$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer File: 1F56B4FADE1163027086547FBCB424EDF45191FD.cer (raw, json) Hash identifier: GdxNRGfG8uJV5iexCuJgRDqHZ1XqwoFDShaN2s7XC/0= Subject key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01B9B67EAE642316E739C652A2155CF0D817703E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 Jun 2023 03:47:17 +0000 Certificate not after: Thu 13 Jun 2024 03:52:17 +0000 Subordinate resources: IP: 103.136.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b9:b6:7e:ae:64:23:16:e7:39:c6:52:a2:15:5c:f0:d8:17:70:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 15 03:47:17 2023 GMT Not After : Jun 13 03:52:17 2024 GMT Subject: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:90:9c:e7:4e:f6:3c:c1:62:33:1f:b5:7b:f2: 4d:78:1e:2c:d8:94:ec:09:b1:67:70:dc:b1:d3:55: 60:b6:5c:19:78:79:ee:ff:2b:fb:41:65:cb:e0:dc: 22:2a:84:3b:86:dc:9a:9e:db:20:a9:81:45:59:b5: 50:4c:7c:8e:8a:7c:1b:e0:b3:67:13:a1:e3:67:77: 39:c5:ea:fd:e6:92:f5:2c:61:93:57:c2:42:29:7a: 9a:a7:62:20:31:ff:96:a2:10:e9:c3:09:25:32:8b: 43:34:79:fb:47:7d:35:98:cf:af:11:e0:d8:fb:d4: 49:10:6d:98:b0:be:ef:5e:2b:42:4e:49:14:55:d5: 19:11:12:4a:13:da:fc:72:21:09:60:0f:f0:05:7a: 99:6b:da:23:4f:63:89:bd:bd:64:21:c2:d6:eb:63: ab:9e:70:70:ee:75:79:c4:4f:43:27:69:19:c1:3b: 34:b4:6c:96:04:46:0c:61:55:6d:50:b2:39:c6:99: 24:86:6c:d4:db:5c:fd:8d:b3:e5:b6:08:c8:0b:6a: d3:75:8f:24:25:4c:9e:87:2c:0b:3a:1f:f7:17:a7: 6a:6d:80:9c:2f:69:38:aa:8d:93:ce:9f:ef:99:9b: 62:9e:8e:da:80:c9:67:8d:fc:f8:28:3f:63:4d:c9: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.4.0/22 Signature Algorithm: sha256WithRSAEncryption 47:24:eb:b3:91:b2:bf:98:35:44:78:7a:f0:eb:32:65:29:e7: 5e:10:68:d9:ba:04:e5:5a:89:93:45:8c:fc:83:63:0a:da:f4: 82:41:6f:14:41:96:b6:dc:4c:39:62:2d:ca:4b:5b:9e:22:b4: 0b:13:6d:f3:a8:24:c3:84:49:82:87:33:e9:57:38:b4:e1:67: 88:86:58:3a:11:c4:f0:9f:0a:9e:ad:b5:cc:2d:da:6f:71:ae: f2:f0:49:04:ea:32:d9:a0:78:30:1a:94:d4:40:32:7a:b4:10: 33:69:47:6b:f0:1b:c6:39:d6:7b:21:07:d2:de:fa:6b:e5:b5: a6:1b:7f:b0:0b:b8:2e:22:19:6f:75:c0:38:e3:6a:bf:72:5e: 64:67:b2:a0:77:c8:37:45:70:40:88:d7:73:98:25:24:6f:08: 34:54:be:fd:a2:a5:bb:6f:60:b4:28:2a:a0:70:06:40:5b:aa: 35:2c:a7:cd:56:89:45:68:c4:16:18:87:4d:45:63:ac:2f:ee: 53:df:0f:0b:ea:0a:06:b2:ca:a0:15:f8:a0:e7:a0:d4:a8:9d: 95:46:d1:9c:02:99:8e:fb:e5:de:2d:02:c8:cf:de:b6:8b:ba: 5e:3c:ab:30:71:99:e5:ad:f0:61:b2:3a:5b:9c:fb:05:cf:9b: ca:ed:68:c5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAbm2fq5kIxbnOcZSohVc8NgXcD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYxNTAzNDcxN1oX DTI0MDYxMzAzNTIxN1owMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1 NDdGQkNCNDI0RURGNDUxOTFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP6QnOdO9jzBYjMftXvyTXgeLNiU7AmxZ3DcsdNVYLZcGXh57v8r+0Fly+Dc IiqEO4bcmp7bIKmBRVm1UEx8jop8G+CzZxOh42d3OcXq/eaS9Sxhk1fCQil6mqdi IDH/lqIQ6cMJJTKLQzR5+0d9NZjPrxHg2PvUSRBtmLC+714rQk5JFFXVGRESShPa /HIhCWAP8AV6mWvaI09jib29ZCHC1utjq55wcO51ecRPQydpGcE7NLRslgRGDGFV bVCyOcaZJIZs1Ntc/Y2z5bYIyAtq03WPJCVMnocsCzof9xenam2AnC9pOKqNk86f 75mbYp6O2oDJZ438+Cg/Y03JPCUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9WtPreEWMCcIZUf7y0JO30UZH9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjNDVjMjJj LTI3NWItNDI5NS1iNDUzLTYwYTc4M2I5YzQyYS8wLzFGNTZCNEZBREUxMTYzMDI3 MDg2NTQ3RkJDQjQyNEVERjQ1MTkxRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJniAQwDQYJKoZIhvcNAQELBQADggEBAEck67ORsr+YNUR4evDrMmUp514QaNm6 BOVaiZNFjPyDYwra9IJBbxRBlrbcTDliLcpLW54itAsTbfOoJMOESYKHM+lXOLTh Z4iGWDoRxPCfCp6ttcwt2m9xrvLwSQTqMtmgeDAalNRAMnq0EDNpR2vwG8Y51nsh B9Le+mvltaYbf7ALuC4iGW91wDjjar9yXmRnsqB3yDdFcECI13OYJSRvCDRUvv2i pbtvYLQoKqBwBkBbqjUsp81WiUVoxBYYh01FY6wv7lPfDwvqCgayyqAV+KDnoNSo nZVG0ZwCmY775d4tAsjP3raLul48qzBxmeWt8GGyOluc+wXPm8rtaMU= -----END CERTIFICATE-----Generated at Wed May 8 21:02:10 2024 by rpki-client on console-fra.rpki-client.org