$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer (raw, json) Hash identifier: k1zXAtcBIqkJCW2CozrAKTuh7pBkr5fg3UXiXV7NT+w= Subject key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 18BFC253EA37489EDACBA0ABDFD22FBE3DAA0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft caRepository: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 23:04:31 +0000 Certificate not after: Wed 19 Mar 2025 23:09:31 +0000 Subordinate resources: IP: 103.144.46.0/23 IP: 2405:6640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bf:c2:53:ea:37:48:9e:da:cb:a0:ab:df:d2:2f:be:3d:aa:0d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 23:04:31 2024 GMT Not After : Mar 19 23:09:31 2025 GMT Subject: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:64:e7:3c:00:37:f2:d9:ec:d9:86:5e:fc: e8:e0:e0:8a:18:56:70:3a:cd:8b:47:13:34:38:9d: 90:8a:54:21:da:c7:d3:04:04:ea:81:8d:2f:53:67: f6:ff:94:31:3d:d1:a9:53:7f:7c:38:ee:c2:b5:41: 00:8b:f4:7a:ea:e7:ce:af:6a:e5:4d:7c:60:98:c6: 80:87:18:40:13:b8:af:06:85:9d:73:96:ac:29:ec: 38:dc:c5:90:d6:6d:1a:34:a0:1b:73:04:a8:57:8d: 17:98:ff:03:fd:a7:2b:ff:8e:02:11:06:cb:30:19: 4b:c2:b0:41:e2:5e:18:bd:23:a7:50:df:bb:ed:37: dd:82:2b:c5:47:fd:0d:0a:f9:6b:b3:d9:df:6d:0a: d4:05:42:af:50:5d:fb:18:ee:cf:20:f8:f6:44:3a: 51:d3:e1:82:c5:f3:3a:77:4b:24:e2:fe:dd:ea:ec: 5c:21:d1:23:b0:6d:f0:8c:df:7b:69:23:24:1d:d6: 21:7a:cd:19:23:d8:f2:6f:ca:4f:c6:0e:02:d8:bf: df:0b:0c:75:6e:c5:cb:f3:6f:a7:61:2b:26:56:3d: d2:04:1d:83:79:a1:02:69:bc:6f:9e:ce:65:e7:10: 20:33:f7:9e:c7:38:1d:d9:0e:0c:a0:22:19:d9:20: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.46.0/23 IPv6: 2405:6640::/32 Signature Algorithm: sha256WithRSAEncryption 7f:e9:64:5e:14:16:c9:97:0c:3a:8e:03:7e:cc:50:dc:2a:82: aa:a8:79:8f:41:bf:31:53:3a:58:3e:06:19:c9:8a:b7:9e:0a: 38:0f:e2:02:0b:9e:a2:82:89:ff:a9:fd:cc:af:59:b1:9b:19: 56:88:76:c6:4a:9d:f8:5d:9c:a8:2c:37:44:20:4d:8b:b1:78: 29:79:1d:14:f8:37:36:09:0d:e5:2a:f4:ef:aa:41:6a:53:8a: 7d:ac:ce:3c:a3:3c:30:8e:e0:5a:5b:a1:e2:2b:16:51:f6:27: 78:f5:da:30:58:64:50:fe:4c:a1:1d:07:42:17:ab:85:3f:9f: c9:72:11:ec:3b:24:93:f5:94:6f:d4:f0:f0:42:ff:cc:85:3f: b8:11:2b:30:fe:26:f5:19:5e:36:36:be:34:fa:bc:4f:cb:cf: cc:1c:3f:8c:75:17:83:12:a4:e7:5d:d6:d7:b5:30:aa:82:b7: eb:75:26:3f:17:e8:27:fb:21:2e:8e:b0:a8:77:e6:af:b6:06: e1:a4:66:ea:37:45:73:2a:2f:37:27:81:bc:1e:90:f3:f6:46: af:a1:99:c0:b5:18:4d:78:bb:99:0c:9d:fa:be:e6:fe:89:e7: 6a:08:cb:87:a3:0f:1f:58:d8:69:9d:1b:4a:83:14:13:08:f3: 2f:af:a7:5b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUGL/CU+o3SJ7ay6Cr39Ivvj2qDWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMDIzMDQzMVoX DTI1MDMxOTIzMDkzMVowMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVG NThCMkE5Q0Q4RDU2NkE1MUZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcnZOc8ADfy2ezZhl786ODgihhWcDrNi0cTNDidkIpUIdrH0wQE6oGNL1Nn 9v+UMT3RqVN/fDjuwrVBAIv0eurnzq9q5U18YJjGgIcYQBO4rwaFnXOWrCnsONzF kNZtGjSgG3MEqFeNF5j/A/2nK/+OAhEGyzAZS8KwQeJeGL0jp1Dfu+033YIrxUf9 DQr5a7PZ320K1AVCr1Bd+xjuzyD49kQ6UdPhgsXzOndLJOL+3ersXCHRI7Bt8Izf e2kjJB3WIXrNGSPY8m/KT8YOAti/3wsMdW7Fy/Nvp2ErJlY90gQdg3mhAmm8b57O ZecQIDP3nsc4HdkODKAiGdkgq3sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBTIy5f9OBGQOS71iyqc2NVmpR/WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkYWVjNjZj LTllMWQtNDMyMS1iMDY5LWVlYWI0NzkzYTAwYi8wLzE0QzhDQjk3RkQzODExOTAz OTJFRjU4QjJBOUNEOEQ1NjZBNTFGRDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkC4wDQQCAAIwBwMFACQFZkAwDQYJKoZIhvcNAQELBQADggEBAH/pZF4UFsmX DDqOA37MUNwqgqqoeY9BvzFTOlg+BhnJireeCjgP4gILnqKCif+p/cyvWbGbGVaI dsZKnfhdnKgsN0QgTYuxeCl5HRT4NzYJDeUq9O+qQWpTin2szjyjPDCO4FpboeIr FlH2J3j12jBYZFD+TKEdB0IXq4U/n8lyEew7JJP1lG/U8PBC/8yFP7gRKzD+JvUZ XjY2vjT6vE/Lz8wcP4x1F4MSpOdd1te1MKqCt+t1Jj8X6Cf7IS6OsKh35q+2BuGk Zuo3RXMqLzcngbwekPP2Rq+hmcC1GE14u5kMnfq+5v6J52oIy4ejDx9Y2GmdG0qD FBMI8y+vp1s= -----END CERTIFICATE-----Generated at Wed May 8 10:06:45 2024 by rpki-client on console-ams.rpki-client.org