$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.cer (raw, json) Hash identifier: /VgZ/GStWvK7vzmLnEYDPQCvaaUm/X1YWRGAHtuHJW8= Subject key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43A55E19757A4722119C0FACCC049DCB40331600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft caRepository: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Nov 2024 15:48:58 +0000 Certificate not after: Fri 07 Nov 2025 15:53:58 +0000 Subordinate resources: IP: 103.56.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a5:5e:19:75:7a:47:22:11:9c:0f:ac:cc:04:9d:cb:40:33:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 15:48:58 2024 GMT Not After : Nov 7 15:53:58 2025 GMT Subject: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:41:1a:fe:36:5b:c9:63:f2:35:f1:74:18: dd:e3:81:b1:c1:8c:42:8f:d1:c3:d1:94:08:1d:7f: 8d:ee:79:d7:db:9d:ed:ec:6d:64:26:98:a5:c8:77: f0:dc:8b:46:ed:28:84:55:56:17:03:65:bd:43:5b: 18:76:30:c9:11:06:d0:cb:f2:a1:ed:06:87:60:1d: 3b:98:54:6c:b6:fb:8b:b8:ed:da:34:28:34:98:3e: 60:8c:06:82:d7:ab:2e:51:0e:91:76:74:e6:01:98: 48:86:bf:5c:f6:88:c1:d7:8c:b1:39:ad:fa:47:34: 08:d2:33:2e:83:58:60:a3:4d:52:a0:b5:25:da:de: f1:4a:03:0f:38:e3:58:90:5c:9d:9c:d8:0b:a0:5b: 85:11:78:ca:c2:60:df:08:59:05:e6:76:93:c9:5a: 5f:85:b5:63:fe:23:7c:39:65:73:0f:b4:45:89:e1: 95:52:35:b4:06:8b:b4:ea:45:62:95:60:03:52:8a: 5c:0e:0d:79:67:11:3f:be:48:f8:f5:7f:ea:db:e3: 04:34:53:f6:49:fa:a5:40:8f:06:ca:97:7d:a4:2c: a2:59:5f:e1:70:16:2a:05:01:eb:8b:a8:65:ee:79: 58:3a:6e:84:2c:55:39:72:44:f9:e7:89:dc:f5:e0: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.92.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:48:8a:fa:7e:8f:64:54:70:39:80:21:2c:44:3d:1e:55:6c: 23:f9:c4:65:ec:b1:4d:d9:ec:f9:91:be:be:3d:27:5e:58:77: ba:12:9e:93:87:39:bb:2e:02:af:86:31:37:91:95:55:82:7e: 55:73:ea:94:75:fe:b0:61:14:20:20:91:0d:cc:04:c6:7e:60: 57:93:21:0c:1b:1f:ed:96:63:a9:2b:12:a9:78:16:f5:ee:48: 56:5e:2c:4f:61:77:bf:df:81:21:4a:c8:16:0d:01:c0:24:c3: ef:78:b0:39:90:1e:65:3e:9a:e3:48:c8:37:ef:c7:a7:7b:88: 48:62:ef:aa:94:bf:d0:65:3d:c2:83:48:f3:dd:43:8b:bd:5f: 67:58:9a:92:43:f3:c2:4c:eb:1a:9c:67:91:93:a7:38:ee:42: 32:58:0f:48:0c:57:0e:f1:1b:01:5f:c6:23:db:42:13:19:32: aa:9d:47:e5:3a:47:e6:14:88:37:cd:47:78:f3:92:e9:cc:9e: 23:0f:11:64:8b:e1:2e:65:0c:8c:9e:d0:32:b6:3d:dd:94:af: 05:ab:c6:a6:e2:7d:72:ff:2a:4b:0b:21:f8:21:a2:ca:42:e9: e5:f6:37:32:e6:1d:2f:57:2b:32:73:e6:e7:f8:99:5f:59:c9: 05:e6:e1:ba -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ6VeGXV6RyIRnA+szASdy0AzFgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwODE1NDg1OFoX DTI1MTEwNzE1NTM1OFowMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMz MTVCMTJFMjZCOTYyNTExMkNFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmNQRr+NlvJY/I18XQY3eOBscGMQo/Rw9GUCB1/je5519ud7extZCaYpch3 8NyLRu0ohFVWFwNlvUNbGHYwyREG0Mvyoe0Gh2AdO5hUbLb7i7jt2jQoNJg+YIwG gterLlEOkXZ05gGYSIa/XPaIwdeMsTmt+kc0CNIzLoNYYKNNUqC1Jdre8UoDDzjj WJBcnZzYC6BbhRF4ysJg3whZBeZ2k8laX4W1Y/4jfDllcw+0RYnhlVI1tAaLtOpF YpVgA1KKXA4NeWcRP75I+PV/6tvjBDRT9kn6pUCPBsqXfaQsollf4XAWKgUB64uo Ze55WDpuhCxVOXJE+eeJ3PXgJ7sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBdQKxuGUc27zUMxWxLia5YlESzrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNmNkMjZm LWZiZGEtNGNkOC1hMDFjLWIwMTU1NTEzMDE1Zi8wLzE3NTAyQjFCODY1MUNEQkJD RDQzMzE1QjEyRTI2Qjk2MjUxMTJDRUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnOFwwDQYJKoZIhvcNAQELBQADggEBAI9Iivp+j2RUcDmAISxEPR5VbCP5xGXs sU3Z7PmRvr49J15Yd7oSnpOHObsuAq+GMTeRlVWCflVz6pR1/rBhFCAgkQ3MBMZ+ YFeTIQwbH+2WY6krEql4FvXuSFZeLE9hd7/fgSFKyBYNAcAkw+94sDmQHmU+muNI yDfvx6d7iEhi76qUv9BlPcKDSPPdQ4u9X2dYmpJD88JM6xqcZ5GTpzjuQjJYD0gM Vw7xGwFfxiPbQhMZMqqdR+U6R+YUiDfNR3jzkunMniMPEWSL4S5lDIye0DK2Pd2U rwWrxqbifXL/KksLIfghospC6eX2NzLmHS9XKzJz5uf4mV9ZyQXm4bo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org