$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer (raw, json) Hash identifier: 7Qbjz22IRyoblAoK6Zqke5HPvVgGKDkPvIwBqGfnWnE= Subject key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 474277AA8EF71C6E56925D19DDFF66A64369E158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft caRepository: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Jan 2024 12:22:36 +0000 Certificate not after: Sat 18 Jan 2025 12:27:36 +0000 Subordinate resources: IP: 103.76.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:42:77:aa:8e:f7:1c:6e:56:92:5d:19:dd:ff:66:a6:43:69:e1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 20 12:22:36 2024 GMT Not After : Jan 18 12:27:36 2025 GMT Subject: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:4f:21:5f:f0:5b:90:a6:39:2d:a9:40:49: 6b:13:9e:4b:5f:7c:a4:47:71:ff:92:d6:70:4a:96: 79:c8:76:57:85:68:3a:58:a2:13:02:bf:fc:81:09: 35:0d:43:b7:21:13:42:8d:94:89:85:67:68:af:ff: 31:ad:d4:c5:cb:77:ef:be:98:5b:03:d7:00:c6:ea: c7:57:a4:e5:cc:c9:73:bb:68:01:b6:9b:d9:b7:51: fb:36:10:94:0e:ab:8a:a2:78:4b:b5:0f:76:f2:0e: cd:12:2c:01:d4:f5:02:ef:a2:f9:62:14:c0:3e:14: 4a:aa:44:30:43:57:79:7c:76:9a:69:b8:6c:14:f6: da:80:d9:19:df:e5:48:5f:b1:0c:c6:a6:cb:0f:f7: be:44:22:69:5f:78:7d:c9:d3:55:a1:45:52:7c:c8: ba:8f:7a:a6:db:52:6f:18:f4:28:73:dc:22:49:d7: 27:70:e6:14:a4:c2:52:0b:d8:b5:81:78:8c:0c:a5: d5:72:a6:db:d5:23:69:c2:92:80:88:b7:f7:a8:21: f7:bf:df:44:24:eb:29:03:9c:04:85:9d:bf:6e:ea: 7a:30:44:3f:a2:26:3e:44:06:38:0b:6f:dc:22:94: 3b:71:9d:89:60:90:56:92:fa:05:04:23:e2:6d:e3: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.104.0/23 Signature Algorithm: sha256WithRSAEncryption 53:2c:ef:63:57:d1:df:c2:96:33:8d:bf:51:9c:b5:da:01:70: bb:1c:19:04:6c:c1:23:ad:61:b2:92:ad:0e:ff:a7:cc:70:07: cd:74:46:08:3d:fa:21:40:49:d5:f2:ac:86:2c:af:5c:c6:23: 9f:15:37:d9:02:97:64:89:ea:4a:de:ec:51:d9:f9:95:19:c9: 43:be:bc:ee:3c:80:1e:38:3c:fa:9b:1d:e0:10:fd:a8:ce:40: 71:02:2b:2d:7f:e0:e4:0e:19:c5:62:05:97:9d:8c:a3:8f:d3: 3d:98:1b:85:a8:1f:75:2e:ca:24:a0:c5:98:e9:55:8c:e7:40: 3b:b7:39:71:52:07:6c:c2:29:6b:a6:eb:3a:25:fe:69:b8:b4: 67:a8:b0:a8:ef:0e:5a:c9:79:d5:c4:0d:af:00:6a:05:08:e1: 7e:f8:4b:5c:62:a5:85:cd:09:fd:dd:ee:53:a1:a4:13:f0:56: 74:81:8f:a3:c4:38:2f:fa:b3:95:40:37:9f:4b:93:55:ca:21: 7c:f7:6e:f3:fa:93:cc:11:1a:e4:1b:9a:16:94:4c:d6:3a:2f: 67:f4:cb:a4:f6:00:05:b3:b1:9d:f6:1e:2f:7f:49:54:dc:f2: 47:07:ac:52:f5:56:65:27:ee:5c:db:af:04:40:40:69:eb:78: 6f:31:9d:0f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR0J3qo73HG5Wkl0Z3f9mpkNp4VgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyMDEyMjIzNloX DTI1MDExODEyMjczNlowMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFD OTg0NjA5MEI2M0FBOTg3ODJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG6TyFf8FuQpjktqUBJaxOeS198pEdx/5LWcEqWech2V4VoOliiEwK//IEJ NQ1DtyETQo2UiYVnaK//Ma3Uxct3776YWwPXAMbqx1ek5czJc7toAbab2bdR+zYQ lA6riqJ4S7UPdvIOzRIsAdT1Au+i+WIUwD4USqpEMENXeXx2mmm4bBT22oDZGd/l SF+xDMamyw/3vkQiaV94fcnTVaFFUnzIuo96pttSbxj0KHPcIknXJ3DmFKTCUgvY tYF4jAyl1XKm29UjacKSgIi396gh97/fRCTrKQOcBIWdv27qejBEP6ImPkQGOAtv 3CKUO3GdiWCQVpL6BQQj4m3jNlUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9MRuGPIa++TYrJhGCQtjqph4K7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0N2IwMjY0 LTlhMGEtNGNlNC05M2NiLTJjZGQ4NDBiODUzNC8wLzFGNEM0NkUxOEYyMUFGQkU0 RDhBQzk4NDYwOTBCNjNBQTk4NzgyQkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnTGgwDQYJKoZIhvcNAQELBQADggEBAFMs72NX0d/CljONv1GctdoBcLscGQRs wSOtYbKSrQ7/p8xwB810Rgg9+iFASdXyrIYsr1zGI58VN9kCl2SJ6kre7FHZ+ZUZ yUO+vO48gB44PPqbHeAQ/ajOQHECKy1/4OQOGcViBZedjKOP0z2YG4WoH3UuyiSg xZjpVYznQDu3OXFSB2zCKWum6zol/mm4tGeosKjvDlrJedXEDa8AagUI4X74S1xi pYXNCf3d7lOhpBPwVnSBj6PEOC/6s5VAN59Lk1XKIXz3bvP6k8wRGuQbmhaUTNY6 L2f0y6T2AAWzsZ32Hi9/SVTc8kcHrFL1VmUn7lzbrwRAQGnreG8xnQ8= -----END CERTIFICATE-----Generated at Wed May 8 09:50:26 2024 by rpki-client on console-fra.rpki-client.org