$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer (raw, json) Hash identifier: KqdBL9BJ/N/efpMEj4jTA6QCZbU23pJEisyvB4KV9EY= Subject key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11A080DDE37C73029B4B0CB225DEC22776B301E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 15:41:25 +0000 Certificate not after: Fri 04 Apr 2025 15:46:25 +0000 Subordinate resources: IP: 103.54.225.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a0:80:dd:e3:7c:73:02:9b:4b:0c:b2:25:de:c2:27:76:b3:01:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 5 15:41:25 2024 GMT Not After : Apr 4 15:46:25 2025 GMT Subject: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:ee:be:a9:52:db:b1:1f:86:2c:a2:08:96: 9e:d7:eb:a8:f0:d9:c4:12:0c:b8:b6:1e:8d:03:37: e0:3a:5b:fc:0d:da:c8:fb:b5:23:10:32:5e:73:a5: c8:ad:cc:18:b9:90:e5:c8:17:63:fd:05:09:07:99: af:32:ba:14:2e:9b:5f:ca:b8:db:2f:d1:2e:bd:c0: 75:61:b0:39:cb:68:02:22:4c:41:66:a1:db:ad:26: 92:e0:a5:6a:ee:35:92:fa:50:aa:de:9c:2a:4f:52: 82:08:8c:23:25:81:83:9f:18:10:49:44:d8:fe:fd: ec:70:62:55:9a:75:15:90:68:1e:eb:fd:9e:20:4f: 29:88:d7:4a:aa:79:d5:fc:6e:c0:16:6a:33:f6:42: 3b:76:ed:bd:c0:43:cc:ab:c6:0a:bb:b2:1e:06:6c: f5:d5:29:93:2b:f6:6c:f8:f8:10:9f:99:86:f5:5b: 91:2b:ef:f0:8a:a4:17:00:14:82:cd:be:5f:a6:45: 56:e2:6b:2b:e6:ab:3f:2d:77:a6:b2:a5:f0:8f:32: 6e:f9:a4:f6:82:fb:43:6d:57:4c:46:72:a2:6f:01: 7d:dc:03:95:52:d4:56:ca:53:30:64:59:c4:b2:74: eb:c4:58:80:15:64:8a:5b:2c:f1:b0:75:68:69:d1: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.225.0/24 Signature Algorithm: sha256WithRSAEncryption 34:91:4a:9f:9b:44:94:2c:af:b0:31:ff:ce:09:0a:67:7d:23: 4d:f8:39:5a:27:a7:74:24:30:87:02:71:37:e1:40:ea:de:a0: 99:33:bc:1e:2c:44:9a:77:0d:55:ec:16:39:ca:11:7a:cd:87: ff:05:45:e4:e6:53:7b:b7:45:af:29:ba:60:60:fd:d5:a7:54: 16:86:bb:fb:51:f0:51:24:af:3d:5f:c3:5f:78:40:22:74:72: b4:1a:f0:4c:ca:6f:db:7a:6c:32:89:ab:90:77:a2:26:ca:75: f2:ee:10:f5:53:20:77:af:4a:a2:d1:b3:e4:d9:48:3f:a3:5f: 6e:b3:79:ce:30:f8:ad:d3:d4:16:b2:d0:05:c2:a2:5a:ed:2f: 46:8b:9b:ec:18:28:67:f0:12:24:02:e3:ac:36:b0:77:c0:02: 7f:29:10:17:52:d3:90:dc:24:dd:e9:27:02:b9:87:cb:d0:c9: d9:01:c5:e8:bd:87:67:6a:34:eb:bb:83:24:a7:39:3b:40:5f: a8:4b:6f:d8:45:ae:e0:76:91:c5:e1:00:20:a6:b1:58:f2:aa: 97:36:73:cb:06:ce:34:aa:82:ba:f0:8e:11:d9:4a:3d:82:64: 88:a5:ab:f0:a9:d8:59:7a:c4:93:d5:83:2c:72:80:87:4b:13: 52:3e:42:37 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEaCA3eN8cwKbSwyyJd7CJ3azAeUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNTE1NDEyNVoX DTI1MDQwNDE1NDYyNVowMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2 NzE1MUM1MDk4QUJERkE1NUY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRh7r6pUtuxH4YsogiWntfrqPDZxBIMuLYejQM34Dpb/A3ayPu1IxAyXnOl yK3MGLmQ5cgXY/0FCQeZrzK6FC6bX8q42y/RLr3AdWGwOctoAiJMQWah260mkuCl au41kvpQqt6cKk9SggiMIyWBg58YEElE2P797HBiVZp1FZBoHuv9niBPKYjXSqp5 1fxuwBZqM/ZCO3btvcBDzKvGCruyHgZs9dUpkyv2bPj4EJ+ZhvVbkSvv8IqkFwAU gs2+X6ZFVuJrK+arPy13prKl8I8ybvmk9oL7Q21XTEZyom8BfdwDlVLUVspTMGRZ xLJ068RYgBVkilss8bB1aGnRfO8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBoyCZAj3TKxw+5nFRxQmKvfpV9JMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZTA1ZmNm LTVmMmEtNGQ1ZS1hM2YyLWQ4NDAzMmYwYzhmNy8wLzFBMzIwOTkwMjNERDMyQjFD M0VFNjcxNTFDNTA5OEFCREZBNTVGNDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnNuEwDQYJKoZIhvcNAQELBQADggEBADSRSp+bRJQsr7Ax/84JCmd9I034OVon p3QkMIcCcTfhQOreoJkzvB4sRJp3DVXsFjnKEXrNh/8FReTmU3u3Ra8pumBg/dWn VBaGu/tR8FEkrz1fw194QCJ0crQa8EzKb9t6bDKJq5B3oibKdfLuEPVTIHevSqLR s+TZSD+jX26zec4w+K3T1Bay0AXColrtL0aLm+wYKGfwEiQC46w2sHfAAn8pEBdS 05DcJN3pJwK5h8vQydkBxei9h2dqNOu7gySnOTtAX6hLb9hFruB2kcXhACCmsVjy qpc2c8sGzjSqgrrwjhHZSj2CZIilq/Cp2Fl6xJPVgyxygIdLE1I+Qjc= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org