$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer (raw, json) Hash identifier: k1RA+68322Pgz7S+yC7IO6FPX9EFGG5i6hsy2mLwis4= Subject key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66AAF39800C88F10A6EFE74F9EA33CAA2BABDD6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft caRepository: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 23 May 2024 10:07:31 +0000 Certificate not after: Thu 22 May 2025 10:12:31 +0000 Subordinate resources: IP: 103.164.83.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:aa:f3:98:00:c8:8f:10:a6:ef:e7:4f:9e:a3:3c:aa:2b:ab:dd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 10:07:31 2024 GMT Not After : May 22 10:12:31 2025 GMT Subject: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:87:f3:2a:8c:37:07:f8:5f:8f:e1:63:e4: e1:17:d1:f4:6f:4c:61:7c:bb:aa:fb:bd:3f:e9:69: e6:18:2e:71:cd:55:6f:0c:6f:87:2b:58:29:ef:7b: 33:98:49:b2:a7:f6:e5:62:41:22:2d:16:dd:89:b8: 45:38:a2:df:9e:31:97:5e:cf:eb:e2:ca:fb:33:68: db:32:9f:23:04:96:49:e2:c4:31:04:cb:e3:5f:e9: 30:c4:3f:af:40:0b:db:2a:2d:0e:31:23:ab:31:24: b7:82:2f:5b:ad:3e:85:16:e2:51:ca:e8:aa:af:5d: a4:44:19:b6:ce:70:14:0f:a5:f4:cd:61:3f:70:a1: 38:f3:61:0f:c6:30:7c:8f:47:5f:4d:85:74:18:9f: dc:dc:23:ea:27:7f:22:72:d5:4b:fe:22:8b:93:7b: ff:5a:59:94:b3:33:a8:28:07:79:01:39:18:3e:69: 82:c0:73:df:74:e2:99:37:7d:5c:88:d7:01:aa:98: d7:9d:5d:46:b0:1a:d7:e2:9b:fc:0c:56:41:2c:6a: f7:d6:89:f2:f9:09:51:94:20:43:6f:0a:d2:1d:05: 5d:a4:df:d6:3a:04:f3:f4:29:40:bc:33:af:23:39: 5a:42:43:68:79:de:78:75:47:6d:d0:bf:3a:36:5b: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.83.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:9a:5b:41:83:9a:c0:ff:06:60:fd:47:20:87:86:77:4a:4e: ea:45:4d:7a:4a:e3:dc:ed:16:b5:bc:8e:e8:1c:4a:42:d7:3d: bf:55:30:1b:7b:b1:1e:2e:5c:df:e9:63:64:17:c2:f7:2d:79: 53:06:ef:eb:89:a4:1a:23:c3:1f:a4:ad:4b:1e:c7:4c:73:df: 2b:b9:b3:27:fb:50:36:91:e7:bc:eb:ff:2f:35:c9:47:8c:19: 83:d0:39:63:4e:5c:45:96:23:c3:14:44:9a:33:8b:9d:9e:3b: d8:8d:a8:85:e3:8d:24:01:55:af:80:81:68:4d:3e:2b:c0:ee: 46:c2:b1:b6:37:d5:ca:14:cd:a1:9d:08:3d:cd:b9:55:5f:be: 92:15:ca:9e:27:5a:1e:9c:42:b1:73:d6:43:8a:02:c9:d8:4a: e3:2b:5e:cf:e4:cf:5a:ab:6c:ec:66:61:95:7d:57:eb:47:e1: ee:93:cf:27:4a:72:43:e9:e0:b4:b2:80:39:77:fa:14:bf:d2: 59:3b:ca:02:c5:aa:54:b4:bb:de:2d:ff:c9:d0:f6:6f:ef:33: 60:2b:e4:88:2a:3a:bc:1d:cf:4d:e2:c5:e0:46:a4:f7:3d:9f: f2:cf:fe:e5:64:9c:b3:0f:31:3d:e0:92:f5:5e:ef:e2:e8:02: c3:39:93:7d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZqrzmADIjxCm7+dPnqM8qiur3WswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMzEwMDczMVoX DTI1MDUyMjEwMTIzMVowMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5 OUE3M0MwRjM5MDExOEU1NEVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7Eh/MqjDcH+F+P4WPk4RfR9G9MYXy7qvu9P+lp5hgucc1VbwxvhytYKe97 M5hJsqf25WJBIi0W3Ym4RTii354xl17P6+LK+zNo2zKfIwSWSeLEMQTL41/pMMQ/ r0AL2yotDjEjqzEkt4IvW60+hRbiUcroqq9dpEQZts5wFA+l9M1hP3ChOPNhD8Yw fI9HX02FdBif3Nwj6id/InLVS/4ii5N7/1pZlLMzqCgHeQE5GD5pgsBz33TimTd9 XIjXAaqY151dRrAa1+Kb/AxWQSxq99aJ8vkJUZQgQ28K0h0FXaTf1joE8/QpQLwz ryM5WkJDaHneeHVHbdC/OjZbFIkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNseMbaphWeRwxuZpzwPOQEY5U64MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhMThmOGEw LTkzYWUtNDM1OS04YTVkLTFjYTY3OGJlNTY2OC8wL0RCMUUzMUI2QTk4NTY3OTFD MzFCOTlBNzNDMEYzOTAxMThFNTRFQjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpFMwDQYJKoZIhvcNAQELBQADggEBAIyaW0GDmsD/BmD9RyCHhndKTupFTXpK 49ztFrW8jugcSkLXPb9VMBt7sR4uXN/pY2QXwvcteVMG7+uJpBojwx+krUsex0xz 3yu5syf7UDaR57zr/y81yUeMGYPQOWNOXEWWI8MURJozi52eO9iNqIXjjSQBVa+A gWhNPivA7kbCsbY31coUzaGdCD3NuVVfvpIVyp4nWh6cQrFz1kOKAsnYSuMrXs/k z1qrbOxmYZV9V+tH4e6TzydKckPp4LSygDl3+hS/0lk7ygLFqlS0u94t/8nQ9m/v M2Ar5IgqOrwdz03ixeBGpPc9n/LP/uVknLMPMT3gkvVe7+LoAsM5k30= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org