$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.cer (raw, json) Hash identifier: IfgdEd1d7VtlSlh1Ak5d3hfU5YlGVA3Bdn9KuYyCmCI= Subject key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3EA86A9A7A80490DEF313A6F9C2C472F21437AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Jul 2023 10:03:36 +0000 Certificate not after: Fri 05 Jul 2024 10:08:36 +0000 Subordinate resources: IP: 103.166.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a8:6a:9a:7a:80:49:0d:ef:31:3a:6f:9c:2c:47:2f:21:43:7a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 10:03:36 2023 GMT Not After : Jul 5 10:08:36 2024 GMT Subject: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:fd:b7:46:4b:bd:ec:53:be:25:56:a3:a0: ff:f4:f5:63:3d:85:b0:c9:0f:4e:d9:b2:a6:14:f5: 3c:bf:ef:cd:55:ed:32:71:a1:f0:2f:fe:99:74:78: 4b:51:23:89:d8:88:f3:da:42:af:be:7c:8e:95:b5: c8:a5:32:f4:e0:13:86:75:4c:b2:9b:d7:15:87:31: 55:4e:47:eb:d4:7c:fd:e4:59:d5:c8:8f:51:be:95: 78:0d:42:b5:55:3e:37:06:87:c0:c3:91:b1:25:e5: cd:7f:ca:ee:25:eb:8e:87:21:e9:cb:cb:09:db:fa: 31:06:07:8f:74:70:c9:68:9b:51:1d:2f:12:42:cd: 4b:8d:5d:53:c4:28:e1:dd:04:f7:69:a6:5b:00:9e: 59:e4:cf:f8:14:da:c6:d7:bf:d1:ed:15:4f:07:af: 1e:fd:f1:dc:b4:e2:88:99:96:82:76:75:f2:91:6b: b3:96:01:1b:75:04:c5:8f:6e:c7:64:09:84:cc:1c: 42:db:ee:b7:01:02:d4:87:78:de:32:30:93:e3:34: c8:f5:28:00:a2:f8:65:88:47:23:cf:34:5e:72:9b: d0:85:25:2e:fd:0f:f0:de:eb:11:db:5a:4f:87:aa: de:30:e3:38:8e:74:2a:e5:b4:c3:e0:f3:4f:2e:a1: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 05:fd:90:6f:f3:2a:fd:30:f3:5a:90:19:eb:3d:3a:05:7d:58: d0:2c:64:85:90:33:c4:9e:d5:c1:81:82:4c:93:a4:01:1c:bf: 17:5f:60:6c:2d:e0:99:2e:8e:0d:90:2f:62:e3:3c:1f:e2:26: 29:77:b3:b5:7d:7f:04:ad:89:77:ff:6f:51:71:a3:4a:0c:e9: 43:cf:2e:d2:26:bf:fe:ef:72:65:31:35:51:be:8c:9c:74:bc: 1e:41:4e:4a:21:b5:95:33:9b:96:67:a4:03:69:6c:86:7b:c6: e3:d1:1b:cb:b6:0a:04:de:f7:1c:cf:b9:31:8e:fa:2c:54:4d: 6b:55:e3:4d:11:9f:3b:ff:87:4c:21:77:4f:88:24:f3:74:8c: 3d:d4:c0:02:6d:49:ed:66:b6:cf:e9:ab:a7:53:6c:a3:7a:42: 66:8b:cd:45:58:a0:cf:65:fa:ed:59:e8:8e:a9:6b:77:b9:1c: 06:55:d8:76:80:18:44:b9:fa:5b:39:dc:d3:98:a3:75:07:e6: e9:35:76:d8:ee:3f:fe:a8:24:06:49:07:85:25:82:cd:f8:91: ce:db:fb:70:ad:1d:12:de:0d:6b:35:bb:53:76:ee:af:a2:df: d5:22:c7:7f:04:3a:23:21:10:1e:9c:e8:7e:db:ad:1c:d7:d3: 34:18:1f:dd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPqhqmnqASQ3vMTpvnCxHLyFDeqswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcwNzEwMDMzNloX DTI0MDcwNTEwMDgzNlowMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2 NDFGQUZCM0JCRjI1RDg0RDY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6c/bdGS73sU74lVqOg//T1Yz2FsMkPTtmyphT1PL/vzVXtMnGh8C/+mXR4 S1EjidiI89pCr758jpW1yKUy9OAThnVMspvXFYcxVU5H69R8/eRZ1ciPUb6VeA1C tVU+NwaHwMORsSXlzX/K7iXrjoch6cvLCdv6MQYHj3RwyWibUR0vEkLNS41dU8Qo 4d0E92mmWwCeWeTP+BTaxte/0e0VTwevHv3x3LTiiJmWgnZ18pFrs5YBG3UExY9u x2QJhMwcQtvutwEC1Id43jIwk+M0yPUoAKL4ZYhHI880XnKb0IUlLv0P8N7rEdta T4eq3jDjOI50KuW0w+DzTy6hRmUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEhtSPKR0skgw9kH6+zu/JdhNZvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJh LThiOTEtNDhkMi05YmMxLWFlMGQ5MDBiZjljNy8wLzAxMjFCNTIzQ0E0NzRCMjQ4 MzBGNjQxRkFGQjNCQkYyNUQ4NEQ2NkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpqQwDQYJKoZIhvcNAQELBQADggEBAAX9kG/zKv0w81qQGes9OgV9WNAsZIWQ M8Se1cGBgkyTpAEcvxdfYGwt4Jkujg2QL2LjPB/iJil3s7V9fwStiXf/b1Fxo0oM 6UPPLtImv/7vcmUxNVG+jJx0vB5BTkohtZUzm5ZnpANpbIZ7xuPRG8u2CgTe9xzP uTGO+ixUTWtV400Rnzv/h0whd0+IJPN0jD3UwAJtSe1mts/pq6dTbKN6QmaLzUVY oM9l+u1Z6I6pa3e5HAZV2HaAGES5+ls53NOYo3UH5uk1dtjuP/6oJAZJB4Ulgs34 kc7b+3CtHRLeDWs1u1N27q+i39Uix38EOiMhEB6c6H7brRzX0zQYH90= -----END CERTIFICATE-----Generated at Wed May 8 21:02:08 2024 by rpki-client on console-fra.rpki-client.org