: f5:08:1b:f2:05:10:94:06:05:9a:83:9b:75:5b:cc: 5e:da:46:d3:5e:cf:cb:d4:8f:fe:7f:52:27:53:bf: 2c:ae:8f:91:8a:65:0c:dd:b9:bc:89:4c:fc:eb:6e: ee:4f:4a:ba:da:4e:41:59:61:bb:a8:6c:98:4a:a2: b1:41:12:ef:38:22:1e:57:5a:87:b3:3a:75:b9:02: 53:2c:7a:61:83:6b:5c:43:22:cf:48:09:01:b4:98: 29:76:d7:f8:8f:a1:3a:00:23:af:1e:45:c7:f4:2c: dd:f2:e8:81:7f:85:02:9d:64:e4:06:38:74:75:0a: 46:a7:2b:cf:de:90:df:f4:91:05:9a:f8:04:1e:5b: b3:04:1b:f3:14:9c:e9:1f:60:32:a7:7f:99:df:e0: c7:1a:ae:b8:d6:7e:4d:42:a4:98:eb:97:e5:4e:09: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.116.0/24 IPv6: 2001:df3:a500::/48 Signature Algorithm: sha256WithRSAEncryption 37:ac:81:28:2b:86:ed:61:6a:b2:58:b2:b0:1d:38:a4:ff:cc: 75:6e:5b:3f:d4:a6:a2:ec:7a:89:f6:06:22:88:d1:f8:6d:f7: 9b:13:6c:61:08:c3:1e:21:25:fb:56:77:5a:82:f3:d3:97:85: be:fb:1e:23:8f:ba:da:e5:6e:de:f6:02:64:33:22:b2:09:42: 2b:9f:4b:fa:59:30:4a:ec:87:d2:5a:f0:d3:4c:00:75:ee:81: 6f:aa:c2:6a:8a:1c:ba:1c:89:6d:a4:52:21:c4:e6:46:f2:52: 8e:10:52:f0:8c:b9:61:64:57:e2:4e:11:11:b6:c8:5c:e7:d8: 8f:26:0d:32:8b:61:95:dd:6a:a3:40:2d:d0:a2:ff:2d:bb:58: 67:d3:04:cc:14:24:8f:7c:bf:4f:6e:55:92:1d:43:9a:9c:a8: 4d:f3:03:99:80:16:74:c1:30:01:94:bd:f3:74:62:7f:ef:ee: 18:f7:1a:87:a8:29:ef:c4:b1:b7:8b:64:1c:0a:83:07:b5:0b: 24:6f:71:38:95:a9:15:e5:56:81:aa:d6:3e:d7:ea:28:95:67: 74:5d:89:ca:9f:fd:81:73:1f:11:22:7e:56:36:44:75:f3:dd: bd:27:03:4e:1b:61:cc:87:5e:29:0d:55:16:80:4b:9c:6c:89: 1c:2a:93:37 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJGt9dsKuCSIHWkb/9FeUySd4T/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1MzQ0M1oX DTI1MDYzMDE1Mzk0M1owMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRG MzE4QURBMUI3NDUwMkEzQTAxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+FGIssJA2fg+NcXOSEnFUZN/Nx/xg6vAf020RZQQxlu0oCq6COW5NlfNgb 33M73oh4T6eUuwXpYyWY0pfKoz3+KJ6icg0sYyXDWD//JdkeypreCxXmkcLy9Qgb 8gUQlAYFmoObdVvMXtpG017Py9SP/n9SJ1O/LK6PkYplDN25vIlM/Otu7k9KutpO QVlhu6hsmEqisUES7zgiHldah7M6dbkCUyx6YYNrXEMiz0gJAbSYKXbX+I+hOgAj rx5Fx/Qs3fLogX+FAp1k5AY4dHUKRqcrz96Q3/SRBZr4BB5bswQb8xSc6R9gMqd/ md/gxxquuNZ+TUKkmOuX5U4JF/0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJGbYOTX4RcbZiTzGK2ht0UCo6AYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwMGFlZDFk LTk0YzktNDlhNi1hNjA5LTg4MmUwM2NkMDdiYS8wLzkxOUI2MEU0RDdFMTE3MUI2 NjI0RjMxOEFEQTFCNzQ1MDJBM0EwMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnanQwDwQCAAIwCQMHACABDfOlADANBgkqhkiG9w0BAQsFAAOCAQEAN6yBKCuG 7WFqsliysB04pP/MdW5bP9Smoux6ifYGIojR+G33mxNsYQjDHiEl+1Z3WoLz05eF vvseI4+62uVu3vYCZDMisglCK59L+lkwSuyH0lrw00wAde6Bb6rCaoocuhyJbaRS IcTmRvJSjhBS8Iy5YWRX4k4REbbIXOfYjyYNMothld1qo0At0KL/LbtYZ9MEzBQk j3y/T25Vkh1DmpyoTfMDmYAWdMEwAZS983Rif+/uGPcah6gp78Sxt4tkHAqDB7UL JG9xOJWpFeVWgarWPtfqKJVndF2Jyp/9gXMfESJ+VjZEdfPdvScDThthzIdeKQ1V FoBLnGyJHCqTNw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org