$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer (raw, json) Hash identifier: YAALzb0fZbqb0lS6GQIjX84OZ3esZVXUXBAYBPJ83rQ= Subject key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 021951B7077876F943C5981CEBF9C31ACAB8F40E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Oct 2023 13:19:11 +0000 Certificate not after: Fri 04 Oct 2024 13:24:11 +0000 Subordinate resources: IP: 103.182.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:19:51:b7:07:78:76:f9:43:c5:98:1c:eb:f9:c3:1a:ca:b8:f4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 6 13:19:11 2023 GMT Not After : Oct 4 13:24:11 2024 GMT Subject: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:cd:d6:2c:eb:a6:a7:c2:50:9b:de:84:27: 69:7f:06:15:91:39:67:af:9a:c5:ee:11:33:a0:36: e8:8b:59:49:9b:d5:a5:9b:a7:5c:df:b6:cf:a3:5f: 93:b4:3f:0c:01:f6:b2:7b:da:94:2d:dc:f2:67:9f: 7e:6c:8e:4e:d5:16:ba:97:90:7e:bd:b1:c8:ff:d7: 03:90:32:bd:d4:34:bf:dc:64:87:9f:b5:53:2b:36: 95:76:ce:48:99:04:40:78:78:63:77:f1:f4:d9:c9: fe:83:a7:c1:b3:64:0c:32:22:11:5c:e0:c6:eb:33: e5:f5:2d:85:97:91:f6:4a:a2:ab:23:ab:7c:a9:4e: 24:71:41:28:cb:de:de:f6:b3:f3:1d:08:b9:d7:ee: bb:45:87:66:66:a1:5b:7c:58:bb:03:9f:61:f1:a3: d5:da:08:60:ea:a7:51:e9:6b:15:47:e8:1c:51:c1: 54:97:aa:a6:70:97:10:37:7b:9e:ae:35:93:7e:68: 15:fc:a3:bd:bb:51:52:51:e0:56:f3:ed:5d:2f:b2: 54:60:49:c5:1d:9f:05:ac:71:b8:c7:d6:2b:fd:88: 80:4b:f2:88:ed:8a:b5:91:eb:92:2c:c8:84:e6:72: db:0a:20:9a:6b:21:38:0a:d2:79:77:c5:b5:25:a0: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.80.0/23 Signature Algorithm: sha256WithRSAEncryption 68:fe:7a:3c:40:99:83:88:9d:72:1e:91:da:cd:c8:3a:68:2c: 58:23:75:c7:a5:c8:6a:9e:4a:c8:b2:13:b8:f0:9f:b3:7e:de: f6:7e:b0:a2:d1:02:73:ab:4f:31:7f:21:48:62:15:ad:64:05: ce:1c:6b:83:8c:ed:da:03:97:b3:90:9c:a1:c4:b5:4e:a3:6b: 30:5e:17:3f:27:80:bd:5a:40:20:73:89:f1:23:06:5d:ce:bc: 1c:73:99:eb:02:05:e8:0b:64:32:bf:09:1f:37:96:00:d2:1c: 07:44:6e:1b:17:ba:61:27:4c:82:64:9c:b0:19:de:f1:93:b3: 0a:85:d2:d6:b8:dc:49:c4:df:34:07:81:a9:8f:27:dc:0a:24: a9:d4:22:d8:3d:31:a3:29:2b:76:38:23:53:cb:a0:b2:7f:14: 20:ab:73:a9:24:e7:6b:e6:3c:ff:12:b8:68:88:69:c8:1f:d4: 92:2f:90:22:b9:a4:7f:bb:c2:26:95:cd:17:40:09:63:dd:16: 5e:03:ff:29:ca:e2:33:97:64:24:b7:54:fb:a2:5d:12:6c:5a: ff:a4:38:5e:5e:54:0d:b0:d1:d1:54:b9:4a:c6:f5:69:cb:e5: 0d:d2:00:d9:46:0d:89:39:4c:8c:3e:3a:30:c6:8a:9f:91:53: 9b:45:d6:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAhlRtwd4dvlDxZgc6/nDGsq49A4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwNjEzMTkxMVoX DTI0MTAwNDEzMjQxMVowMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1 QzdDRjFCN0NCN0E3NTc5QUQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd5zdYs66anwlCb3oQnaX8GFZE5Z6+axe4RM6A26ItZSZvVpZunXN+2z6Nf k7Q/DAH2snvalC3c8meffmyOTtUWupeQfr2xyP/XA5AyvdQ0v9xkh5+1Uys2lXbO SJkEQHh4Y3fx9NnJ/oOnwbNkDDIiEVzgxusz5fUthZeR9kqiqyOrfKlOJHFBKMve 3vaz8x0Iudfuu0WHZmahW3xYuwOfYfGj1doIYOqnUelrFUfoHFHBVJeqpnCXEDd7 nq41k35oFfyjvbtRUlHgVvPtXS+yVGBJxR2fBaxxuMfWK/2IgEvyiO2KtZHrkizI hOZy2wogmmshOArSeXfFtSWggtcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBSd8ZkSGYsseaVcfPG3y3p1ea1RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNTBiYWM0 LWE2YTctNDU2Yy04NTBmLTYwZGNkZTY3YjQ5OS8wLzE0OURGMTk5MTIxOThCMkM3 OUE1NUM3Q0YxQjdDQjdBNzU3OUFENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntlAwDQYJKoZIhvcNAQELBQADggEBAGj+ejxAmYOInXIekdrNyDpoLFgjdcel yGqeSsiyE7jwn7N+3vZ+sKLRAnOrTzF/IUhiFa1kBc4ca4OM7doDl7OQnKHEtU6j azBeFz8ngL1aQCBzifEjBl3OvBxzmesCBegLZDK/CR83lgDSHAdEbhsXumEnTIJk nLAZ3vGTswqF0ta43EnE3zQHgamPJ9wKJKnUItg9MaMpK3Y4I1PLoLJ/FCCrc6kk 52vmPP8SuGiIacgf1JIvkCK5pH+7wiaVzRdACWPdFl4D/ynK4jOXZCS3VPuiXRJs Wv+kOF5eVA2w0dFUuUrG9WnL5Q3SANlGDYk5TIw+OjDGip+RU5tF1uI= -----END CERTIFICATE-----Generated at Wed May 8 10:06:45 2024 by rpki-client on console-ams.rpki-client.org