$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.cer (raw, json) Hash identifier: NZj5F6my+kl9stIKMfa0NMnFQhMKY8bAf6hxP1GYvBs= Subject key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 482B5AFFCF56BB23C628ADF8F2331F3EDA1A4AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft caRepository: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Sep 2024 20:49:39 +0000 Certificate not after: Fri 19 Sep 2025 20:54:39 +0000 Subordinate resources: IP: 103.122.64.0/22 IP: 2403:8c40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 05:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:5a:ff:cf:56:bb:23:c6:28:ad:f8:f2:33:1f:3e:da:1a:4a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 20:49:39 2024 GMT Not After : Sep 19 20:54:39 2025 GMT Subject: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:cd:47:37:f2:b2:44:49:5d:4d:eb:12:95: 5f:70:42:73:06:c0:e6:40:0a:3c:4a:08:76:7a:e3: 5a:81:2e:4d:dc:17:12:c3:bb:02:f4:a5:5e:2d:e4: 08:9b:f6:88:42:94:00:f3:10:d7:d8:2c:cc:d4:fc: c4:05:c4:37:2c:ee:90:78:25:4d:fc:71:8e:c6:38: dc:23:7a:67:ee:e1:53:2c:51:81:a9:58:31:2b:fc: 86:e0:3d:9a:c0:17:6c:ec:78:ea:8f:f8:b0:7d:79: 4f:2a:61:13:05:38:80:de:c8:97:17:14:ca:a2:b6: 91:81:e9:b4:3d:fc:5d:2a:33:50:a5:7b:7f:75:14: df:31:e1:87:ec:53:30:ae:6c:3e:f8:93:66:57:5b: cb:5d:50:06:40:32:04:03:3f:7d:c7:85:cc:cc:ed: 90:8d:38:fd:d1:ae:92:39:c6:4c:96:67:2a:b0:d0: 83:85:e7:a4:07:7f:87:80:fd:af:4e:bd:0b:84:ec: ee:38:0a:f7:bb:eb:3d:c0:a8:1d:90:27:58:c1:fe: d4:7f:cb:be:97:e4:42:bd:8f:db:5b:dd:24:fc:16: a4:b4:bf:13:49:2e:d4:44:7f:ea:d1:72:47:9a:7c: 84:5f:76:ff:56:6b:4b:6f:cb:c8:af:06:50:bd:39: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.64.0/22 IPv6: 2403:8c40::/32 Signature Algorithm: sha256WithRSAEncryption 06:ea:53:7b:e9:04:8d:33:39:25:32:02:7c:ed:48:44:07:da: 43:5f:5b:a8:78:12:5f:cb:07:cf:a0:b9:b6:bf:d3:eb:84:83: 1f:c8:cc:a2:4f:29:cc:05:3f:92:3f:97:fd:c4:cd:6b:aa:a0: dc:e6:cf:46:1c:86:f3:03:fb:08:70:84:03:dc:f9:be:38:ae: 63:73:d2:25:b0:d3:ef:3a:d7:cd:28:4b:40:2b:af:e8:39:1f: 10:e0:43:6e:da:a7:9c:a3:b2:3d:85:ea:f6:bc:51:ff:b6:88: af:aa:5e:3a:5d:03:f1:ee:d6:21:0e:37:b2:3e:a8:85:58:e1: 98:39:f7:a1:6a:9c:a7:98:2a:2c:4a:c5:49:fa:ad:be:75:00: a0:af:4c:8b:ab:8d:d7:b6:5a:98:85:22:7e:36:14:75:5f:5b: 33:70:5f:6b:d3:b3:b8:81:d4:3a:de:3e:59:60:e1:34:68:b2: 13:37:b6:f9:5a:bf:f3:b3:6e:25:23:e9:97:88:5b:43:df:71: 20:52:a9:aa:7e:53:82:09:58:a0:e0:e4:73:9c:d8:91:f3:fb: 70:37:b1:7f:f0:71:f3:2e:09:b6:2c:4c:a2:af:93:48:10:0c: ff:3c:d1:9a:9b:4c:30:93:40:5f:43:f8:8f:24:10:7f:e6:b5: f0:d5:94:13 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSCta/89WuyPGKK348jMfPtoaSqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMDIwNDkzOVoX DTI1MDkxOTIwNTQzOVowMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2 RTAzMkQ3NjlFNTJBQjg5Q0M3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeWzUc38rJESV1N6xKVX3BCcwbA5kAKPEoIdnrjWoEuTdwXEsO7AvSlXi3k CJv2iEKUAPMQ19gszNT8xAXENyzukHglTfxxjsY43CN6Z+7hUyxRgalYMSv8huA9 msAXbOx46o/4sH15TyphEwU4gN7IlxcUyqK2kYHptD38XSozUKV7f3UU3zHhh+xT MK5sPviTZldby11QBkAyBAM/fceFzMztkI04/dGukjnGTJZnKrDQg4XnpAd/h4D9 r069C4Ts7jgK97vrPcCoHZAnWMH+1H/LvpfkQr2P21vdJPwWpLS/E0ku1ER/6tFy R5p8hF92/1ZrS2/LyK8GUL05RrcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBSjn6VBDqV+DUFuAy12nlKricx1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwZDlhMjk2 LTgyMjgtNDM4Ni04ZmU5LTk3YWEzMDkxZGUwZC8wLzE0QTM5RkE1NDEwRUE1N0Uw RDQxNkUwMzJENzY5RTUyQUI4OUNDNzUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnekAwDQQCAAIwBwMFACQDjEAwDQYJKoZIhvcNAQELBQADggEBAAbqU3vpBI0z OSUyAnztSEQH2kNfW6h4El/LB8+guba/0+uEgx/IzKJPKcwFP5I/l/3EzWuqoNzm z0YchvMD+whwhAPc+b44rmNz0iWw0+86180oS0Arr+g5HxDgQ27ap5yjsj2F6va8 Uf+2iK+qXjpdA/Hu1iEON7I+qIVY4Zg596FqnKeYKixKxUn6rb51AKCvTIurjde2 WpiFIn42FHVfWzNwX2vTs7iB1DrePllg4TRoshM3tvlav/OzbiUj6ZeIW0PfcSBS qap+U4IJWKDg5HOc2JHz+3A3sX/wcfMuCbYsTKKvk0gQDP880ZqbTDCTQF9D+I8k EH/mtfDVlBM= -----END CERTIFICATE-----Generated at Fri Sep 20 23:00:49 2024 by rpki-client on console-ams.rpki-client.org