$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer (raw, json) Hash identifier: tSBDSKR3hXYkVYyoR4xWreRsEyrzk70DKPoKk9wHiGM= Subject key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72E1BD97C56C93A67CA2C56237CFE21C741D6050 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 May 2024 06:11:39 +0000 Certificate not after: Mon 12 May 2025 06:16:39 +0000 Subordinate resources: IP: 103.186.210.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:bd:97:c5:6c:93:a6:7c:a2:c5:62:37:cf:e2:1c:74:1d:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 13 06:11:39 2024 GMT Not After : May 12 06:16:39 2025 GMT Subject: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:1a:e4:61:40:a5:d3:5b:f3:78:2e:4e:14: 43:f8:98:08:2c:18:5d:1d:9d:59:fb:e7:be:17:3b: 31:0f:93:f8:17:d6:b8:c2:5c:0e:6e:57:15:bd:a6: 81:89:61:6b:ba:a6:36:82:7d:f1:e8:6f:98:90:2c: fb:01:59:ff:b6:ea:cf:44:ae:1b:fe:d5:6c:95:2b: 60:86:1a:24:30:80:99:bf:87:0f:49:b9:c7:be:99: 5e:d8:bc:4a:39:bb:39:04:1c:9b:1c:42:30:db:a0: e2:ab:48:ff:09:0c:dc:cd:5b:4d:47:ba:7f:0c:b3: 70:a2:ed:10:fd:1c:a5:b2:69:a9:38:e6:b5:e3:7e: 0f:e6:41:8f:4e:6c:73:cb:a2:eb:1f:80:26:41:23: 35:9e:70:3f:fd:2a:8a:3d:d8:63:93:69:0a:20:49: e1:78:92:4d:cb:1f:83:a7:e5:20:4d:6d:52:6a:e7: 64:f4:7b:11:de:21:cd:f7:36:b8:37:53:c7:88:4a: 30:d8:2b:16:5c:b0:38:a0:8e:a3:b8:0d:6e:57:0f: 37:c9:a4:cc:c1:28:71:c1:5d:2f:17:22:2f:6d:fc: df:2c:da:3c:7a:27:f2:44:a5:8b:45:c2:a4:68:79: 76:f4:50:13:e2:00:00:0b:18:e7:86:6f:e8:22:ef: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.210.0/23 Signature Algorithm: sha256WithRSAEncryption 97:46:0e:3c:0f:3f:56:f7:37:87:48:6a:be:05:e0:37:ec:da: 4a:55:99:e4:ca:bc:9c:64:57:9e:6d:23:c4:27:90:60:00:91: cc:5d:cd:f6:d1:18:29:21:76:ec:65:d7:e1:ee:99:ae:40:1e: 39:e3:6e:ce:0a:08:b2:33:ca:d8:db:70:36:99:7a:b7:8f:a8: 8b:7c:9e:ef:62:a9:b3:ba:cd:d6:9a:9b:21:14:00:90:94:2e: 25:41:ff:7f:61:66:72:94:78:7d:b7:4f:aa:8d:22:f1:0f:57: c2:e5:99:17:cc:b6:00:73:f3:78:d1:b9:35:d1:41:63:13:ba: 6b:65:f9:4c:02:5a:e2:3b:c8:39:88:da:7b:bf:a9:cd:bf:94: 29:e7:c9:cd:f0:f8:cc:9b:5f:b2:17:a1:2f:c8:56:f6:09:6b: e5:08:03:5f:6f:a0:50:32:db:36:18:b7:c4:db:93:fd:87:82: 46:e0:15:32:c4:d1:9a:43:2a:71:9d:b6:16:59:fe:b2:eb:c4: fa:01:81:f8:aa:d6:e0:cb:06:ed:e5:1b:22:c3:e2:5c:8a:56: 1a:ee:0e:2a:34:03:fb:de:11:a5:90:c6:5f:9b:09:9e:40:da: 31:c2:5c:b3:cf:f0:4b:3a:cb:36:a0:98:35:54:ab:0e:3d:05: 45:40:19:ed -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcuG9l8Vsk6Z8osViN8/iHHQdYFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMzA2MTEzOVoX DTI1MDUxMjA2MTYzOVowMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFC NUM3RkQzRUYyN0JFOEU4M0E3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPWGuRhQKXTW/N4Lk4UQ/iYCCwYXR2dWfvnvhc7MQ+T+BfWuMJcDm5XFb2m gYlha7qmNoJ98ehvmJAs+wFZ/7bqz0SuG/7VbJUrYIYaJDCAmb+HD0m5x76ZXti8 Sjm7OQQcmxxCMNug4qtI/wkM3M1bTUe6fwyzcKLtEP0cpbJpqTjmteN+D+ZBj05s c8ui6x+AJkEjNZ5wP/0qij3YY5NpCiBJ4XiSTcsfg6flIE1tUmrnZPR7Ed4hzfc2 uDdTx4hKMNgrFlywOKCOo7gNblcPN8mkzMEoccFdLxciL2383yzaPHon8kSli0XC pGh5dvRQE+IAAAsY54Zv6CLvUvMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB0hOF61s/gsfRq1x/0+8nvo6Dp7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZGNlZjY1 LTVkZTMtNDEyOS1hYzI3LTc3MDZkNzI2NjAwMS8wLzFEMjEzODVFQjVCM0Y4MkM3 RDFBQjVDN0ZEM0VGMjdCRThFODNBN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnutIwDQYJKoZIhvcNAQELBQADggEBAJdGDjwPP1b3N4dIar4F4Dfs2kpVmeTK vJxkV55tI8QnkGAAkcxdzfbRGCkhduxl1+Huma5AHjnjbs4KCLIzytjbcDaZereP qIt8nu9iqbO6zdaamyEUAJCULiVB/39hZnKUeH23T6qNIvEPV8LlmRfMtgBz83jR uTXRQWMTumtl+UwCWuI7yDmI2nu/qc2/lCnnyc3w+MybX7IXoS/IVvYJa+UIA19v oFAy2zYYt8Tbk/2HgkbgFTLE0ZpDKnGdthZZ/rLrxPoBgfiq1uDLBu3lGyLD4lyK VhruDio0A/veEaWQxl+bCZ5A2jHCXLPP8Es6yzagmDVUqw49BUVAGe0= -----END CERTIFICATE-----Generated at Sat Jun 22 23:53:55 2024 by rpki-client on console-fra.rpki-client.org