$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer (raw, json) Hash identifier: H51fMkzig/gEjI0qd2Da8U5cULnzjkx0JqUhk2YuLIM= Subject key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29356CEE5B83BB8FB4218D2872AB36AC104DFF65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft caRepository: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 Jun 2023 10:16:46 +0000 Certificate not after: Tue 11 Jun 2024 10:21:46 +0000 Subordinate resources: IP: 103.205.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:35:6c:ee:5b:83:bb:8f:b4:21:8d:28:72:ab:36:ac:10:4d:ff:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 13 10:16:46 2023 GMT Not After : Jun 11 10:21:46 2024 GMT Subject: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:fd:4a:63:16:3c:ac:a8:bc:1b:be:31:8d: 33:bb:3a:36:7e:60:1f:b4:fa:2e:03:7f:4a:96:db: f9:57:41:0d:63:9d:95:88:fc:67:24:28:35:df:67: 47:ce:81:a4:18:30:6e:bd:5a:d3:4f:1d:63:77:7a: b7:d6:66:14:0c:0a:05:04:90:4b:8b:e7:cb:77:8f: 59:e6:99:79:47:45:68:0c:20:cd:b7:78:29:f2:90: 8e:6b:54:02:33:e4:54:fd:56:5f:c2:ac:49:62:f6: be:43:72:52:b3:65:00:1b:a2:16:78:ee:9b:80:01: 19:e3:02:61:8d:8a:c5:99:e7:01:c4:e1:70:d1:a4: 6d:76:08:de:19:77:c5:ef:32:60:2a:86:32:c9:0a: 67:56:2e:f4:b8:17:20:e7:ec:64:0a:af:37:87:5d: d9:c7:28:c4:f5:ff:e7:10:c7:16:88:85:07:ad:9c: cc:77:88:6c:27:b3:82:ef:b3:63:fb:f2:ef:c5:2a: 3d:94:ea:1a:2d:21:1b:24:cd:15:b2:5b:43:26:94: 19:88:70:17:85:59:19:31:8d:91:57:a1:0a:69:91: 69:8c:0a:74:3f:cb:af:2c:9a:da:b3:39:fd:a9:3e: 33:6a:98:4c:15:a4:02:1f:9e:74:19:fe:4f:ac:78: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.56.0/23 Signature Algorithm: sha256WithRSAEncryption 96:d9:11:65:25:7a:9d:8d:21:53:9b:e7:d7:f9:6b:78:bd:af: 1e:1e:0d:5d:21:ed:c2:a5:c0:14:66:71:24:6b:20:17:12:34: 39:59:f8:f1:43:18:74:d9:cd:40:6c:30:21:87:ca:5b:ac:9c: 2e:58:c9:fa:32:e9:77:f5:69:7b:53:f2:af:c5:30:8d:b0:1d: 9b:49:b2:38:72:87:d7:35:63:64:32:0e:ad:59:c4:0a:81:dd: 91:2d:06:40:0f:e6:da:65:ff:28:91:67:4d:a1:db:d8:c1:49: 26:9a:26:ea:30:9e:49:ff:1b:d7:28:d6:d0:1c:85:1a:86:b3: 79:f4:ff:73:7c:25:63:c0:4d:4a:1e:1b:da:a6:2c:c1:63:2a: 0a:f3:c3:dc:0e:7f:6d:f0:3a:f0:a0:ad:c4:df:63:52:44:67: 2b:10:f9:f5:81:2a:f8:8e:f3:64:a8:f3:2e:a2:6c:4b:90:c1: 6a:2c:55:0e:da:db:72:4a:9c:91:23:7c:b9:a4:ce:ac:c2:12: 55:89:53:36:a9:ee:1b:f6:60:b2:ff:43:78:5f:dc:65:ec:a7: 65:06:c7:63:63:f6:86:dd:e2:7a:82:39:79:31:af:47:ff:ac: 35:ae:e9:f9:87:8f:4d:ee:c0:d0:53:54:68:34:17:bc:0f:a0: e1:00:69:03 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKTVs7luDu4+0IY0ocqs2rBBN/2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYxMzEwMTY0NloX DTI0MDYxMTEwMjE0NlowMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJE Qjc3MDBBMzNGODg2QUNEODcxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmk/UpjFjysqLwbvjGNM7s6Nn5gH7T6LgN/Spbb+VdBDWOdlYj8ZyQoNd9n R86BpBgwbr1a008dY3d6t9ZmFAwKBQSQS4vny3ePWeaZeUdFaAwgzbd4KfKQjmtU AjPkVP1WX8KsSWL2vkNyUrNlABuiFnjum4ABGeMCYY2KxZnnAcThcNGkbXYI3hl3 xe8yYCqGMskKZ1Yu9LgXIOfsZAqvN4dd2ccoxPX/5xDHFoiFB62czHeIbCezgu+z Y/vy78UqPZTqGi0hGyTNFbJbQyaUGYhwF4VZGTGNkVehCmmRaYwKdD/Lryya2rM5 /ak+M2qYTBWkAh+edBn+T6x4RXsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBW5ajvOTBDBf0vbdwCjP4hqzYcXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMGM4Zjg2 LWJjZDUtNGI3YS1hOWIxLTQ2NWVmMGM5Zjg3YS8wLzE1Qjk2QTNCQ0U0QzEwQzE3 RjRCREI3NzAwQTMzRjg4NkFDRDg3MTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnzTgwDQYJKoZIhvcNAQELBQADggEBAJbZEWUlep2NIVOb59f5a3i9rx4eDV0h 7cKlwBRmcSRrIBcSNDlZ+PFDGHTZzUBsMCGHylusnC5Yyfoy6Xf1aXtT8q/FMI2w HZtJsjhyh9c1Y2QyDq1ZxAqB3ZEtBkAP5tpl/yiRZ02h29jBSSaaJuownkn/G9co 1tAchRqGs3n0/3N8JWPATUoeG9qmLMFjKgrzw9wOf23wOvCgrcTfY1JEZysQ+fWB KviO82So8y6ibEuQwWosVQ7a23JKnJEjfLmkzqzCElWJUzap7hv2YLL/Q3hf3GXs p2UGx2Nj9obd4nqCOXkxr0f/rDWu6fmHj03uwNBTVGg0F7wPoOEAaQM= -----END CERTIFICATE-----Generated at Wed May 8 14:59:49 2024 by rpki-client on console-ams.rpki-client.org