$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer (raw, json) Hash identifier: BckQdbBjG3C389IUKJhP35B6N2SMRN8N6M3fGbX4MmU= Subject key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5BF84EC8B505800E73D5EC280D0DB599270D7756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft caRepository: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 22:14:16 +0000 Certificate not after: Sun 28 Jul 2024 22:19:16 +0000 Subordinate resources: IP: 103.148.44.0/23 IP: 2405:cac0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f8:4e:c8:b5:05:80:0e:73:d5:ec:28:0d:0d:b5:99:27:0d:77:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 22:14:16 2023 GMT Not After : Jul 28 22:19:16 2024 GMT Subject: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:d2:f8:2b:88:19:29:3a:dc:1f:92:f9:87: 44:c5:72:a1:52:f1:b3:ee:89:1c:45:8d:96:e8:41: e7:47:cd:91:07:34:c8:5d:a2:ab:00:07:1e:57:c0: 6b:60:c0:e6:4a:73:4b:97:df:f6:11:8a:43:6b:1d: 14:86:bb:f7:c4:17:09:4e:0d:65:9e:3a:23:1a:c3: 7e:32:70:5b:48:d9:7a:26:03:2f:3d:cb:69:02:36: d9:f4:60:2d:d1:88:88:1c:7a:79:47:27:74:4c:0a: 44:f3:c4:19:8c:8e:4d:a1:ef:35:2c:af:72:e7:aa: 1f:b6:bc:80:b0:f3:06:44:4f:e4:12:e0:37:b9:5f: 8a:8e:4c:55:2b:03:6c:9f:39:67:62:29:61:90:97: dd:c9:d7:88:b7:95:90:52:ed:9b:d2:af:50:d0:75: 7a:8a:64:39:18:c2:9a:58:6b:9c:cb:1c:b9:86:f4: cf:07:c6:26:e6:db:34:ad:92:58:79:c3:36:8d:9a: ca:7b:b1:6c:9c:e6:08:9f:35:a9:a1:dc:71:15:5d: dd:36:39:d5:a9:a4:db:c0:71:0e:c6:af:c7:2f:a9: d7:98:ea:d3:89:32:81:61:24:4e:b6:60:32:51:97: 12:f4:2a:2c:dd:65:31:ce:8a:c9:53:cc:b7:fa:6a: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.44.0/23 IPv6: 2405:cac0::/32 Signature Algorithm: sha256WithRSAEncryption 55:e0:09:f0:17:5e:f1:96:e3:a9:3a:72:e4:da:4b:3e:45:87: 4c:8d:57:94:30:07:c4:3f:19:29:66:fb:5c:a6:3e:77:e8:66: 24:d3:70:26:25:84:a4:0b:ae:11:94:e4:4c:e9:6f:9f:24:f3: 8e:45:aa:0b:1b:b9:40:79:2c:ee:36:d8:87:5c:c0:61:1d:47: 6c:d4:54:01:19:cc:bf:ce:65:99:00:77:63:e8:9f:b2:76:ef: 8f:b5:d4:0b:13:bd:f8:1b:b8:cf:6c:d6:38:86:23:ae:7c:73: 55:be:84:ca:aa:55:3a:87:09:64:fc:39:28:2a:14:60:7b:37: 7a:a3:37:02:23:2d:0e:81:23:65:e2:ab:07:ea:bf:0e:3a:59: 56:40:94:54:c9:cc:30:ce:b2:17:27:f6:36:b0:69:91:d8:56: 90:cc:3a:2a:7e:ea:50:3b:ca:97:ef:51:44:01:b6:51:fd:e3: 3b:f9:da:5f:33:4d:24:7c:ff:55:23:ae:eb:58:12:46:f9:eb: ca:67:79:97:ba:b9:c3:54:a8:86:59:13:15:26:51:dd:c2:21: 3e:91:9e:e7:5f:fa:e1:e9:79:1a:11:53:c8:59:cf:4d:a3:d6: bc:42:d5:34:a3:25:fd:a6:6c:f1:6d:e4:2e:eb:09:b0:d0:36: 0c:a3:94:d7 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUW/hOyLUFgA5z1ewoDQ21mScNd1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIyMTQxNloX DTI0MDcyODIyMTkxNlowMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFG MTExMDAxRjJBMkU4QTNCQjZENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIQ0vgriBkpOtwfkvmHRMVyoVLxs+6JHEWNluhB50fNkQc0yF2iqwAHHlfA a2DA5kpzS5ff9hGKQ2sdFIa798QXCU4NZZ46IxrDfjJwW0jZeiYDLz3LaQI22fRg LdGIiBx6eUcndEwKRPPEGYyOTaHvNSyvcueqH7a8gLDzBkRP5BLgN7lfio5MVSsD bJ85Z2IpYZCX3cnXiLeVkFLtm9KvUNB1eopkORjCmlhrnMscuYb0zwfGJubbNK2S WHnDNo2aynuxbJzmCJ81qaHccRVd3TY51amk28BxDsavxy+p15jq04kygWEkTrZg MlGXEvQqLN1lMc6KyVPMt/pqMQ0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaDadCWzgmCzPHxEQAfKi6KO7bUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5ZjI2ZmI4 LTcyYzQtNDlkOS05Y2JlLTgyMjYzOTcyNzFhMi8wLzM2ODM2OUQwOTZDRTA5ODJD Q0YxRjExMTAwMUYyQTJFOEEzQkI2RDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlCwwDQQCAAIwBwMFACQFysAwDQYJKoZIhvcNAQELBQADggEBAFXgCfAXXvGW 46k6cuTaSz5Fh0yNV5QwB8Q/GSlm+1ymPnfoZiTTcCYlhKQLrhGU5Ezpb58k845F qgsbuUB5LO422IdcwGEdR2zUVAEZzL/OZZkAd2Pon7J274+11AsTvfgbuM9s1jiG I658c1W+hMqqVTqHCWT8OSgqFGB7N3qjNwIjLQ6BI2Xiqwfqvw46WVZAlFTJzDDO shcn9jawaZHYVpDMOip+6lA7ypfvUUQBtlH94zv52l8zTSR8/1UjrutYEkb568pn eZe6ucNUqIZZExUmUd3CIT6Rnudf+uHpeRoRU8hZz02j1rxC1TSjJf2mbPFt5C7r CbDQNgyjlNc= -----END CERTIFICATE-----Generated at Sun May 5 00:13:46 2024 by rpki-client on console-ams.rpki-client.org