$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer (raw, json) Hash identifier: 7q4OSwcN9g8v1uLe1MXZTGIaH53Xx+F0Qb1bjfnJjoI= Subject key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6CA83EB16A6FC7008C088B138252EE2F9457560E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft caRepository: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Jul 2024 04:48:30 +0000 Certificate not after: Mon 21 Jul 2025 04:53:30 +0000 Subordinate resources: IP: 103.52.213.0/24 IP: 103.185.196.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a8:3e:b1:6a:6f:c7:00:8c:08:8b:13:82:52:ee:2f:94:57:56:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 22 04:48:30 2024 GMT Not After : Jul 21 04:53:30 2025 GMT Subject: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:f1:66:8b:88:9d:73:4c:34:66:9f:11:84: fc:6e:87:c8:89:cb:48:77:31:68:28:24:93:61:fb: 6e:57:2b:33:32:f6:40:a7:89:b8:2f:77:20:21:16: f6:c9:33:56:fe:96:3f:78:36:c9:56:92:43:fc:38: 1b:4d:b8:de:92:a3:e7:53:2c:e9:af:b8:2b:fe:da: d6:46:2d:7e:a3:df:3e:19:8b:c6:3f:3c:6e:c5:4f: f4:4f:3c:41:4e:5d:5f:1a:4a:3c:94:38:8c:79:f8: 21:bd:2c:11:02:fc:b1:87:76:f7:30:18:be:b5:b1: 74:e6:5a:97:71:ae:83:c9:a5:ba:1d:ea:c2:46:1e: 62:dc:c2:23:bc:de:3a:b7:05:b8:72:b9:9e:4c:0f: 67:20:18:03:7b:b6:cf:69:ce:09:e2:a3:22:4b:b1: 43:01:82:d1:40:ae:50:de:0c:16:aa:a2:b3:c5:85: 01:57:f6:e7:d5:52:f4:a6:6e:d9:7c:14:cc:48:f4: c1:89:46:7c:21:cd:0f:49:9d:bd:36:1c:96:fc:1b: d5:5c:df:5d:9a:eb:09:dc:b5:e5:f7:49:60:99:f1: 17:89:28:ff:8b:1d:84:14:1c:a8:80:85:5e:f8:1a: 41:bc:b5:c5:60:50:37:90:6a:90:1b:68:89:0b:bf: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.213.0/24 103.185.196.0/24 Signature Algorithm: sha256WithRSAEncryption 75:fe:d6:21:f9:77:c4:07:d6:0a:ac:8f:3b:d3:ec:6c:0c:26: 60:db:c7:2d:72:c3:2f:b2:cf:76:58:2d:80:35:bb:27:83:d9: ac:66:e3:9c:1e:2f:30:28:cc:2b:77:a6:d2:22:66:c9:05:68: 52:01:11:75:e1:81:ce:cd:c4:a4:79:61:f5:fa:71:16:05:1b: a4:f2:8f:6f:a6:f8:51:7b:8d:40:6e:e5:39:f8:6d:d5:96:17: b2:19:1f:de:fb:8b:19:3c:f5:55:cc:4a:83:3a:ec:f1:28:9b: 2c:1a:76:f8:0e:71:1f:cc:2d:52:ed:91:18:9b:c8:2f:ba:55: 8b:06:27:35:f7:b8:2d:8e:1f:c7:eb:3b:cb:eb:08:bb:e3:34: bb:c9:28:20:06:09:75:0a:c3:de:fb:bc:d4:66:66:aa:f0:2a: 6d:ab:b0:1b:d2:71:39:22:cc:d4:21:e6:44:5b:3e:9b:69:84: 46:e3:c6:98:08:c6:8c:1a:05:ed:e1:57:c5:e7:bd:5c:60:1b: 26:46:7d:50:33:c1:23:bc:cf:ce:9e:2a:47:18:ac:cf:af:4d: cc:73:82:85:72:e0:65:c2:59:28:da:71:68:28:e8:b8:35:b4: be:77:e2:cb:fc:59:da:42:fd:24:39:c5:bc:d8:2b:2c:36:97: e6:6c:fb:3a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUbKg+sWpvxwCMCIsTglLuL5RXVg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyMjA0NDgzMFoX DTI1MDcyMTA0NTMzMFowMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERG NTkzRkIwMDZCMzk5MkQ1REY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhL8WaLiJ1zTDRmnxGE/G6HyInLSHcxaCgkk2H7blcrMzL2QKeJuC93ICEW 9skzVv6WP3g2yVaSQ/w4G0243pKj51Ms6a+4K/7a1kYtfqPfPhmLxj88bsVP9E88 QU5dXxpKPJQ4jHn4Ib0sEQL8sYd29zAYvrWxdOZal3Gug8mluh3qwkYeYtzCI7ze OrcFuHK5nkwPZyAYA3u2z2nOCeKjIkuxQwGC0UCuUN4MFqqis8WFAVf259VS9KZu 2XwUzEj0wYlGfCHND0mdvTYclvwb1VzfXZrrCdy15fdJYJnxF4ko/4sdhBQcqICF XvgaQby1xWBQN5BqkBtoiQu/gpECAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNubTRJ55sZLDN31k/sAazmS1d9vMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlOWFiYjFh LWQ2YzAtNDU0Zi04NzBhLThiZWVkZDgxZmNkMi8wL0RCOUI0RDEyNzlFNkM2NEIw Q0RERjU5M0ZCMDA2QjM5OTJENURGNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnNNUDBABnucQwDQYJKoZIhvcNAQELBQADggEBAHX+1iH5d8QH1gqsjzvT7GwM JmDbxy1ywy+yz3ZYLYA1uyeD2axm45weLzAozCt3ptIiZskFaFIBEXXhgc7NxKR5 YfX6cRYFG6Tyj2+m+FF7jUBu5Tn4bdWWF7IZH977ixk89VXMSoM67PEomywadvgO cR/MLVLtkRibyC+6VYsGJzX3uC2OH8frO8vrCLvjNLvJKCAGCXUKw977vNRmZqrw Km2rsBvScTkizNQh5kRbPptphEbjxpgIxowaBe3hV8XnvVxgGyZGfVAzwSO8z86e KkcYrM+vTcxzgoVy4GXCWSjacWgo6Lg1tL534sv8WdpC/SQ5xbzYKyw2l+Zs+zo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org