$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer (raw, json) Hash identifier: ezY8Q/RUz2FPDpC9AtwVogHnBHv1QinFmjXPgeSz6Lk= Subject key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B69147EFB36357ED6D4472452C57951D8639EEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 25 Feb 2024 03:40:16 +0000 Certificate not after: Sun 23 Feb 2025 03:45:16 +0000 Subordinate resources: IP: 103.102.140.0/22 IP: 2401:e440::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:69:14:7e:fb:36:35:7e:d6:d4:47:24:52:c5:79:51:d8:63:9e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 03:40:16 2024 GMT Not After : Feb 23 03:45:16 2025 GMT Subject: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:8c:4f:a4:b8:84:ac:8c:c6:0b:ff:21:36: 7d:78:f8:9d:74:df:e5:dd:81:36:03:70:29:98:2e: ff:3c:21:cb:90:b1:3e:b0:87:47:13:27:fd:07:99: b9:06:ed:52:5a:73:88:bb:90:a0:3a:fa:08:fc:dd: 34:21:c6:37:53:e4:f5:85:2c:bd:1e:cd:8d:08:13: 2c:a0:08:0e:8d:e6:51:de:f7:19:d8:d1:b7:1b:00: 89:15:1c:1b:8d:6f:5b:56:c5:06:e0:a2:6f:70:7e: 93:f9:91:23:1b:cb:47:74:5e:b8:a2:be:cb:50:7a: 76:bc:9b:e4:07:9c:ce:c7:28:90:74:6d:27:5f:5c: f6:2c:f5:5f:04:f1:a0:7a:0b:2b:dc:a6:0c:4c:0d: 16:95:c2:30:d5:0e:d7:6c:17:f9:f7:46:ff:af:4d: 90:c4:4a:9a:1d:40:fb:73:8f:29:bb:6f:f1:b8:05: 8d:c7:0e:6b:64:15:f2:57:1b:23:1c:8e:3a:3b:e7: 03:6d:3a:88:ea:e3:da:2a:0b:01:db:92:d1:fa:6b: 8f:cd:e4:b3:fd:aa:1f:d4:73:5f:b2:19:63:c4:4d: c7:51:f3:50:8c:c8:4b:61:b0:a9:73:92:7e:16:ec: 5e:a7:2b:1a:1a:a5:23:67:99:d6:95:a4:cf:c8:be: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.140.0/22 IPv6: 2401:e440::/32 Signature Algorithm: sha256WithRSAEncryption 00:f0:07:1f:e6:0a:35:75:70:ef:61:7d:03:c2:51:ed:b7:5f: bf:3e:d8:a3:c7:af:83:23:28:30:6c:e9:4a:1e:cf:c3:d3:a8: 7c:f9:0b:0a:06:9f:1a:ec:3b:bf:31:76:5d:3a:f0:14:41:01: 94:fb:82:c6:b8:5d:ed:f0:69:24:57:88:0b:24:10:de:60:62: 76:78:cf:3c:7a:27:46:b0:d2:d0:74:4c:ff:bc:b9:87:aa:34: d3:9a:9d:e6:7d:cf:b8:d7:1c:8f:9a:42:90:f1:e3:2e:75:b7: dc:da:41:1c:2e:35:c6:56:10:21:bb:ca:1d:bd:d8:a1:a1:9e: 7c:9e:58:89:54:17:47:4c:3d:e9:44:e1:14:0d:e7:b2:98:79: 1b:40:05:2a:f6:56:75:7d:db:bb:49:01:78:82:3d:d1:32:b8: 9f:4f:b1:78:3b:ba:8c:2e:ee:fb:ac:e1:ef:69:4d:e2:60:23: 60:2e:f2:dd:be:77:bb:67:f7:ee:b1:c5:f6:71:31:e4:54:10: ae:29:f4:e7:06:95:55:4f:bf:11:c6:fd:a8:05:9f:56:35:a3: cb:60:d0:3d:52:da:21:cf:25:c1:dc:26:eb:31:3c:df:20:59: f0:ec:e0:c3:b9:3c:71:9b:b8:f3:e3:a5:88:6e:ef:26:c2:25: d0:04:c4:04 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUC2kUfvs2NX7W1EckUsV5Udhjnu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyNTAzNDAxNloX DTI1MDIyMzAzNDUxNlowMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3 MUNBNUNGMDg4RjdBRjUwRDc1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVmjE+kuISsjMYL/yE2fXj4nXTf5d2BNgNwKZgu/zwhy5CxPrCHRxMn/QeZ uQbtUlpziLuQoDr6CPzdNCHGN1Pk9YUsvR7NjQgTLKAIDo3mUd73GdjRtxsAiRUc G41vW1bFBuCib3B+k/mRIxvLR3ReuKK+y1B6dryb5AeczscokHRtJ19c9iz1XwTx oHoLK9ymDEwNFpXCMNUO12wX+fdG/69NkMRKmh1A+3OPKbtv8bgFjccOa2QV8lcb IxyOOjvnA206iOrj2ioLAduS0fprj83ks/2qH9RzX7IZY8RNx1HzUIzIS2GwqXOS fhbsXqcrGhqlI2eZ1pWkz8i+aEMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1gAaT0ZUizfthxylzwiPevUNdUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NjMyZDk5 LTMyYjItNDY3Yi1iN2ZlLTBkMjVmODUzYmZhNi8wLzFENjAwMUE0RjQ2NTQ4QjM3 RUQ4NzFDQTVDRjA4OEY3QUY1MEQ3NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnZowwDQQCAAIwBwMFACQB5EAwDQYJKoZIhvcNAQELBQADggEBAADwBx/mCjV1 cO9hfQPCUe23X78+2KPHr4MjKDBs6Uoez8PTqHz5CwoGnxrsO78xdl068BRBAZT7 gsa4Xe3waSRXiAskEN5gYnZ4zzx6J0aw0tB0TP+8uYeqNNOaneZ9z7jXHI+aQpDx 4y51t9zaQRwuNcZWECG7yh292KGhnnyeWIlUF0dMPelE4RQN57KYeRtABSr2VnV9 27tJAXiCPdEyuJ9PsXg7uowu7vus4e9pTeJgI2Au8t2+d7tn9+6xxfZxMeRUEK4p 9OcGlVVPvxHG/agFn1Y1o8tg0D1S2iHPJcHcJusxPN8gWfDs4MO5PHGbuPPjpYhu 7ybCJdAExAQ= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org