$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.cer (raw, json) Hash identifier: uvhQOkI6/R/KaMD5BDtRjofBMJlFcF0CJ+N/lrkI8dk= Subject key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CFC90FDE8C94478446B81306794E0812E0AEA0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Jun 2024 17:38:59 +0000 Certificate not after: Fri 06 Jun 2025 17:43:59 +0000 Subordinate resources: IP: 103.166.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:90:fd:e8:c9:44:78:44:6b:81:30:67:94:e0:81:2e:0a:ea:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 7 17:38:59 2024 GMT Not After : Jun 6 17:43:59 2025 GMT Subject: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:fd:b7:46:4b:bd:ec:53:be:25:56:a3:a0: ff:f4:f5:63:3d:85:b0:c9:0f:4e:d9:b2:a6:14:f5: 3c:bf:ef:cd:55:ed:32:71:a1:f0:2f:fe:99:74:78: 4b:51:23:89:d8:88:f3:da:42:af:be:7c:8e:95:b5: c8:a5:32:f4:e0:13:86:75:4c:b2:9b:d7:15:87:31: 55:4e:47:eb:d4:7c:fd:e4:59:d5:c8:8f:51:be:95: 78:0d:42:b5:55:3e:37:06:87:c0:c3:91:b1:25:e5: cd:7f:ca:ee:25:eb:8e:87:21:e9:cb:cb:09:db:fa: 31:06:07:8f:74:70:c9:68:9b:51:1d:2f:12:42:cd: 4b:8d:5d:53:c4:28:e1:dd:04:f7:69:a6:5b:00:9e: 59:e4:cf:f8:14:da:c6:d7:bf:d1:ed:15:4f:07:af: 1e:fd:f1:dc:b4:e2:88:99:96:82:76:75:f2:91:6b: b3:96:01:1b:75:04:c5:8f:6e:c7:64:09:84:cc:1c: 42:db:ee:b7:01:02:d4:87:78:de:32:30:93:e3:34: c8:f5:28:00:a2:f8:65:88:47:23:cf:34:5e:72:9b: d0:85:25:2e:fd:0f:f0:de:eb:11:db:5a:4f:87:aa: de:30:e3:38:8e:74:2a:e5:b4:c3:e0:f3:4f:2e:a1: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:bb:f6:ed:19:b7:d2:9a:a5:d3:2b:af:c4:c4:28:22:87:d7: 3b:fd:ac:14:33:23:01:4d:92:d2:41:ed:0c:2a:0d:90:8c:73: c0:38:f7:5d:b3:47:c4:ba:c9:53:0f:f5:3f:d4:90:5d:1c:f3: b5:dc:a9:7a:75:35:40:17:6b:20:57:eb:a6:df:7a:a8:7e:2a: 77:07:95:64:9c:77:d1:0a:19:b6:9e:99:72:8d:9d:84:e8:a5: 19:0f:2f:57:7d:b2:3e:58:f0:6d:1b:ac:ab:a7:40:0c:59:f2: 8a:be:ab:cd:9b:8e:9e:31:d2:d3:a9:4b:72:5e:d3:9c:e7:74: 49:54:96:f1:e1:63:0d:7d:63:d3:84:7d:40:b4:70:b7:be:fd: b3:c8:bd:a3:eb:84:46:75:65:4f:d5:66:f7:10:d8:ce:3d:92: bf:45:72:24:66:08:50:62:8a:fe:0c:4d:75:62:77:e1:5b:4a: 25:32:2d:a4:f6:21:28:be:2f:46:32:8d:5b:42:b6:bf:a5:b9: 19:a6:3b:54:c1:95:28:49:bb:cc:46:7b:99:74:bc:b6:f7:c0: 79:a9:bf:d2:b5:e2:33:d0:39:77:d1:3f:8b:b4:c5:8d:3b:c2: db:8f:a9:87:53:7c:d4:61:5a:af:59:f2:f4:f2:59:49:ff:95: ab:57:c8:7c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTPyQ/ejJRHhEa4EwZ5TggS4K6g8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYwNzE3Mzg1OVoX DTI1MDYwNjE3NDM1OVowMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2 NDFGQUZCM0JCRjI1RDg0RDY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6c/bdGS73sU74lVqOg//T1Yz2FsMkPTtmyphT1PL/vzVXtMnGh8C/+mXR4 S1EjidiI89pCr758jpW1yKUy9OAThnVMspvXFYcxVU5H69R8/eRZ1ciPUb6VeA1C tVU+NwaHwMORsSXlzX/K7iXrjoch6cvLCdv6MQYHj3RwyWibUR0vEkLNS41dU8Qo 4d0E92mmWwCeWeTP+BTaxte/0e0VTwevHv3x3LTiiJmWgnZ18pFrs5YBG3UExY9u x2QJhMwcQtvutwEC1Id43jIwk+M0yPUoAKL4ZYhHI880XnKb0IUlLv0P8N7rEdta T4eq3jDjOI50KuW0w+DzTy6hRmUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEhtSPKR0skgw9kH6+zu/JdhNZvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJh LThiOTEtNDhkMi05YmMxLWFlMGQ5MDBiZjljNy8wLzAxMjFCNTIzQ0E0NzRCMjQ4 MzBGNjQxRkFGQjNCQkYyNUQ4NEQ2NkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpqQwDQYJKoZIhvcNAQELBQADggEBAFu79u0Zt9KapdMrr8TEKCKH1zv9rBQz IwFNktJB7QwqDZCMc8A4912zR8S6yVMP9T/UkF0c87XcqXp1NUAXayBX66bfeqh+ KncHlWScd9EKGbaemXKNnYTopRkPL1d9sj5Y8G0brKunQAxZ8oq+q82bjp4x0tOp S3Je05zndElUlvHhYw19Y9OEfUC0cLe+/bPIvaPrhEZ1ZU/VZvcQ2M49kr9FciRm CFBiiv4MTXVid+FbSiUyLaT2ISi+L0YyjVtCtr+luRmmO1TBlShJu8xGe5l0vLb3 wHmpv9K14jPQOXfRP4u0xY07wtuPqYdTfNRhWq9Z8vTyWUn/latXyHw= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org