$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer (raw, json) Hash identifier: mw13SbBxy0PHQWjSWNM2pOGKXzYy5yQD2N4ZWJ9jPjc= Subject key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6AAF61514650C598772567B7C00592E366029258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Feb 2024 00:43:26 +0000 Certificate not after: Tue 18 Feb 2025 00:48:26 +0000 Subordinate resources: IP: 103.83.176.0/23 IP: 2001:df7:f200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:af:61:51:46:50:c5:98:77:25:67:b7:c0:05:92:e3:66:02:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 20 00:43:26 2024 GMT Not After : Feb 18 00:48:26 2025 GMT Subject: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:95:9f:ad:ce:18:94:d3:db:e6:f2:dc:eb: e4:8a:1a:86:20:34:cb:40:31:59:fe:5f:0f:05:33: a1:0f:a3:14:7a:51:92:d1:18:73:5e:e1:3d:1b:66: 6b:f2:f4:f4:b5:62:f5:25:0d:58:d6:64:6a:50:1a: 59:cf:e1:c7:d9:56:2b:36:b7:d1:b1:60:2d:cc:94: c9:d9:82:55:3a:0c:a4:0a:9e:91:02:da:74:7b:c0: 6c:fe:ca:e0:76:03:ff:d7:c7:ab:f4:42:26:b9:38: d2:39:16:a6:ce:53:54:ea:53:0c:d8:9e:53:46:fe: 3f:f4:52:0b:6e:b0:d9:df:23:bc:5d:54:1c:c2:8f: 0e:f0:bf:f7:4e:65:24:bc:e4:19:59:9c:46:83:75: 1d:ec:e3:a7:35:28:69:fb:cb:c2:71:86:c4:fb:fe: 8a:67:63:89:8c:1f:6c:ab:d2:8a:e5:90:58:08:5d: c9:5a:0f:56:e8:86:44:1e:42:ba:7f:34:24:88:5d: a5:59:9a:41:72:a9:e7:30:1d:98:cd:c8:c0:5e:41: 53:95:e0:94:d2:c6:73:c4:a4:27:d5:e4:41:c5:07: 2e:cc:be:36:13:f5:df:bd:3e:e3:ba:73:fa:ee:d4: 7d:a4:a9:92:a0:ca:fd:eb:1e:15:f8:c4:3d:33:9d: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.176.0/23 IPv6: 2001:df7:f200::/48 Signature Algorithm: sha256WithRSAEncryption 98:6d:be:a5:a2:6e:f5:51:d5:9f:34:b9:e1:40:73:4a:3e:78: 27:65:fe:a7:72:9c:a0:55:23:ae:92:99:93:ec:ac:11:ae:8e: f0:fc:a0:7d:98:ba:67:4a:86:ce:1a:e8:7d:47:96:15:77:58: 30:b0:47:b8:28:a8:af:6f:bd:2a:3a:7b:93:0d:88:75:39:28: 48:b6:8b:4c:c6:b0:70:d3:70:1b:4a:65:1c:44:d9:d6:6a:35: 5e:28:ae:18:d6:09:78:73:31:4e:66:52:43:08:db:8b:3c:81: af:f7:26:dc:69:89:02:9f:78:f5:7d:64:4d:37:5a:2e:0d:f0: 17:fe:56:33:52:6b:55:e5:50:20:e2:c6:38:a9:d4:cf:82:11: 45:a6:08:2b:92:21:e0:d1:63:54:25:f1:01:78:16:28:d2:d8: c0:96:e2:14:26:5e:ec:98:53:50:95:25:35:13:86:5c:ba:75: 73:02:a2:b7:c5:db:53:2a:d3:4d:7a:5c:36:89:08:bc:2c:7f: 12:54:2e:2a:46:df:9d:71:4f:e1:b1:63:00:ff:1e:c3:ae:b7: 5c:fa:b4:97:b6:e8:7d:6a:9d:20:11:57:87:df:2c:22:2b:36: a1:29:b7:e5:70:07:40:42:37:21:8f:fd:2b:2a:a9:1b:bf:8a: 22:04:da:44 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUaq9hUUZQxZh3JWe3wAWS42YCklgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyMDAwNDMyNloX DTI1MDIxODAwNDgyNlowMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1 RTZDQzg1OEVBNTRENkQ3RjRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwvlZ+tzhiU09vm8tzr5IoahiA0y0AxWf5fDwUzoQ+jFHpRktEYc17hPRtm a/L09LVi9SUNWNZkalAaWc/hx9lWKza30bFgLcyUydmCVToMpAqekQLadHvAbP7K 4HYD/9fHq/RCJrk40jkWps5TVOpTDNieU0b+P/RSC26w2d8jvF1UHMKPDvC/905l JLzkGVmcRoN1HezjpzUoafvLwnGGxPv+imdjiYwfbKvSiuWQWAhdyVoPVuiGRB5C un80JIhdpVmaQXKp5zAdmM3IwF5BU5XglNLGc8SkJ9XkQcUHLsy+NhP1370+47pz +u7UfaSpkqDK/eseFfjEPTOdYOUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAIjaRO0apADwGRebMhY6lTW1/SsMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzJmNzFh LWI5YzItNDAzMy05Njc1LWQ3NzA3NjAzYTgyYy8wLzAyMjM2OTEzQjQ2QTkwMDND MDY0NUU2Q0M4NThFQTU0RDZEN0Y0QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnU7AwDwQCAAIwCQMHACABDffyADANBgkqhkiG9w0BAQsFAAOCAQEAmG2+paJu 9VHVnzS54UBzSj54J2X+p3KcoFUjrpKZk+ysEa6O8PygfZi6Z0qGzhrofUeWFXdY MLBHuCior2+9Kjp7kw2IdTkoSLaLTMawcNNwG0plHETZ1mo1XiiuGNYJeHMxTmZS QwjbizyBr/cm3GmJAp949X1kTTdaLg3wF/5WM1JrVeVQIOLGOKnUz4IRRaYIK5Ih 4NFjVCXxAXgWKNLYwJbiFCZe7JhTUJUlNROGXLp1cwKit8XbUyrTTXpcNokIvCx/ ElQuKkbfnXFP4bFjAP8ew663XPq0l7bofWqdIBFXh98sIis2oSm35XAHQEI3IY/9 KyqpG7+KIgTaRA== -----END CERTIFICATE-----Generated at Wed May 8 05:33:13 2024 by rpki-client on console-ams.rpki-client.org