$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.cer (raw, json) Hash identifier: oZf4VZs5rr5qdu5+26iKmkybxbtjjm98hajBTa8r0Vg= Subject key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53CF482E336E226D9C33C68561B2A8495F3B5647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft caRepository: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Apr 2024 13:32:13 +0000 Certificate not after: Thu 10 Apr 2025 13:37:13 +0000 Subordinate resources: IP: 103.184.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cf:48:2e:33:6e:22:6d:9c:33:c6:85:61:b2:a8:49:5f:3b:56:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 13:32:13 2024 GMT Not After : Apr 10 13:37:13 2025 GMT Subject: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:c3:77:fd:e2:35:c2:c5:cb:24:ff:9d:f0: 04:4c:51:13:c3:d9:54:76:0b:34:4f:56:ed:df:d6: 70:19:29:61:3b:5c:02:2b:2a:94:a4:c3:6e:13:c1: 01:eb:8c:43:bc:38:31:dc:71:8a:aa:bf:12:f8:ba: 3b:03:99:3f:7e:5a:a4:3d:6a:c9:7b:d8:f6:95:fa: be:6a:3e:3b:5a:8d:d1:2a:1f:f6:00:8f:55:84:d5: 04:55:48:02:c0:85:c5:23:55:3b:c3:65:b7:aa:ed: f3:c4:fc:88:d8:65:41:79:b8:f2:ab:db:b7:c7:99: 70:50:24:cc:46:d5:42:91:b0:99:90:3e:8b:9d:c5: c3:2b:55:5b:43:79:2b:04:c3:73:db:91:aa:f9:52: 51:62:75:68:7e:51:e9:f3:1d:5d:b6:2c:3d:69:2f: 37:34:53:81:86:a4:c8:7c:d6:6f:6e:2b:53:a6:d6: 49:93:24:c0:ec:9e:e2:be:2c:27:de:ec:bd:5f:59: 81:27:2f:15:52:6b:5e:1e:70:c4:a2:e2:70:5e:cb: 77:69:a1:79:0c:6d:fd:bf:d7:81:da:24:2a:a2:5f: 9b:ea:79:a4:c3:6c:ec:43:a0:39:19:2f:70:2d:a4: ff:32:4a:1d:dc:a3:eb:89:b5:c3:d4:3d:ad:3b:e3: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.178.0/23 Signature Algorithm: sha256WithRSAEncryption 39:4f:29:0b:25:53:c2:ad:f7:a9:a4:8f:38:54:34:b4:c7:7d: 46:2b:89:f6:55:3a:78:0e:2d:63:73:06:13:ce:22:86:af:eb: f3:cd:d5:fe:d4:46:42:d6:36:9a:ab:6c:d9:1a:c3:18:00:88: d5:88:05:6f:ae:3f:d1:88:ae:da:65:14:56:10:22:12:3f:86: b9:22:30:0e:94:51:64:06:05:50:d1:0d:e9:e6:06:0c:8c:13: 56:7d:5a:b7:6c:5d:3b:16:64:2b:8a:07:95:2e:ed:07:14:12: 42:2a:55:90:76:20:34:e5:e8:fc:1f:a2:e4:3c:d5:67:e8:aa: db:de:e7:e2:cd:6a:fa:d2:0a:4d:e0:77:cb:31:60:9c:d8:b3: e9:9e:f4:f0:57:ee:07:2e:c0:6f:63:77:8c:81:04:45:10:36: a3:02:98:ae:4e:e9:ec:50:16:6a:2e:93:ba:63:b8:13:82:02: 09:58:23:a8:5c:7c:a3:ef:f2:db:87:a2:9a:4f:29:d7:d9:65: 81:d0:5b:17:35:8b:6b:7b:39:22:12:68:c1:5c:b0:0f:0c:5e: 45:d6:c3:5b:57:34:d1:03:58:d4:39:0b:d0:a7:57:63:c4:e5: 80:e7:0e:a1:54:b9:a9:11:96:45:08:b4:0f:46:1d:43:9c:ab: cd:36:15:f8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU89ILjNuIm2cM8aFYbKoSV87VkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMTEzMzIxM1oX DTI1MDQxMDEzMzcxM1owMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEy NzExRkYxRkUwRjY4NzI0MjQ2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqow3f94jXCxcsk/53wBExRE8PZVHYLNE9W7d/WcBkpYTtcAisqlKTDbhPB AeuMQ7w4Mdxxiqq/Evi6OwOZP35apD1qyXvY9pX6vmo+O1qN0Sof9gCPVYTVBFVI AsCFxSNVO8Nlt6rt88T8iNhlQXm48qvbt8eZcFAkzEbVQpGwmZA+i53FwytVW0N5 KwTDc9uRqvlSUWJ1aH5R6fMdXbYsPWkvNzRTgYakyHzWb24rU6bWSZMkwOye4r4s J97svV9ZgScvFVJrXh5wxKLicF7Ld2mheQxt/b/XgdokKqJfm+p5pMNs7EOgORkv cC2k/zJKHdyj64m1w9Q9rTvjJhkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBGzaeHPQesD41onEf8f4PaHJCRnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlMDk2MmY3 LTY3ZWEtNDcwZS1hNTI0LTdhZTFlNDBmZDViNy8wLzExQjM2OUUxQ0Y0MUVCMDNF MzVBMjcxMUZGMUZFMEY2ODcyNDI0NjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuLIwDQYJKoZIhvcNAQELBQADggEBADlPKQslU8Kt96mkjzhUNLTHfUYrifZV OngOLWNzBhPOIoav6/PN1f7URkLWNpqrbNkawxgAiNWIBW+uP9GIrtplFFYQIhI/ hrkiMA6UUWQGBVDRDenmBgyME1Z9WrdsXTsWZCuKB5Uu7QcUEkIqVZB2IDTl6Pwf ouQ81Wfoqtve5+LNavrSCk3gd8sxYJzYs+me9PBX7gcuwG9jd4yBBEUQNqMCmK5O 6exQFmouk7pjuBOCAglYI6hcfKPv8tuHoppPKdfZZYHQWxc1i2t7OSISaMFcsA8M XkXWw1tXNNEDWNQ5C9CnV2PE5YDnDqFUuakRlkUItA9GHUOcq802Ffg= -----END CERTIFICATE-----Generated at Wed May 8 14:59:49 2024 by rpki-client on console-ams.rpki-client.org