$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer File: C710954C7B301C60B82BA6372CACEB81DA08F190.cer (raw, json) Hash identifier: jE1F45dOBubT7cyLHxO8T1Bw+yf3Keuxn9vhUAfBfj8= Subject key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F6A5B430B0BE94FB3C78FC25EDAE4BBC19D9F90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft caRepository: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 10 Aug 2024 12:03:16 +0000 Certificate not after: Sat 09 Aug 2025 12:08:16 +0000 Subordinate resources: IP: 103.58.111.0/24 IP: 2001:df4:4400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6a:5b:43:0b:0b:e9:4f:b3:c7:8f:c2:5e:da:e4:bb:c1:9d:9f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 10 12:03:16 2024 GMT Not After : Aug 9 12:08:16 2025 GMT Subject: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:1e:1b:4c:ee:43:6c:92:77:e4:7e:77:bf: 5e:9e:a4:73:6a:c7:57:fc:c1:b9:5e:d1:09:0d:d4: 4b:2f:49:98:16:d5:5e:cd:bf:0e:88:5e:8e:1b:50: 82:ce:e3:4b:6a:0a:15:09:87:5e:1e:6a:2b:69:49: 2e:fb:99:0d:af:76:23:cf:e3:d8:19:b4:58:f3:f5: ff:f1:c9:ce:a3:51:b6:5a:c0:43:c9:5a:06:47:f6: eb:20:6e:94:ad:6b:5b:eb:a5:47:7f:30:2b:eb:a4: 4a:05:59:32:a4:83:05:9f:3e:0e:29:63:f1:21:5e: 80:a2:ee:42:28:e8:7f:4b:7b:a7:21:84:fe:86:a2: ea:28:a7:80:9b:c5:75:34:5a:0a:6b:41:4f:26:86: 68:e1:49:b5:5f:d4:86:e4:94:68:72:7e:e8:70:ff: f6:4a:ea:30:fd:bf:24:41:e0:55:d6:d5:5f:eb:94: 40:86:15:54:b7:e8:e6:4e:14:6e:92:fd:b3:98:b7: cf:87:0d:b3:c1:51:0a:0b:4b:9f:22:8b:41:4f:ee: 9e:48:ba:6b:33:6f:d6:47:41:46:4f:01:73:d6:18: 61:51:48:a9:72:ca:40:f8:bc:81:04:a8:7b:81:d5: e9:8e:85:7f:1d:4b:9b:09:ee:eb:d9:fb:c0:95:80: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.111.0/24 IPv6: 2001:df4:4400::/48 Signature Algorithm: sha256WithRSAEncryption 60:9e:e4:50:e9:b4:08:b6:ae:80:1d:0e:e1:95:8e:2c:34:2f: 05:e7:c1:81:4f:0e:2b:e5:76:9d:1a:06:37:8f:ca:1b:07:f9: b6:5e:eb:e3:b2:a4:51:2d:88:4c:88:82:35:57:cb:11:f1:a6: 85:fd:b2:8c:1c:9f:8f:c1:7d:cf:61:9d:ab:98:b3:05:fa:63: fe:97:ca:29:bd:de:91:74:92:48:8e:08:a4:39:33:61:f9:6c: 51:5e:2a:d2:15:3d:b4:9b:d5:03:b3:51:a9:b2:47:33:57:8f: 23:3d:d5:66:84:73:7f:c0:13:78:bd:48:47:fa:d5:1a:46:00: 14:ce:c9:63:57:63:82:d8:5e:b0:ae:79:97:72:59:e8:a6:bd: 39:90:89:19:1e:db:01:d6:82:e5:1b:f2:8c:bc:60:96:63:f4: 12:f7:66:9d:b3:d9:c2:94:87:9a:65:07:6e:5b:e3:f2:d9:24: 63:ce:29:58:17:29:68:0f:69:e2:34:39:af:4c:16:cf:2b:4e: b2:b0:b3:c9:64:1d:32:73:55:72:e0:d9:44:b2:d3:5d:fc:0e: ce:56:cf:ed:a0:6a:dd:05:9f:51:a3:29:1a:aa:d3:ba:eb:c7: f2:82:28:b4:06:d6:40:b1:0b:42:bf:b4:da:93:6b:78:7d:ec: a3:ed:18:f3 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUb2pbQwsL6U+zx4/CXtrku8Gdn5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMDEyMDMxNloX DTI1MDgwOTEyMDgxNlowMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJB NjM3MkNBQ0VCODFEQTA4RjE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbBHhtM7kNsknfkfne/Xp6kc2rHV/zBuV7RCQ3USy9JmBbVXs2/DohejhtQ gs7jS2oKFQmHXh5qK2lJLvuZDa92I8/j2Bm0WPP1//HJzqNRtlrAQ8laBkf26yBu lK1rW+ulR38wK+ukSgVZMqSDBZ8+Dilj8SFegKLuQijof0t7pyGE/oai6iingJvF dTRaCmtBTyaGaOFJtV/UhuSUaHJ+6HD/9krqMP2/JEHgVdbVX+uUQIYVVLfo5k4U bpL9s5i3z4cNs8FRCgtLnyKLQU/unki6azNv1kdBRk8Bc9YYYVFIqXLKQPi8gQSo e4HV6Y6Ffx1Lmwnu69n7wJWAFgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMcQlUx7MBxguCumNyys64HaCPGQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzZTQxNzdk LTgwOTMtNDQ3Yy04N2I1LWM3OWM4Y2I0YzczMy8wL0M3MTA5NTRDN0IzMDFDNjBC ODJCQTYzNzJDQUNFQjgxREEwOEYxOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnOm8wDwQCAAIwCQMHACABDfREADANBgkqhkiG9w0BAQsFAAOCAQEAYJ7kUOm0 CLaugB0O4ZWOLDQvBefBgU8OK+V2nRoGN4/KGwf5tl7r47KkUS2ITIiCNVfLEfGm hf2yjByfj8F9z2Gdq5izBfpj/pfKKb3ekXSSSI4IpDkzYflsUV4q0hU9tJvVA7NR qbJHM1ePIz3VZoRzf8ATeL1IR/rVGkYAFM7JY1djgthesK55l3JZ6Ka9OZCJGR7b AdaC5RvyjLxglmP0EvdmnbPZwpSHmmUHblvj8tkkY84pWBcpaA9p4jQ5r0wWzytO srCzyWQdMnNVcuDZRLLTXfwOzlbP7aBq3QWfUaMpGqrTuuvH8oIotAbWQLELQr+0 2pNreH3so+0Y8w== -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:00 2024 by rpki-client on console-fra.rpki-client.org