$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer (raw, json) Hash identifier: rOZhGjlsmuinveKk7axcaUPew8tovZ9DBSa8pUZBK7g= Subject key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 331E9F5F6BCE46F27F064AFB74E9827164DC632C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Sep 2024 18:18:27 +0000 Certificate not after: Tue 09 Sep 2025 18:23:27 +0000 Subordinate resources: IP: 103.209.1.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1e:9f:5f:6b:ce:46:f2:7f:06:4a:fb:74:e9:82:71:64:dc:63:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 18:18:27 2024 GMT Not After : Sep 9 18:23:27 2025 GMT Subject: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:60:f5:b6:ad:a5:2d:8f:2d:e0:78:25:77: 45:04:bf:a3:fc:b9:68:e5:50:b4:8b:93:15:7e:f4: f3:81:14:02:f4:05:6e:01:57:dd:51:6d:51:c4:a1: ad:8f:65:b7:0a:73:b4:7f:31:cf:f3:db:43:f2:ec: 2a:58:74:f6:2b:4e:ef:60:89:99:41:38:dc:b7:fa: 52:27:ea:7e:bc:d7:af:e2:be:b9:e7:71:2c:53:cc: 19:82:c3:3f:5b:e4:d6:15:d3:34:ec:47:99:b6:18: a3:e6:44:db:ba:2c:cb:5b:40:80:09:cd:e3:3b:fb: bf:d1:2b:a4:a0:30:85:82:ab:88:6a:11:29:4a:fa: 97:62:4c:54:2b:42:5c:75:68:b2:04:0d:ad:c8:ac: d2:f4:47:f5:25:5f:ea:2d:07:92:4f:f1:8f:8c:0e: c5:87:95:99:33:56:98:46:e3:e0:a3:1f:f1:bc:6f: 81:04:8b:d8:9d:0d:22:aa:58:30:ed:d8:61:bb:af: 7e:6d:25:af:30:39:ab:3e:00:25:32:86:3e:6d:67: 8e:f3:90:7f:3e:93:a1:93:d0:a9:9a:b6:15:e3:18: 76:a3:0d:49:df:9c:27:2a:ce:ad:d8:a8:1f:b5:ce: 05:77:55:eb:4b:c0:20:d0:1e:b5:a9:fa:75:fc:b4: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.1.0/24 Signature Algorithm: sha256WithRSAEncryption 76:02:30:b1:a0:9c:ba:e2:f1:bf:c1:52:95:30:4f:56:0e:a5: 6c:74:5a:7d:24:21:cd:05:bd:45:7a:b7:5b:da:91:dd:93:37: e8:91:34:43:2b:c0:08:64:9c:50:d6:76:47:8f:86:ec:a3:fd: de:41:07:c9:c4:14:3c:11:32:26:08:e6:c9:9f:bb:45:35:66: 1f:9b:07:7a:c3:41:74:f4:d1:83:0f:72:33:1e:0f:16:0a:a7: 15:ce:8b:35:0d:fb:d4:71:8d:54:0a:42:f9:90:df:d0:5a:74: 29:67:17:e3:e5:4c:f2:66:1f:b8:e0:00:29:c2:90:07:d1:e4: b9:35:09:a9:8d:66:a9:af:06:86:dd:c5:08:c0:13:e6:18:0f: 7a:28:4b:2a:fc:a3:24:6f:b3:31:f5:fc:d7:06:0b:e1:73:c7: 3b:6d:64:69:38:e5:7a:40:5d:b5:4b:20:1e:79:e3:0d:c9:93: 12:cf:06:71:d0:cc:82:48:82:14:ca:5f:5f:9a:38:d6:50:be: 40:16:c0:c6:4c:7a:fc:1d:a4:60:b7:20:e2:96:8d:26:c6:52: 7c:0d:17:70:0b:0a:83:c7:23:c5:34:f0:3d:0e:98:5f:3b:e3: 15:85:bd:af:77:b8:96:b0:be:ed:bf:0e:6d:02:48:dd:88:1a: 2b:2c:7b:af -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMx6fX2vORvJ/Bkr7dOmCcWTcYywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMDE4MTgyN1oX DTI1MDkwOTE4MjMyN1owMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFC NUQ0QjJBQjg4NDIyQTNENEJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbfYPW2raUtjy3geCV3RQS/o/y5aOVQtIuTFX7084EUAvQFbgFX3VFtUcSh rY9ltwpztH8xz/PbQ/LsKlh09itO72CJmUE43Lf6UifqfrzXr+K+uedxLFPMGYLD P1vk1hXTNOxHmbYYo+ZE27osy1tAgAnN4zv7v9ErpKAwhYKriGoRKUr6l2JMVCtC XHVosgQNrcis0vRH9SVf6i0Hkk/xj4wOxYeVmTNWmEbj4KMf8bxvgQSL2J0NIqpY MO3YYbuvfm0lrzA5qz4AJTKGPm1njvOQfz6ToZPQqZq2FeMYdqMNSd+cJyrOrdio H7XOBXdV60vAINAetan6dfy04x8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBFf2l822R7pOPq11LKriEIqPUu/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMjY3ODI1 LTUxYWYtNDU2ZC1iNDVhLWFlOTNjNWYyNzBlZS8wLzExNUZEQTVGMzZEOTFFRTkz OEZBQjVENEIyQUI4ODQyMkEzRDRCQkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0QEwDQYJKoZIhvcNAQELBQADggEBAHYCMLGgnLri8b/BUpUwT1YOpWx0Wn0k Ic0FvUV6t1vakd2TN+iRNEMrwAhknFDWdkePhuyj/d5BB8nEFDwRMiYI5smfu0U1 Zh+bB3rDQXT00YMPcjMeDxYKpxXOizUN+9RxjVQKQvmQ39BadClnF+PlTPJmH7jg ACnCkAfR5Lk1CamNZqmvBobdxQjAE+YYD3ooSyr8oyRvszH1/NcGC+FzxzttZGk4 5XpAXbVLIB554w3JkxLPBnHQzIJIghTKX1+aONZQvkAWwMZMevwdpGC3IOKWjSbG UnwNF3ALCoPHI8U08D0OmF874xWFva93uJawvu2/Dm0CSN2IGisse68= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org