$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer (raw, json) Hash identifier: b8rqS9ZEywQqBxPwgfdm/Mr4Vs+Ev//ep9Gh5g/3Zt0= Subject key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76B24020BF9BA852C53CC774560508044D7BE0DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Oct 2023 14:37:12 +0000 Certificate not after: Tue 08 Oct 2024 14:42:12 +0000 Subordinate resources: IP: 103.209.1.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b2:40:20:bf:9b:a8:52:c5:3c:c7:74:56:05:08:04:4d:7b:e0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 10 14:37:12 2023 GMT Not After : Oct 8 14:42:12 2024 GMT Subject: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:60:f5:b6:ad:a5:2d:8f:2d:e0:78:25:77: 45:04:bf:a3:fc:b9:68:e5:50:b4:8b:93:15:7e:f4: f3:81:14:02:f4:05:6e:01:57:dd:51:6d:51:c4:a1: ad:8f:65:b7:0a:73:b4:7f:31:cf:f3:db:43:f2:ec: 2a:58:74:f6:2b:4e:ef:60:89:99:41:38:dc:b7:fa: 52:27:ea:7e:bc:d7:af:e2:be:b9:e7:71:2c:53:cc: 19:82:c3:3f:5b:e4:d6:15:d3:34:ec:47:99:b6:18: a3:e6:44:db:ba:2c:cb:5b:40:80:09:cd:e3:3b:fb: bf:d1:2b:a4:a0:30:85:82:ab:88:6a:11:29:4a:fa: 97:62:4c:54:2b:42:5c:75:68:b2:04:0d:ad:c8:ac: d2:f4:47:f5:25:5f:ea:2d:07:92:4f:f1:8f:8c:0e: c5:87:95:99:33:56:98:46:e3:e0:a3:1f:f1:bc:6f: 81:04:8b:d8:9d:0d:22:aa:58:30:ed:d8:61:bb:af: 7e:6d:25:af:30:39:ab:3e:00:25:32:86:3e:6d:67: 8e:f3:90:7f:3e:93:a1:93:d0:a9:9a:b6:15:e3:18: 76:a3:0d:49:df:9c:27:2a:ce:ad:d8:a8:1f:b5:ce: 05:77:55:eb:4b:c0:20:d0:1e:b5:a9:fa:75:fc:b4: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.1.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f8:8b:c5:cb:08:a8:81:31:2a:60:2e:06:97:9e:2d:29:56: fd:2f:11:df:6b:fd:e7:14:28:62:a1:69:79:dc:b2:8c:dd:65: 2e:92:e8:79:4f:d5:86:2a:81:92:96:17:77:d0:76:f9:09:70: d6:2d:81:21:68:57:10:f1:fa:41:0d:8c:81:d1:ee:9a:a3:ea: c8:9e:d0:9a:88:3b:44:69:39:61:76:08:a4:4c:0a:c1:f1:d7: af:78:ee:5c:e8:33:de:a0:ba:db:92:15:fd:8d:1d:fe:b3:9f: 27:57:1e:81:e5:2b:d2:80:a2:88:b5:ff:b8:f2:4c:de:0f:d9: aa:3b:1c:e1:e2:69:14:0f:c6:92:b6:6d:f2:56:6d:9b:7e:dd: 33:0b:fe:6f:cb:e3:eb:6b:8d:10:fb:68:62:47:a5:4f:e6:f4: e5:f2:99:da:b2:d4:73:49:3a:cf:04:30:38:f0:7a:20:ac:f9: 6a:b6:f1:10:0d:a4:d7:3f:9c:7c:0b:e3:81:4e:c3:e0:66:b5: 1c:f3:81:c0:ae:fe:95:b4:49:b9:31:c5:36:e5:5a:b3:8a:3b: b4:05:09:2c:af:80:b8:9f:b8:55:b9:e2:e4:c8:7a:63:f0:cf: 20:a5:1d:ed:8e:f4:83:63:2e:d5:87:51:18:4b:52:92:1f:fa: de:6f:dd:38 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdrJAIL+bqFLFPMd0VgUIBE174N0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMDE0MzcxMloX DTI0MTAwODE0NDIxMlowMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFC NUQ0QjJBQjg4NDIyQTNENEJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbfYPW2raUtjy3geCV3RQS/o/y5aOVQtIuTFX7084EUAvQFbgFX3VFtUcSh rY9ltwpztH8xz/PbQ/LsKlh09itO72CJmUE43Lf6UifqfrzXr+K+uedxLFPMGYLD P1vk1hXTNOxHmbYYo+ZE27osy1tAgAnN4zv7v9ErpKAwhYKriGoRKUr6l2JMVCtC XHVosgQNrcis0vRH9SVf6i0Hkk/xj4wOxYeVmTNWmEbj4KMf8bxvgQSL2J0NIqpY MO3YYbuvfm0lrzA5qz4AJTKGPm1njvOQfz6ToZPQqZq2FeMYdqMNSd+cJyrOrdio H7XOBXdV60vAINAetan6dfy04x8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBFf2l822R7pOPq11LKriEIqPUu/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMjY3ODI1 LTUxYWYtNDU2ZC1iNDVhLWFlOTNjNWYyNzBlZS8wLzExNUZEQTVGMzZEOTFFRTkz OEZBQjVENEIyQUI4ODQyMkEzRDRCQkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0QEwDQYJKoZIhvcNAQELBQADggEBAEn4i8XLCKiBMSpgLgaXni0pVv0vEd9r /ecUKGKhaXncsozdZS6S6HlP1YYqgZKWF3fQdvkJcNYtgSFoVxDx+kENjIHR7pqj 6sie0JqIO0RpOWF2CKRMCsHx16947lzoM96gutuSFf2NHf6znydXHoHlK9KAooi1 /7jyTN4P2ao7HOHiaRQPxpK2bfJWbZt+3TML/m/L4+trjRD7aGJHpU/m9OXymdqy 1HNJOs8EMDjweiCs+Wq28RANpNc/nHwL44FOw+BmtRzzgcCu/pW0SbkxxTblWrOK O7QFCSyvgLifuFW54uTIemPwzyClHe2O9INjLtWHURhLUpIf+t5v3Tg= -----END CERTIFICATE-----Generated at Wed May 8 18:12:03 2024 by rpki-client on console-fra.rpki-client.org