$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer File: D1553F19BBD3B70719E720005FDB3145CC910A1F.cer (raw, json) Hash identifier: dCTPUJZlmR/YBs/4YaLBYhoi23LLHmQOmTWFImMgWyA= Subject key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10A58A870573BAEECC2A7096CB226E98B73353BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jan 2024 18:33:21 +0000 Certificate not after: Tue 14 Jan 2025 18:38:21 +0000 Subordinate resources: IP: 103.183.58.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a5:8a:87:05:73:ba:ee:cc:2a:70:96:cb:22:6e:98:b7:33:53:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 18:33:21 2024 GMT Not After : Jan 14 18:38:21 2025 GMT Subject: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:42:01:ee:53:80:86:6c:06:d4:1f:34:32: 13:72:1c:71:77:6f:98:30:26:9e:11:9a:39:8a:ac: 97:1e:89:3e:29:b3:bc:60:ed:fa:19:52:a8:09:e7: 77:72:98:dc:d3:b5:7a:14:24:ba:2f:a7:c9:60:71: df:af:70:18:25:58:64:d0:17:3a:31:d9:e8:95:8b: 3a:b1:c2:0c:62:aa:7d:04:93:1e:4b:d5:ec:8f:f2: 59:95:9f:97:ba:e9:6c:b5:58:ed:b5:eb:57:4f:92: 89:81:06:86:47:5f:e7:6c:86:fe:ef:2f:69:67:11: 40:d7:d2:8c:47:9e:e0:7f:30:73:e8:4a:94:cb:a8: 60:20:e2:53:0d:66:ec:ef:c4:1d:fd:22:36:76:39: 89:65:1c:ce:55:14:be:51:76:d5:c7:ed:12:c4:5e: 00:4d:a2:c7:0b:7b:80:85:10:63:e7:63:18:f4:a5: 2e:0f:71:3f:b7:7e:ed:5b:7e:fa:4f:90:9f:75:f5: e0:16:0b:5b:38:53:56:d9:25:34:52:50:fc:3f:c2: 0d:73:34:2d:39:94:9a:23:42:f0:ad:2d:b0:6f:53: 17:03:1a:c2:ec:8c:39:56:06:bc:14:dd:95:17:03: e9:e3:6e:fe:2b:4a:8e:ac:cd:47:c7:66:14:14:a0: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.58.0/23 Signature Algorithm: sha256WithRSAEncryption 13:41:78:95:da:7d:ce:a5:6f:e0:7c:c3:02:11:c4:18:21:4c: 78:b1:34:e3:61:13:5a:d7:b6:d7:15:91:39:19:22:69:26:9b: 49:c6:ac:e8:73:60:b5:cc:6e:ab:13:78:22:1d:63:9a:e2:df: 4c:19:7a:bd:4f:c7:eb:d6:95:25:64:7e:1d:7c:10:5e:54:73: 53:fc:cf:78:3d:d8:67:9a:99:bb:04:fb:36:d9:04:dd:fb:e7: dd:9b:01:d7:53:58:8d:5f:73:f1:79:c8:13:28:55:68:8c:5b: 4b:e8:e9:d2:1e:22:32:0d:d2:b3:b4:11:b1:cd:80:59:17:5f: 68:4f:e5:42:78:6d:23:f6:fa:c7:e3:78:d0:a0:79:e3:48:5f: 8d:69:82:96:ee:61:c4:74:79:4e:12:69:41:d4:ce:a6:db:22: 1e:76:d1:86:15:ac:17:88:6d:0e:b4:70:26:7b:d6:e6:1e:4e: 0e:9f:2e:25:02:bb:97:a9:24:98:b2:9f:93:0c:93:19:29:91: 6d:ef:aa:0b:38:46:f4:3c:3a:10:59:0e:24:54:2d:48:84:ed: ca:2d:e7:b7:f7:ce:fb:31:cd:ad:10:13:0f:4f:2b:ad:7d:ad: 46:ba:70:91:e0:c1:d5:7d:17:14:14:45:cd:4f:5a:e4:8b:75: 81:03:62:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEKWKhwVzuu7MKnCWyyJumLczU7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNjE4MzMyMVoX DTI1MDExNDE4MzgyMVowMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcy MDAwNUZEQjMxNDVDQzkxMEExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe3QgHuU4CGbAbUHzQyE3IccXdvmDAmnhGaOYqslx6JPimzvGDt+hlSqAnn d3KY3NO1ehQkui+nyWBx369wGCVYZNAXOjHZ6JWLOrHCDGKqfQSTHkvV7I/yWZWf l7rpbLVY7bXrV0+SiYEGhkdf52yG/u8vaWcRQNfSjEee4H8wc+hKlMuoYCDiUw1m 7O/EHf0iNnY5iWUczlUUvlF21cftEsReAE2ixwt7gIUQY+djGPSlLg9xP7d+7Vt+ +k+Qn3X14BYLWzhTVtklNFJQ/D/CDXM0LTmUmiNC8K0tsG9TFwMawuyMOVYGvBTd lRcD6eNu/itKjqzNR8dmFBSgCmECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNFVPxm707cHGecgAF/bMUXMkQofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5OWI2MDRm LTE1NzgtNGEwYi04ZjdhLTU4ZDlmMTNjOTc2OS8wL0QxNTUzRjE5QkJEM0I3MDcx OUU3MjAwMDVGREIzMTQ1Q0M5MTBBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntzowDQYJKoZIhvcNAQELBQADggEBABNBeJXafc6lb+B8wwIRxBghTHixNONh E1rXttcVkTkZImkmm0nGrOhzYLXMbqsTeCIdY5ri30wZer1Px+vWlSVkfh18EF5U c1P8z3g92GeambsE+zbZBN37592bAddTWI1fc/F5yBMoVWiMW0vo6dIeIjIN0rO0 EbHNgFkXX2hP5UJ4bSP2+sfjeNCgeeNIX41pgpbuYcR0eU4SaUHUzqbbIh520YYV rBeIbQ60cCZ71uYeTg6fLiUCu5epJJiyn5MMkxkpkW3vqgs4RvQ8OhBZDiRULUiE 7cot57f3zvsxza0QEw9PK619rUa6cJHgwdV9FxQURc1PWuSLdYEDYlA= -----END CERTIFICATE-----Generated at Wed May 8 18:12:21 2024 by rpki-client on console-fra.rpki-client.org