$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer (raw, json) Hash identifier: 87afVO1sAWFcH4DFMjnvMQbAHVrRm12Pc8cgEjk5g9o= Subject key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 39BCFDC9A24F105A88F1E59398AC9E78B5F09262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft caRepository: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Feb 2024 06:21:03 +0000 Certificate not after: Tue 18 Feb 2025 06:26:03 +0000 Subordinate resources: IP: 103.185.36.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bc:fd:c9:a2:4f:10:5a:88:f1:e5:93:98:ac:9e:78:b5:f0:92:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 20 06:21:03 2024 GMT Not After : Feb 18 06:26:03 2025 GMT Subject: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:4f:59:11:93:ca:bb:99:83:94:e3:0d:ca: 24:8d:c9:64:bb:b8:68:0f:06:ab:bd:d0:a9:ec:80: 7a:44:01:db:7e:50:ae:28:07:58:d0:8b:1a:0f:99: aa:1f:49:87:1b:5e:38:2f:ed:59:fe:c8:1a:a7:e9: 9d:02:1e:5d:95:d2:26:50:99:f9:ca:d0:0f:cc:a2: 2d:8e:4b:7e:a2:98:6c:74:2b:4c:35:04:65:fe:17: 28:af:f1:68:bc:da:6f:89:c0:9d:4b:61:75:08:b8: ca:31:f6:0b:1c:ce:68:3b:bf:58:86:66:e2:e1:2e: b4:21:8b:6e:da:1a:0e:e6:43:22:a2:db:f5:c6:3a: c9:fd:61:b8:67:66:65:e2:c4:4a:55:39:69:9e:1d: 1f:b9:32:18:ea:ca:b2:c3:45:ac:4d:23:78:e5:c4: 3c:70:fe:fe:d4:1d:8b:39:5f:da:ae:ba:22:f6:eb: b4:a3:0d:c1:7c:f0:0b:ae:4b:90:32:00:d7:8b:0e: 43:cc:37:22:a7:c1:47:be:3c:2f:89:48:84:44:fe: d9:00:e0:0d:6f:71:53:75:64:d2:82:e0:47:07:45: 51:92:d4:23:cc:cc:b5:d7:46:e5:7c:4d:53:3b:d0: b7:f0:28:a0:cb:84:f7:0e:aa:be:e8:6a:e9:a5:7e: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.36.0/23 Signature Algorithm: sha256WithRSAEncryption 67:79:e6:ec:74:1f:45:5c:c2:d5:4c:2e:5b:9b:50:1a:d6:8a: b9:0f:b6:88:7a:2d:b6:d6:97:11:8e:46:5a:e5:78:50:61:4f: 59:1a:f9:45:be:82:23:30:4f:75:27:c1:8a:9b:08:05:3e:e6: 1b:0d:60:a9:82:ff:7f:09:8d:96:d1:b3:79:35:39:be:9d:fd: 44:bb:ee:e5:ed:1d:2a:4d:d4:36:b1:fc:a5:23:a1:8a:1c:bc: 59:ff:c1:5d:a8:f0:98:69:6d:85:c4:20:94:24:3f:3b:62:7f: 35:ee:0c:cc:48:c4:98:15:ec:66:dc:dd:a4:29:96:56:66:1c: 2c:ad:e3:fd:f6:35:aa:cd:f4:43:ba:66:e9:65:77:9e:6a:65: 5e:e4:52:9f:cf:a7:c2:b5:de:f5:91:00:81:ce:39:c1:e7:44: 5e:03:97:fe:92:71:d8:a0:8d:94:9c:e9:8a:a1:e1:27:48:cd: 28:e9:bd:67:01:19:c1:f7:85:be:3d:aa:c2:67:f2:0c:e5:bf: 57:e4:57:04:04:56:b1:1f:52:89:17:cb:f7:64:9c:74:76:a0: 3c:50:f9:26:cd:9d:e0:43:21:7a:af:ed:85:b8:a8:e9:ea:77: 9d:4c:23:d2:be:5e:b6:c3:77:c9:c1:f8:79:e4:9f:74:c8:7d: 26:b8:c5:08 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUObz9yaJPEFqI8eWTmKyeeLXwkmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyMDA2MjEwM1oX DTI1MDIxODA2MjYwM1owMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1 NzQ2RDdDRjc3QzgxQkZDNjc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNZT1kRk8q7mYOU4w3KJI3JZLu4aA8Gq73QqeyAekQB235QrigHWNCLGg+Z qh9JhxteOC/tWf7IGqfpnQIeXZXSJlCZ+crQD8yiLY5LfqKYbHQrTDUEZf4XKK/x aLzab4nAnUthdQi4yjH2CxzOaDu/WIZm4uEutCGLbtoaDuZDIqLb9cY6yf1huGdm ZeLESlU5aZ4dH7kyGOrKssNFrE0jeOXEPHD+/tQdizlf2q66IvbrtKMNwXzwC65L kDIA14sOQ8w3IqfBR748L4lIhET+2QDgDW9xU3Vk0oLgRwdFUZLUI8zMtddG5XxN UzvQt/AooMuE9w6qvuhq6aV+8NsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJhwe362XTji7dtXRtfPd8gb/GdDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2NzljYmY2 LTA5MTMtNDgyMS04YWUxLWJiNTExZWFmMDg4Zi8wLzk4NzA3QjdFQjY1RDM4RTJF RERCNTc0NkQ3Q0Y3N0M4MUJGQzY3NDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuSQwDQYJKoZIhvcNAQELBQADggEBAGd55ux0H0VcwtVMLlubUBrWirkPtoh6 LbbWlxGORlrleFBhT1ka+UW+giMwT3UnwYqbCAU+5hsNYKmC/38JjZbRs3k1Ob6d /US77uXtHSpN1Dax/KUjoYocvFn/wV2o8JhpbYXEIJQkPztifzXuDMxIxJgV7Gbc 3aQpllZmHCyt4/32NarN9EO6Zulld55qZV7kUp/Pp8K13vWRAIHOOcHnRF4Dl/6S cdigjZSc6Yqh4SdIzSjpvWcBGcH3hb49qsJn8gzlv1fkVwQEVrEfUokXy/dknHR2 oDxQ+SbNneBDIXqv7YW4qOnqd51MI9K+XrbDd8nB+Hnkn3TIfSa4xQg= -----END CERTIFICATE-----Generated at Wed May 8 04:37:54 2024 by rpki-client on console-fra.rpki-client.org