$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer (raw, json) Hash identifier: 5ued97LxJ/YtaRmRTA932aVKMNf0+n4xi7feikcxdRQ= Subject key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B382A1FF9B0484BCF34AB93C0F57452871C2F4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft caRepository: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 11:19:59 +0000 Certificate not after: Mon 29 Jul 2024 11:24:59 +0000 Subordinate resources: IP: 103.151.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 15:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:2a:1f:f9:b0:48:4b:cf:34:ab:93:c0:f5:74:52:87:1c:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 11:19:59 2023 GMT Not After : Jul 29 11:24:59 2024 GMT Subject: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:d9:6c:df:5d:a6:e3:25:de:57:9d:3b:8b: 63:3d:fd:53:57:96:8b:bc:c0:19:76:e4:87:9f:b7: d9:c4:ae:b0:3f:50:58:a1:0b:a1:56:43:15:9c:7b: 28:dd:af:d1:69:0e:af:ce:b4:ad:4a:6a:0f:f5:79: 87:64:13:01:b4:0e:6b:df:a6:80:2f:7a:68:ce:ab: 31:bf:d8:52:03:e0:43:f1:70:a5:55:6f:71:95:0c: a7:3f:ae:f4:0d:a4:b3:b5:91:8e:e1:18:6a:d8:85: 3d:39:4e:50:5f:21:ca:c7:c9:2f:a8:1d:6c:e2:13: d2:1b:74:18:1b:20:86:d3:58:df:68:b4:3b:37:28: 21:1f:33:41:2c:c2:dd:4d:47:70:2b:c6:ca:09:40: 0a:e6:4a:75:35:03:46:e5:a1:ed:af:cd:48:3e:a7: a0:4e:30:92:53:f9:90:9d:de:a8:4a:19:09:45:f4: 88:c3:00:b5:a8:f6:84:ba:8e:6c:17:55:d7:30:33: f5:e5:f3:a4:d5:ac:f9:b3:08:a3:1d:f9:e5:4d:41: 72:ee:23:0d:a1:3c:37:f6:db:7c:64:2f:51:0d:6f: 58:9d:f4:9d:52:65:b5:1d:21:19:45:16:3b:4a:8c: e0:d0:61:ab:73:27:50:a2:3f:00:92:8c:9b:aa:e0: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.22.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:01:03:1f:8c:b1:d5:88:e6:3e:fd:51:a4:63:37:0d:74:93: 9e:4e:ef:ce:8d:bc:b1:d1:1e:57:b9:4a:04:be:e6:fa:5e:d1: 8c:80:dc:ae:0c:61:8d:01:6c:06:b9:4e:6a:65:65:ca:85:7d: c5:73:9a:d7:b6:4e:60:77:92:48:76:dc:d4:9c:13:04:e3:3e: c4:39:c9:aa:b1:35:e1:5f:be:db:a4:8b:c6:82:57:d0:90:89: bc:c1:96:64:4c:86:c0:eb:94:55:cf:e1:d6:53:1d:46:a9:97: 4d:d1:6d:d8:d0:ab:48:06:85:b5:af:38:b0:cf:64:8a:6c:64: 1d:25:35:cc:36:98:f6:dc:3d:fb:2d:af:57:fb:e7:ec:a0:b1: c3:57:68:e8:8a:08:70:80:b2:a0:46:26:ca:bc:ab:ee:3c:46: e7:2e:53:50:84:8c:5d:8a:a6:e7:aa:cd:18:2c:06:a3:ad:c7: 27:23:e0:b5:1c:aa:cf:71:2a:c7:15:35:dd:1b:2a:a2:6d:aa: 16:02:5b:ca:99:20:a8:d8:d7:52:41:02:fd:80:b0:f7:bf:ca: 71:41:bc:0c:29:d1:a9:d2:21:76:40:a5:84:0d:c0:8c:da:b2: 58:1b:3d:d5:9d:a1:43:8b:04:a1:b3:3c:1b:e1:6d:f2:8c:7a: de:59:63:ec -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSzgqH/mwSEvPNKuTwPV0UoccL0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTExMTk1OVoX DTI0MDcyOTExMjQ1OVowMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZD NTI1RUE5ODIzRkY5MDJBRjk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6C2WzfXabjJd5XnTuLYz39U1eWi7zAGXbkh5+32cSusD9QWKELoVZDFZx7 KN2v0WkOr860rUpqD/V5h2QTAbQOa9+mgC96aM6rMb/YUgPgQ/FwpVVvcZUMpz+u 9A2ks7WRjuEYatiFPTlOUF8hysfJL6gdbOIT0ht0GBsghtNY32i0OzcoIR8zQSzC 3U1HcCvGyglACuZKdTUDRuWh7a/NSD6noE4wklP5kJ3eqEoZCUX0iMMAtaj2hLqO bBdV1zAz9eXzpNWs+bMIox355U1Bcu4jDaE8N/bbfGQvUQ1vWJ30nVJltR0hGUUW O0qM4NBhq3MnUKI/AJKMm6rggNECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL6zs1uhw9rKWcbFJeqYI/+QKvmYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwY2I1Yzli LWYzODMtNGU4MS04MTJjLTBlMjI3YWQ0NmIxYi8wL0JFQjNCMzVCQTFDM0RBQ0E1 OUM2QzUyNUVBOTgyM0ZGOTAyQUY5OTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnlxYwDQYJKoZIhvcNAQELBQADggEBAB4BAx+MsdWI5j79UaRjNw10k55O786N vLHRHle5SgS+5vpe0YyA3K4MYY0BbAa5TmplZcqFfcVzmte2TmB3kkh23NScEwTj PsQ5yaqxNeFfvtuki8aCV9CQibzBlmRMhsDrlFXP4dZTHUapl03RbdjQq0gGhbWv OLDPZIpsZB0lNcw2mPbcPfstr1f75+ygscNXaOiKCHCAsqBGJsq8q+48RucuU1CE jF2KpueqzRgsBqOtxycj4LUcqs9xKscVNd0bKqJtqhYCW8qZIKjY11JBAv2AsPe/ ynFBvAwp0anSIXZApYQNwIzaslgbPdWdoUOLBKGzPBvhbfKMet5ZY+w= -----END CERTIFICATE-----Generated at Tue May 7 04:35:04 2024 by rpki-client on console-ams.rpki-client.org