$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer (raw, json) Hash identifier: PQaabCJFSxhNL/1Lw0uX7L9P7mkfUE4ApihQPbXhrpo= Subject key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 647FC06D498B01A522955B1703E45718D772CF50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft caRepository: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Aug 2023 00:17:29 +0000 Certificate not after: Tue 13 Aug 2024 00:22:29 +0000 Subordinate resources: IP: 103.214.100.0/22 IP: 2404:c380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:c0:6d:49:8b:01:a5:22:95:5b:17:03:e4:57:18:d7:72:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 00:17:29 2023 GMT Not After : Aug 13 00:22:29 2024 GMT Subject: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:27:59:83:e1:6b:bd:7a:f9:19:ed:c4:fa: 6b:8b:e6:c5:d2:45:6c:84:0f:b7:a6:34:7c:95:55: a2:40:e5:b3:27:b0:14:76:ae:71:8b:a9:8e:86:75: 1a:87:34:b1:7d:61:93:4e:17:0d:7d:df:93:51:5f: 91:83:71:bc:5a:e1:95:95:42:6e:6b:15:c5:03:1e: 83:a7:4e:a9:fe:81:23:e8:64:0e:00:20:16:5b:61: a7:9c:18:dc:89:0e:ae:32:ce:b6:c7:bf:ac:24:08: 24:d1:8c:48:53:c1:15:a3:0a:6b:4e:4d:a4:b9:b6: 89:f0:4f:54:91:e0:4a:4d:76:3d:d5:2e:61:9e:51: 5e:30:98:4f:59:04:1b:99:af:84:28:5f:c8:17:61: 54:af:c2:ed:28:65:b2:9f:1c:13:e7:84:2e:6d:18: 48:f0:ce:04:d7:40:ff:ae:40:7c:0f:0a:9a:64:65: 4f:fa:87:d2:06:7f:93:44:a3:b8:d3:6b:2c:bb:7b: ce:ed:fa:9e:71:31:af:e1:e7:cd:d1:c5:5f:ae:54: 0a:d7:d1:2b:e4:b3:4c:08:4a:96:8b:cf:a0:a8:6a: 44:61:84:b0:4f:3d:52:af:a4:68:49:c8:5c:e0:c3: 13:7c:59:26:2a:3a:4e:72:03:8a:5b:5b:f1:48:c1: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.100.0/22 IPv6: 2404:c380::/32 Signature Algorithm: sha256WithRSAEncryption 2d:c0:86:e4:8c:46:9c:04:cb:8d:d9:bd:90:1c:74:e4:68:3f: a1:78:81:c5:50:e8:c7:52:20:9f:49:d4:31:2b:90:03:fd:0d: 0b:6a:ec:f2:4d:98:42:f7:5f:38:83:59:61:93:b9:a3:6b:ce: 0a:a1:58:54:33:d8:11:f3:90:54:9a:61:99:0b:9a:c3:e4:a2: 97:df:59:fe:43:9e:c9:da:5a:0d:5a:b6:ed:d8:fb:cc:92:df: c2:73:29:d4:a6:74:f0:3d:7e:62:b7:d0:46:85:86:2e:30:83: 9b:be:9f:63:5d:df:b2:53:b4:8f:cb:6a:63:ff:7a:de:30:ed: d7:96:be:5b:44:8e:bd:53:10:05:5f:06:23:be:6d:92:93:25: 66:36:58:51:37:9d:bb:eb:bf:c6:04:43:16:50:86:f4:6a:33: 0b:84:b2:9e:c6:a0:f6:8b:19:80:2c:70:a6:3a:e7:6e:df:fe: 93:ca:dd:32:d9:1b:74:d8:6d:23:31:3b:72:d4:88:44:20:7e: 62:08:7c:2b:8b:34:d4:c0:b8:5d:8d:cd:70:6f:a0:d9:fd:f0: 0c:f6:49:f2:82:83:46:70:e2:0d:0c:89:0f:e7:12:52:94:fb: 27:b8:24:76:31:54:9e:d8:3d:af:fb:01:84:65:52:c9:59:28: 3f:f4:06:f1 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUZH/AbUmLAaUilVsXA+RXGNdyz1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxNTAwMTcyOVoX DTI0MDgxMzAwMjIyOVowMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBG MEVGOTU5MDMzM0QzOEQwNDQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZJJ1mD4Wu9evkZ7cT6a4vmxdJFbIQPt6Y0fJVVokDlsyewFHaucYupjoZ1 Goc0sX1hk04XDX3fk1FfkYNxvFrhlZVCbmsVxQMeg6dOqf6BI+hkDgAgFlthp5wY 3IkOrjLOtse/rCQIJNGMSFPBFaMKa05NpLm2ifBPVJHgSk12PdUuYZ5RXjCYT1kE G5mvhChfyBdhVK/C7Shlsp8cE+eELm0YSPDOBNdA/65AfA8KmmRlT/qH0gZ/k0Sj uNNrLLt7zu36nnExr+HnzdHFX65UCtfRK+SzTAhKlovPoKhqRGGEsE89Uq+kaEnI XODDE3xZJio6TnIDiltb8UjBmacCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMrvfnZ8m8AHMDw75WQMz040EQQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZTUxODc1 LTUwODctNDI2NC1hOGJkLTQxNTZmNTViYWFhYi8wLzEzMkJCREY5RDlGMjZGMDAx Q0MwRjBFRjk1OTAzMzNEMzhEMDQ0MTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn1mQwDQQCAAIwBwMFACQEw4AwDQYJKoZIhvcNAQELBQADggEBAC3AhuSMRpwE y43ZvZAcdORoP6F4gcVQ6MdSIJ9J1DErkAP9DQtq7PJNmEL3XziDWWGTuaNrzgqh WFQz2BHzkFSaYZkLmsPkopffWf5DnsnaWg1atu3Y+8yS38JzKdSmdPA9fmK30EaF hi4wg5u+n2Nd37JTtI/LamP/et4w7deWvltEjr1TEAVfBiO+bZKTJWY2WFE3nbvr v8YEQxZQhvRqMwuEsp7GoPaLGYAscKY6527f/pPK3TLZG3TYbSMxO3LUiEQgfmII fCuLNNTAuF2NzXBvoNn98Az2SfKCg0Zw4g0MiQ/nElKU+ye4JHYxVJ7YPa/7AYRl UslZKD/0BvE= -----END CERTIFICATE-----Generated at Wed May 8 07:45:21 2024 by rpki-client on console-ams.rpki-client.org