$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer File: 011400263413DE61A797AA22B58664ACD84FD8DF.cer (raw, json) Hash identifier: W2G7QJ+QWZdu4OkcBCtu8Gm2IIqJz+Is9rf+o/ove3I= Subject key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A76E1E16085D75B7BF1B3605E389227121EEA5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Apr 2024 12:29:07 +0000 Certificate not after: Wed 09 Apr 2025 12:34:07 +0000 Subordinate resources: IP: 103.166.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:76:e1:e1:60:85:d7:5b:7b:f1:b3:60:5e:38:92:27:12:1e:ea:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 12:29:07 2024 GMT Not After : Apr 9 12:34:07 2025 GMT Subject: CN=011400263413DE61A797AA22B58664ACD84FD8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:28:aa:d4:e7:40:28:e9:42:52:72:62:16: 29:56:96:ea:ca:11:97:86:8c:1b:56:65:0b:dc:6c: bb:60:1f:cf:39:62:99:41:fb:6c:15:a1:36:ac:7e: ef:18:b2:b2:1f:9c:a5:9b:82:8e:82:45:ba:79:e4: 3d:5f:70:f3:b4:4d:64:d2:45:3c:ef:f3:b4:4b:58: f5:18:c4:c1:bc:52:99:ed:a2:af:e1:ed:37:3c:59: 27:db:a1:32:80:b6:49:0f:26:98:11:08:d0:93:4d: fb:c3:67:da:dd:01:2f:1a:22:27:c2:04:8c:55:27: 95:82:2d:1d:e8:80:b2:b9:86:d6:d5:b7:7a:2a:3c: be:a5:a6:0f:06:f8:01:bf:a3:4a:e3:fd:07:b2:41: c3:13:ca:81:a4:8c:e5:08:62:8d:82:d2:e5:f2:41: 55:b1:42:af:ce:24:ce:5e:df:35:27:38:14:4d:e6: f0:e3:b7:bb:ac:ce:eb:d6:a4:a6:83:cb:e2:61:f3: 63:ce:93:ee:ad:f6:4d:62:14:38:6f:4d:52:8b:57: b6:bc:c3:7d:5e:d0:b1:ae:b4:1f:0b:24:cb:e4:1e: 2e:85:ea:22:72:b9:7c:a5:b2:9b:6a:1d:5b:01:a5: 07:51:da:c0:36:f3:79:82:bb:f1:27:c5:6d:b3:3a: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.0.0/23 Signature Algorithm: sha256WithRSAEncryption 88:8e:ce:f0:1d:fd:82:34:06:b7:2c:af:94:e9:42:af:ba:41: 26:80:76:c4:5a:29:c8:dc:18:20:3e:ee:d6:f5:92:e3:3f:e2: 73:0a:a0:d6:01:e3:83:fe:09:cd:78:4f:d2:7c:96:47:f7:ca: c5:d8:4f:0b:92:2f:0b:31:a9:a7:8f:0f:eb:5f:cc:f5:f8:5b: 2a:24:bd:c9:64:d7:6c:27:1c:c1:ee:9b:20:25:f6:b1:aa:34: 4c:7e:f3:37:c1:70:1a:0e:ac:7e:b6:2f:20:a5:e0:55:fb:2b: a3:81:62:8f:16:02:dc:e8:54:f6:29:d5:88:a3:cc:05:5f:09: 43:6f:0e:d0:11:74:e7:b7:01:f6:d9:40:c8:d8:89:4d:5d:9b: 5b:57:22:60:58:cc:3e:a0:40:2a:2c:45:2e:7c:17:29:da:5f: bb:62:59:68:1b:a2:02:7d:c9:2c:5c:bd:69:93:19:3f:51:f3: 02:0c:ca:3a:da:7e:26:c7:df:bb:c3:39:18:9c:12:7e:d5:6e: cb:a4:5a:ab:0e:66:a4:90:77:97:81:62:b0:2c:c6:c4:e3:3c: 73:31:cd:33:00:d6:38:2b:5f:fe:a8:6e:27:4b:2a:32:75:f0: 2b:ed:4c:82:66:7f:93:25:cb:42:98:eb:24:35:f8:94:f3:7f: 63:b9:d6:b2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCnbh4WCF11t78bNgXjiSJxIe6lwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMDEyMjkwN1oX DTI1MDQwOTEyMzQwN1owMzExMC8GA1UEAxMoMDExNDAwMjYzNDEzREU2MUE3OTdB QTIyQjU4NjY0QUNEODRGRDhERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjnKKrU50Ao6UJScmIWKVaW6soRl4aMG1ZlC9xsu2AfzzlimUH7bBWhNqx+ 7xiysh+cpZuCjoJFunnkPV9w87RNZNJFPO/ztEtY9RjEwbxSme2ir+HtNzxZJ9uh MoC2SQ8mmBEI0JNN+8Nn2t0BLxoiJ8IEjFUnlYItHeiAsrmG1tW3eio8vqWmDwb4 Ab+jSuP9B7JBwxPKgaSM5QhijYLS5fJBVbFCr84kzl7fNSc4FE3m8OO3u6zO69ak poPL4mHzY86T7q32TWIUOG9NUotXtrzDfV7Qsa60Hwsky+QeLoXqInK5fKWym2od WwGlB1HawDbzeYK78SfFbbM6nwMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEUACY0E95hp5eqIrWGZKzYT9jfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNWU2MDNlMy1mMjNlLTRjNmEtYmIzYy0wNjQwOWQ2NWM4MzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZTYwM2Uz LWYyM2UtNGM2YS1iYjNjLTA2NDA5ZDY1YzgzOC8wLzAxMTQwMDI2MzQxM0RFNjFB Nzk3QUEyMkI1ODY2NEFDRDg0RkQ4REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpgAwDQYJKoZIhvcNAQELBQADggEBAIiOzvAd/YI0Brcsr5TpQq+6QSaAdsRa KcjcGCA+7tb1kuM/4nMKoNYB44P+Cc14T9J8lkf3ysXYTwuSLwsxqaePD+tfzPX4 Wyokvclk12wnHMHumyAl9rGqNEx+8zfBcBoOrH62LyCl4FX7K6OBYo8WAtzoVPYp 1YijzAVfCUNvDtARdOe3AfbZQMjYiU1dm1tXImBYzD6gQCosRS58FynaX7tiWWgb ogJ9ySxcvWmTGT9R8wIMyjrafibH37vDORicEn7VbsukWqsOZqSQd5eBYrAsxsTj PHMxzTMA1jgrX/6obidLKjJ18CvtTIJmf5Mly0KY6yQ1+JTzf2O51rI= -----END CERTIFICATE-----Generated at Wed May 8 04:37:45 2024 by rpki-client on console-fra.rpki-client.org