$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer File: 139934661CE07BEBBFA824F7225502B15AE8B653.cer (raw, json) Hash identifier: HGLOTZ/Rfq3gwsh0M/79Na5OslG1a+8woAbAnfgRyHs= Subject key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5C683C9ED9E62B985701559007DB76C6E2773CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Dec 2023 17:08:36 +0000 Certificate not after: Thu 12 Dec 2024 17:13:36 +0000 Subordinate resources: IP: 103.179.218.0/23 IP: 2001:df0:54c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:68:3c:9e:d9:e6:2b:98:57:01:55:90:07:db:76:c6:e2:77:3c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 14 17:08:36 2023 GMT Not After : Dec 12 17:13:36 2024 GMT Subject: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:29:66:5a:1d:60:e2:8e:6a:18:a6:67:bb: af:64:21:26:18:7a:eb:0c:c8:fd:58:40:bd:23:21: 5f:45:28:af:f6:bc:1e:e2:eb:2c:59:9b:63:15:73: 49:ce:fd:1e:e3:9e:85:3c:23:15:4d:5b:5e:ae:4a: b6:3b:4c:0b:c4:b8:af:ad:14:4d:f6:d5:67:c9:2f: 3b:25:f1:0d:bc:b1:9c:a7:0c:29:f5:41:b7:f4:04: 32:0d:a1:8d:80:d9:f6:2c:3e:bf:be:f6:f2:ce:a0: 86:40:f9:23:71:eb:93:d2:35:9d:20:71:7e:95:14: 50:e4:7f:cd:03:be:79:9c:bb:a2:ab:57:2e:ef:24: f0:67:70:bb:29:e8:09:59:88:4b:9d:39:d9:0e:1c: e7:18:7e:49:4e:7d:be:00:6b:d3:1e:a0:a1:1c:93: e2:b5:33:95:ef:5b:d4:a2:b4:be:df:dd:68:16:d4: 99:d9:c3:b0:49:47:7f:ee:1a:14:33:42:55:41:75: 11:68:8e:16:f2:22:f7:0d:6f:80:14:9a:71:c5:82: 06:ff:30:17:15:43:6b:6c:b2:49:40:1c:20:67:71: 7a:7e:54:b8:fc:a1:19:15:e1:70:ac:af:30:5d:51: 9c:ea:88:96:a6:fa:e7:f9:c8:2c:88:68:1d:27:6d: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.218.0/23 IPv6: 2001:df0:54c0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:df:eb:96:e1:26:fb:14:d3:d9:36:e4:eb:b3:8b:98:21:c0: 14:d7:f7:d2:2b:e2:9e:3f:6c:d7:d1:ae:2b:75:4e:ae:e1:c8: f1:fc:98:3d:b6:80:0b:b5:ca:dc:e2:ed:2f:21:9d:3b:c7:70: 7d:f5:00:dd:42:34:f2:81:8d:95:a4:d1:ec:df:5e:18:fd:52: 72:95:1d:f7:5f:5d:14:47:f4:db:4b:21:24:a8:6c:95:99:b7: c2:9a:62:05:f1:0c:47:c9:8f:7c:40:20:7b:9e:1a:0d:76:cd: 42:53:f8:9e:ea:6e:eb:1c:12:dc:4b:7f:fc:3b:23:d5:72:1a: e2:1c:76:10:1b:bb:8c:2a:1a:5b:a8:d1:a0:19:c7:81:9f:4d: 32:84:a5:c5:0d:bf:82:43:ce:b7:9d:5e:b0:30:5b:40:15:a1: 9c:0e:e4:e2:05:67:7e:7e:92:b8:07:b4:6e:19:29:48:75:d9: 51:c3:d2:2e:02:38:7b:82:30:7b:c5:61:7b:23:9d:40:a3:6a: ae:db:79:a5:05:0d:f6:6e:db:b7:22:f3:b7:c4:d1:82:33:25: bb:9a:f4:cb:8a:10:ec:8d:31:af:21:74:21:63:4d:d8:cd:d3: 3c:be:d7:4f:05:97:9b:50:39:ed:8d:98:0c:5f:27:84:f3:5f: 8a:5b:88:75 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXGg8ntnmK5hXAVWQB9t2xuJ3PPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxNDE3MDgzNloX DTI0MTIxMjE3MTMzNlowMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgy NEY3MjI1NTAyQjE1QUU4QjY1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBPKWZaHWDijmoYpme7r2QhJhh66wzI/VhAvSMhX0Uor/a8HuLrLFmbYxVz Sc79HuOehTwjFU1bXq5KtjtMC8S4r60UTfbVZ8kvOyXxDbyxnKcMKfVBt/QEMg2h jYDZ9iw+v7728s6ghkD5I3Hrk9I1nSBxfpUUUOR/zQO+eZy7oqtXLu8k8Gdwuyno CVmIS5052Q4c5xh+SU59vgBr0x6goRyT4rUzle9b1KK0vt/daBbUmdnDsElHf+4a FDNCVUF1EWiOFvIi9w1vgBSaccWCBv8wFxVDa2yySUAcIGdxen5UuPyhGRXhcKyv MF1RnOqIlqb65/nILIhoHSdtl9cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBOZNGYc4Hvrv6gk9yJVArFa6LZTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xY2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjYTI5MmIy LTRhZTQtNDFkZi04ODdhLWMxNzJjM2UxYWU3My8wLzEzOTkzNDY2MUNFMDdCRUJC RkE4MjRGNzIyNTUwMkIxNUFFOEI2NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFns9owDwQCAAIwCQMHACABDfBUwDANBgkqhkiG9w0BAQsFAAOCAQEAj9/rluEm +xTT2Tbk67OLmCHAFNf30ivinj9s19GuK3VOruHI8fyYPbaAC7XK3OLtLyGdO8dw ffUA3UI08oGNlaTR7N9eGP1ScpUd919dFEf020shJKhslZm3wppiBfEMR8mPfEAg e54aDXbNQlP4nupu6xwS3Et//Dsj1XIa4hx2EBu7jCoaW6jRoBnHgZ9NMoSlxQ2/ gkPOt51esDBbQBWhnA7k4gVnfn6SuAe0bhkpSHXZUcPSLgI4e4Iwe8VheyOdQKNq rtt5pQUN9m7btyLzt8TRgjMlu5r0y4oQ7I0xryF0IWNN2M3TPL7XTwWXm1A57Y2Y DF8nhPNfiluIdQ== -----END CERTIFICATE-----Generated at Wed May 8 14:59:49 2024 by rpki-client on console-ams.rpki-client.org