$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.cer (raw, json) Hash identifier: 1wJochyrU27GTd5xjvSbB13rYEgOpC2Rnx+R4IJsjzc= Subject key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 134A313CB3E655756D8A6E8B7A8142CD8CB54037 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft caRepository: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:20:09 +0000 Certificate not after: Mon 29 Jul 2024 03:25:09 +0000 Subordinate resources: IP: 202.127.96.0/20 IP: 210.79.208.0/20 IP: 2406:5c00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4a:31:3c:b3:e6:55:75:6d:8a:6e:8b:7a:81:42:cd:8c:b5:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:20:09 2023 GMT Not After : Jul 29 03:25:09 2024 GMT Subject: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:ef:c6:6f:af:a6:3d:53:cd:c7:8e:80:d1: c2:ec:cb:44:46:b6:bc:ed:b8:15:08:ec:2a:bf:ec: 77:e8:7a:09:e2:da:ab:45:7c:93:96:b2:59:90:1b: e6:db:77:9a:28:68:e7:4b:39:75:02:3b:5b:59:f3: 32:b8:a8:ce:1b:01:8f:54:1c:3c:6e:cf:47:89:bc: 57:f1:17:fe:9b:7b:5b:d0:2b:00:06:f9:ba:9b:cb: c1:5e:89:95:82:c7:fd:47:01:bc:80:af:16:c9:e2: 39:a0:78:11:fe:b6:ce:30:da:ed:89:98:5e:07:21: 68:c3:a7:9e:b9:44:f2:eb:a5:8b:0a:0a:26:c9:64: 43:e7:c3:4d:f2:de:91:a9:b4:e5:79:11:e0:70:e5: 8c:76:ac:24:20:6b:0b:23:50:db:0f:aa:b7:4f:00: ba:e1:1f:89:8a:02:f2:2a:ad:0a:77:2d:c4:d1:f1: 6a:3b:c9:d9:ab:47:7a:2b:43:91:ad:04:a9:2f:59: da:2d:26:be:e2:15:c9:7c:d3:b4:e2:61:23:b8:27: 82:b0:98:14:44:a1:2d:86:b7:83:58:0e:59:a1:aa: 20:f8:ee:63:ca:81:cd:34:9b:cb:7f:3c:f7:68:cf: 33:14:9f:e5:8e:1b:a2:80:e8:52:65:f1:64:f5:d6: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.127.96.0/20 210.79.208.0/20 IPv6: 2406:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 00:a7:93:db:e0:56:52:a9:cb:ee:d9:97:1d:aa:e0:02:7c:d8: 22:60:e1:30:7d:e9:da:ed:25:dc:49:21:f8:e2:58:f5:26:9d: 61:0c:2e:f3:cb:5c:4f:e2:04:52:9e:e5:56:57:91:ce:18:67: de:44:d6:92:c4:d0:92:f7:91:f4:61:10:29:1f:d6:e7:d1:7c: 47:7a:1f:f8:0b:e9:8e:6b:bd:9d:32:ed:f6:06:13:d5:b5:2a: fa:22:6e:ab:be:c9:24:ad:3d:10:58:3f:ca:a4:36:8d:c9:e5: 03:a5:5c:fb:ce:5b:65:7b:9b:08:90:4e:54:d1:df:66:84:27: d7:4a:ce:60:ce:3e:f5:4f:51:23:12:0c:81:fb:b9:e2:84:e4: 07:fb:07:4d:8f:f3:0d:68:eb:96:92:4b:14:88:5f:14:90:3f: 3f:4e:20:8f:3b:89:14:d1:ef:c7:ed:4f:32:8f:64:57:d8:e5: 12:7f:d7:d3:de:6e:0d:6d:3d:a3:47:70:b7:2b:e7:95:b4:f5: 06:d3:c8:cb:91:2f:f4:ea:c5:b7:c8:a3:02:cb:d2:a0:4d:c3: eb:d9:00:c8:e2:54:07:66:85:48:a3:2d:6f:a7:e4:e5:69:8d: 00:c8:ce:e2:89:ef:fb:fc:06:b6:e8:47:bd:d7:54:d6:6b:61: a6:dd:cd:2f -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUE0oxPLPmVXVtim6LeoFCzYy1QDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMjAwOVoX DTI0MDcyOTAzMjUwOVowMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYx NUQ0RTFDNkFFMzQwQzM0QkVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+578Zvr6Y9U83HjoDRwuzLREa2vO24FQjsKr/sd+h6CeLaq0V8k5ayWZAb 5tt3miho50s5dQI7W1nzMriozhsBj1QcPG7PR4m8V/EX/pt7W9ArAAb5upvLwV6J lYLH/UcBvICvFsniOaB4Ef62zjDa7YmYXgchaMOnnrlE8uuliwoKJslkQ+fDTfLe kam05XkR4HDljHasJCBrCyNQ2w+qt08AuuEfiYoC8iqtCnctxNHxajvJ2atHeitD ka0EqS9Z2i0mvuIVyXzTtOJhI7gngrCYFEShLYa3g1gOWaGqIPjuY8qBzTSby388 92jPMxSf5Y4booDoUmXxZPXWiasCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBY19eQZeYNBvcYV1OHGrjQMNL7tMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMy LTU0OTItNGE1YS05NDNmLWJkYjQ3MzM0MTIzMy8wLzE2MzVGNUU0MTk3OTgzNDFC REM2MTVENEUxQzZBRTM0MEMzNEJFRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BATKf2ADBATST9AwDQQCAAIwBwMFACQGXAAwDQYJKoZIhvcNAQELBQADggEBAACn k9vgVlKpy+7Zlx2q4AJ82CJg4TB96drtJdxJIfjiWPUmnWEMLvPLXE/iBFKe5VZX kc4YZ95E1pLE0JL3kfRhECkf1ufRfEd6H/gL6Y5rvZ0y7fYGE9W1Kvoibqu+ySSt PRBYP8qkNo3J5QOlXPvOW2V7mwiQTlTR32aEJ9dKzmDOPvVPUSMSDIH7ueKE5Af7 B02P8w1o65aSSxSIXxSQPz9OII87iRTR78ftTzKPZFfY5RJ/19Pebg1tPaNHcLcr 55W09QbTyMuRL/TqxbfIowLL0qBNw+vZAMjiVAdmhUijLW+n5OVpjQDIzuKJ7/v8 BrboR73XVNZrYabdzS8= -----END CERTIFICATE-----Generated at Fri May 3 03:08:25 2024 by rpki-client on console-ams.rpki-client.org