$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer (raw, json) Hash identifier: iwLI1YmsbJTSDnCz+hf4BCA6ey2Z3bAUdwsJQ33H/z4= Subject key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 425F7FAA82684FF81E64FE97F233170C7C2D0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft caRepository: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Mar 2024 16:27:43 +0000 Certificate not after: Fri 28 Feb 2025 16:32:43 +0000 Subordinate resources: IP: 103.196.15.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5f:7f:aa:82:68:4f:f8:1e:64:fe:97:f2:33:17:0c:7c:2d:05:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 16:27:43 2024 GMT Not After : Feb 28 16:32:43 2025 GMT Subject: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:f5:22:ce:e2:f3:cb:ee:ae:14:a6:2a:cb: 74:72:ce:5e:24:e3:90:bb:51:51:b7:65:c4:23:80: 48:e7:a1:56:a4:3c:d4:aa:5c:09:25:ab:9b:10:2f: fd:cb:04:da:5a:ea:27:1f:33:fe:60:5c:aa:4e:db: 2b:4f:86:83:d7:59:98:d2:43:86:46:6a:53:3a:bd: 9e:fb:7d:55:93:f3:92:7a:da:53:8e:62:00:0a:ac: 57:f3:54:43:4d:87:5c:65:5f:1b:ad:77:65:2d:c2: 35:84:7a:1a:4e:45:42:19:ca:fc:18:c3:d0:fe:2c: fe:c9:fe:61:89:53:1e:31:f6:35:d4:7d:2e:13:f1: ab:1a:11:78:cc:17:60:01:61:94:7e:2d:07:20:dd: 9f:2b:99:27:41:4d:2d:9f:7b:ea:80:21:a3:31:27: 8f:95:e8:00:52:23:e1:82:06:8e:1f:bf:24:88:70: 46:a9:27:ac:48:5a:b4:28:cc:af:e4:bf:aa:2f:ac: 74:9b:d0:3f:64:57:8e:35:13:f9:eb:3d:d6:d0:fa: 21:0e:e1:f6:09:68:fa:2c:44:f1:b7:04:8b:8b:85: 9f:53:c8:d1:d3:64:e2:de:6d:18:03:64:05:55:95: f3:34:91:a4:29:86:7e:be:62:ad:2a:52:d8:6e:27: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.15.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:75:66:2d:ef:c7:f9:af:3f:db:f4:29:c5:c3:94:fa:92:fc: 60:f3:f6:67:db:48:db:76:8a:b0:57:ee:9d:40:69:f5:fa:be: dc:76:44:a3:72:da:f6:91:15:ad:dd:8d:5a:f4:d1:93:da:c6: 4f:39:79:28:e6:d8:5d:8e:66:40:9e:31:ce:cf:97:e4:25:00: a4:b8:fe:74:36:fe:48:a4:d6:e4:25:9d:6e:e1:e9:f2:5a:66: 65:a7:b9:92:2a:a6:d9:e6:62:91:94:f4:10:af:4f:d1:5f:e7: 81:66:97:92:1b:30:29:47:61:c4:0c:22:8a:61:39:6c:ff:c3: da:bf:0e:00:07:ef:af:49:8a:6f:7e:6f:62:ea:11:71:09:84: 70:50:b4:4a:fa:ac:27:85:20:e5:0a:2b:d7:6e:4b:c6:d6:6c: d4:2b:ee:28:63:5f:a2:3a:58:e0:ae:19:c4:55:0b:0c:d9:5f: b0:94:4c:17:6f:9a:1e:e3:95:28:51:fd:50:97:fa:10:0b:32: a0:5e:30:dd:b0:80:29:d0:e9:01:31:66:d2:93:d0:52:8d:73: f6:09:cf:6b:29:11:ff:90:fa:68:35:c5:c0:7c:91:0e:f7:61: 10:f2:3f:d7:11:d6:12:af:2a:04:c4:48:51:91:fc:8b:02:55: c2:47:3b:a7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQl9/qoJoT/geZP6X8jMXDHwtBYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwMTE2Mjc0M1oX DTI1MDIyODE2MzI0M1owMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJF QTE0REJGOUI4QUZGNDZDOEE4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU29SLO4vPL7q4UpirLdHLOXiTjkLtRUbdlxCOASOehVqQ81KpcCSWrmxAv /csE2lrqJx8z/mBcqk7bK0+Gg9dZmNJDhkZqUzq9nvt9VZPzknraU45iAAqsV/NU Q02HXGVfG613ZS3CNYR6Gk5FQhnK/BjD0P4s/sn+YYlTHjH2NdR9LhPxqxoReMwX YAFhlH4tByDdnyuZJ0FNLZ976oAhozEnj5XoAFIj4YIGjh+/JIhwRqknrEhatCjM r+S/qi+sdJvQP2RXjjUT+es91tD6IQ7h9glo+ixE8bcEi4uFn1PI0dNk4t5tGANk BVWV8zSRpCmGfr5irSpS2G4n5VsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBNPrfUPMGphxNvqFNv5uK/0bIqFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MDIzNGZl LWE3MTUtNDNlNS04YWE0LWQ5NzljZDM1N2QzOS8wLzEzNEZBREY1MEYzMDZBNjFD NERCRUExNERCRjlCOEFGRjQ2QzhBODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnxA8wDQYJKoZIhvcNAQELBQADggEBAD11Zi3vx/mvP9v0KcXDlPqS/GDz9mfb SNt2irBX7p1AafX6vtx2RKNy2vaRFa3djVr00ZPaxk85eSjm2F2OZkCeMc7Pl+Ql AKS4/nQ2/kik1uQlnW7h6fJaZmWnuZIqptnmYpGU9BCvT9Ff54Fml5IbMClHYcQM IophOWz/w9q/DgAH769Jim9+b2LqEXEJhHBQtEr6rCeFIOUKK9duS8bWbNQr7ihj X6I6WOCuGcRVCwzZX7CUTBdvmh7jlShR/VCX+hALMqBeMN2wgCnQ6QExZtKT0FKN c/YJz2spEf+Q+mg1xcB8kQ73YRDyP9cR1hKvKgTESFGR/IsCVcJHO6c= -----END CERTIFICATE-----Generated at Wed May 8 17:45:15 2024 by rpki-client on console-ams.rpki-client.org