$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer (raw, json) Hash identifier: +yVr0zIq1I/U9+4Me5OgSSShQ5afwkz3GesQZzDMvBU= Subject key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6CDCBB4BF16C5B5AC84B12283CBC745004EA59EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft caRepository: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Oct 2024 14:01:23 +0000 Certificate not after: Wed 01 Oct 2025 14:06:23 +0000 Subordinate resources: IP: 103.182.78.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dc:bb:4b:f1:6c:5b:5a:c8:4b:12:28:3c:bc:74:50:04:ea:59:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 2 14:01:23 2024 GMT Not After : Oct 1 14:06:23 2025 GMT Subject: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:e3:c6:16:6f:ff:27:17:0d:bb:a6:2c:0d: 9f:88:c9:e8:aa:f6:16:12:7e:c1:70:9b:1d:0f:bc: 1f:0a:a0:f9:3a:82:37:c4:a2:26:97:8b:c1:76:0a: 65:0e:c2:d3:35:41:0d:f7:b3:d3:32:b7:b4:4b:83: 23:90:8f:36:59:67:bd:71:db:e5:c5:0e:24:f4:8c: 70:72:47:fa:34:ac:9f:0b:5e:9b:14:76:fa:d9:a4: 99:4a:92:6d:e6:b9:b2:6d:b8:1b:92:2c:81:7a:cb: 0d:61:9d:6d:b0:a2:3f:4a:12:f5:06:7c:7d:23:38: d6:c6:31:1e:0b:29:6e:f7:c5:0b:5a:0d:1e:cc:4d: a5:28:d0:5f:f8:e7:d8:58:5c:df:ed:e2:c1:99:35: 5d:5b:5e:3c:2f:f8:14:e3:a2:63:f2:53:88:b3:1d: c2:f7:04:b1:fe:f8:c9:fe:0e:cf:a6:6e:ae:df:b9: 71:74:d3:b5:e3:d5:78:55:c5:0a:cb:2e:5b:27:4c: 03:44:44:b0:73:02:ea:c4:92:b7:35:18:e3:6d:be: 4e:9a:72:ec:b3:e1:89:ee:f0:16:be:28:76:7d:27: a5:7a:2e:70:a6:e9:a3:7a:79:57:07:e2:f5:b3:4f: af:54:ca:12:67:83:fb:d5:13:ab:96:13:09:ea:57: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.78.0/23 Signature Algorithm: sha256WithRSAEncryption 73:dc:dd:89:4a:d5:62:5f:97:6b:88:7b:64:51:f8:11:ca:d2: 6b:3a:1b:a3:0c:1f:ca:59:1f:27:39:91:98:71:62:84:81:56: b5:9e:1d:c1:5b:5a:c1:e6:c1:d2:f5:0a:4c:81:4a:ad:12:35: 4e:e5:6f:21:47:f2:65:cb:62:32:8a:34:b4:57:f1:73:7a:a2: 49:74:6e:3b:bc:40:5a:7e:e0:12:56:f1:f7:1e:ac:cc:ad:b6: 21:7f:f9:77:77:99:4a:30:0a:3c:fa:5a:37:d6:e9:4c:c5:70: b9:95:7e:95:c3:e8:08:63:be:50:bb:94:f5:2a:ee:09:82:13: 89:b4:de:62:a8:c2:78:3f:40:5f:79:f1:dd:0c:70:59:eb:4d: 19:f5:9b:fe:11:f6:dd:b6:6e:c1:27:73:77:e2:a3:d0:40:b0: c5:a9:c8:bd:4e:5e:5c:06:07:34:e8:11:e9:8c:db:5a:90:88: de:2b:d8:fd:18:d9:62:a9:71:6a:aa:88:e7:ed:e7:8d:9a:15: 8b:30:4b:03:67:75:0f:0f:ca:fe:14:c8:68:06:92:5c:b9:7e: b6:65:9e:3a:7d:ad:69:da:79:ac:22:ca:44:7c:a2:00:ec:ad: 14:65:67:3e:49:18:de:ef:27:d5:c5:51:58:7f:5d:89:5d:cd: 91:f8:54:08 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbNy7S/FsW1rISxIoPLx0UATqWewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMjE0MDEyM1oX DTI1MTAwMTE0MDYyM1owMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZB NDIwNEVBOTkzQUU5M0QxOTZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzr48YWb/8nFw27piwNn4jJ6Kr2FhJ+wXCbHQ+8Hwqg+TqCN8SiJpeLwXYK ZQ7C0zVBDfez0zK3tEuDI5CPNllnvXHb5cUOJPSMcHJH+jSsnwtemxR2+tmkmUqS bea5sm24G5IsgXrLDWGdbbCiP0oS9QZ8fSM41sYxHgspbvfFC1oNHsxNpSjQX/jn 2Fhc3+3iwZk1XVtePC/4FOOiY/JTiLMdwvcEsf74yf4Oz6Zurt+5cXTTtePVeFXF CssuWydMA0REsHMC6sSStzUY422+Tppy7LPhie7wFr4odn0npXoucKbpo3p5Vwfi 9bNPr1TKEmeD+9UTq5YTCepXH3UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNH3LmfanM4JBE+kIE6pk66T0ZbWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGMzM2I4 LTlkNDItNDIwOC04YWM0LWYxNzJhMTQ0ZDg2OC8wL0QxRjcyRTY3REE5Q0NFMDkw NDRGQTQyMDRFQTk5M0FFOTNEMTk2RDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntk4wDQYJKoZIhvcNAQELBQADggEBAHPc3YlK1WJfl2uIe2RR+BHK0ms6G6MM H8pZHyc5kZhxYoSBVrWeHcFbWsHmwdL1CkyBSq0SNU7lbyFH8mXLYjKKNLRX8XN6 okl0bju8QFp+4BJW8fcerMyttiF/+Xd3mUowCjz6WjfW6UzFcLmVfpXD6AhjvlC7 lPUq7gmCE4m03mKowng/QF958d0McFnrTRn1m/4R9t22bsEnc3fio9BAsMWpyL1O XlwGBzToEemM21qQiN4r2P0Y2WKpcWqqiOft542aFYswSwNndQ8Pyv4UyGgGkly5 frZlnjp9rWnaeawiykR8ogDsrRRlZz5JGN7vJ9XFUVh/XYldzZH4VAg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org