$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer (raw, json) Hash identifier: XrWFgh1XK07S6NvYzBEoiPXL2ZPS5CTYA15E2sfzByc= Subject key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26F0C2C900212A64444D8204783FAFADEBDEE26F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft caRepository: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Mar 2024 16:44:43 +0000 Certificate not after: Thu 13 Mar 2025 16:49:43 +0000 Subordinate resources: IP: 103.167.132.0/23 IP: 2407:6f40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f0:c2:c9:00:21:2a:64:44:4d:82:04:78:3f:af:ad:eb:de:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 16:44:43 2024 GMT Not After : Mar 13 16:49:43 2025 GMT Subject: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:db:11:d4:be:39:e9:1d:57:15:0c:08:b7: 64:20:16:45:4c:36:51:39:78:ad:04:b9:63:fe:ad: 50:a7:80:54:97:b5:36:4b:fc:08:d4:06:43:89:9a: 25:9e:a3:3b:2e:e1:61:16:2d:ff:c8:3e:fb:3b:43: 80:dd:8b:5d:e3:04:7c:6c:7b:ac:4a:0e:64:f9:9d: ba:a5:d0:9d:24:81:e5:c4:20:fa:f5:13:49:47:07: 39:c6:cc:e7:1e:50:d2:70:3b:7e:ee:5b:de:91:77: a4:47:99:99:88:d9:31:f2:3d:33:cd:44:e5:6b:7e: 57:06:7e:34:ff:f4:a8:9a:a1:37:50:86:43:26:1d: 34:ef:e2:b4:92:68:58:f1:cc:7b:b1:46:c1:9f:56: ed:ac:b5:b6:93:97:cd:8e:72:27:ea:f4:2f:f5:eb: ad:dd:22:7f:bd:28:50:49:c3:e3:9f:cf:ed:8e:a2: 35:bc:34:b0:6f:b1:40:13:a5:83:d5:e4:eb:1d:f4: f1:78:0e:5c:98:02:fb:ab:81:1d:94:6c:c8:ca:0a: a1:4f:bb:8b:44:9f:4c:b6:f2:a3:95:ca:9c:43:74: c7:2e:c5:62:33:10:8b:c0:71:24:db:73:77:80:3a: c9:ba:64:7d:1b:b8:4a:f2:11:98:5c:7f:cf:d6:fc: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.132.0/23 IPv6: 2407:6f40::/32 Signature Algorithm: sha256WithRSAEncryption 31:ff:01:36:12:7c:0a:0b:f5:1a:c0:67:84:a5:ac:80:d5:10: a1:06:52:1a:18:d6:6d:3a:67:ed:fe:ec:4e:cf:ea:bc:b5:2c: 0c:eb:e3:7c:ef:73:f8:76:c6:f9:a1:d4:89:db:5e:cd:b5:b7: da:91:8d:eb:80:c5:b5:26:9b:35:67:2f:9a:3e:f2:7c:7b:7c: 99:0d:14:0c:58:61:2c:7c:81:8b:6f:81:7e:d8:13:6e:3a:7a: 0f:89:b5:c3:80:f9:d7:4a:de:c0:df:c8:2d:f7:ad:ea:e3:d9: 38:d2:81:62:57:59:f2:1e:c9:bb:2b:fd:f7:18:58:14:02:94: e0:5a:99:20:ef:04:9b:5a:f2:b9:c3:2c:16:9e:d2:83:aa:f3: 12:c9:47:bd:fd:02:fe:0f:2c:85:cb:f2:2c:ce:b5:e4:0a:a3: d4:30:77:a5:94:d7:27:47:91:dc:26:f1:db:8d:95:a7:d7:9f: ad:02:76:17:06:13:c6:e2:44:65:a2:89:6d:80:26:3e:d0:c8: 33:cb:52:69:ce:bc:5d:e4:76:c5:f9:c7:60:a9:f4:a1:a8:14: c0:fc:8c:8d:1f:f1:4d:97:6d:44:1a:ca:1e:13:31:d5:5c:c8: e8:da:70:50:e1:55:e9:fc:37:50:7e:98:6c:ca:f0:3b:e5:8c: 76:4e:a1:22 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJvDCyQAhKmRETYIEeD+vreve4m8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNDE2NDQ0M1oX DTI1MDMxMzE2NDk0M1owMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2 RDVEQjdDODlEMDgyRTFBOTBDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlB2xHUvjnpHVcVDAi3ZCAWRUw2UTl4rQS5Y/6tUKeAVJe1Nkv8CNQGQ4ma JZ6jOy7hYRYt/8g++ztDgN2LXeMEfGx7rEoOZPmduqXQnSSB5cQg+vUTSUcHOcbM 5x5Q0nA7fu5b3pF3pEeZmYjZMfI9M81E5Wt+VwZ+NP/0qJqhN1CGQyYdNO/itJJo WPHMe7FGwZ9W7ay1tpOXzY5yJ+r0L/Xrrd0if70oUEnD45/P7Y6iNbw0sG+xQBOl g9Xk6x308XgOXJgC+6uBHZRsyMoKoU+7i0SfTLbyo5XKnEN0xy7FYjMQi8BxJNtz d4A6ybpkfRu4SvIRmFx/z9b8CnsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBUat1TY1fFx/mNtXbfInQguGpDOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZDQ3MjAy LWRlNjAtNDdmMy1hMmE3LTYwOGE3NGExZTg3NC8wLzE1MUFCNzU0RDhENUYxNzFG RTYzNkQ1REI3Qzg5RDA4MkUxQTkwQ0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnp4QwDQQCAAIwBwMFACQHb0AwDQYJKoZIhvcNAQELBQADggEBADH/ATYSfAoL 9RrAZ4SlrIDVEKEGUhoY1m06Z+3+7E7P6ry1LAzr43zvc/h2xvmh1InbXs21t9qR jeuAxbUmmzVnL5o+8nx7fJkNFAxYYSx8gYtvgX7YE246eg+JtcOA+ddK3sDfyC33 rerj2TjSgWJXWfIeybsr/fcYWBQClOBamSDvBJta8rnDLBae0oOq8xLJR739Av4P LIXL8izOteQKo9Qwd6WU1ydHkdwm8duNlafXn60CdhcGE8biRGWiiW2AJj7QyDPL UmnOvF3kdsX5x2Cp9KGoFMD8jI0f8U2XbUQayh4TMdVcyOjacFDhVen8N1B+mGzK 8DvljHZOoSI= -----END CERTIFICATE-----Generated at Wed May 8 09:50:25 2024 by rpki-client on console-fra.rpki-client.org