$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer File: 1F56B4FADE1163027086547FBCB424EDF45191FD.cer (raw, json) Hash identifier: SwQmbwYLrn/VVyp3YDf4Hx8pInQva/VFCkNYT2RiArY= Subject key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3538B206109963812D387B0939DF961E9C8086C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 May 2024 03:50:57 +0000 Certificate not after: Thu 15 May 2025 03:55:57 +0000 Subordinate resources: IP: 103.136.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:38:b2:06:10:99:63:81:2d:38:7b:09:39:df:96:1e:9c:80:86:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 16 03:50:57 2024 GMT Not After : May 15 03:55:57 2025 GMT Subject: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:90:9c:e7:4e:f6:3c:c1:62:33:1f:b5:7b:f2: 4d:78:1e:2c:d8:94:ec:09:b1:67:70:dc:b1:d3:55: 60:b6:5c:19:78:79:ee:ff:2b:fb:41:65:cb:e0:dc: 22:2a:84:3b:86:dc:9a:9e:db:20:a9:81:45:59:b5: 50:4c:7c:8e:8a:7c:1b:e0:b3:67:13:a1:e3:67:77: 39:c5:ea:fd:e6:92:f5:2c:61:93:57:c2:42:29:7a: 9a:a7:62:20:31:ff:96:a2:10:e9:c3:09:25:32:8b: 43:34:79:fb:47:7d:35:98:cf:af:11:e0:d8:fb:d4: 49:10:6d:98:b0:be:ef:5e:2b:42:4e:49:14:55:d5: 19:11:12:4a:13:da:fc:72:21:09:60:0f:f0:05:7a: 99:6b:da:23:4f:63:89:bd:bd:64:21:c2:d6:eb:63: ab:9e:70:70:ee:75:79:c4:4f:43:27:69:19:c1:3b: 34:b4:6c:96:04:46:0c:61:55:6d:50:b2:39:c6:99: 24:86:6c:d4:db:5c:fd:8d:b3:e5:b6:08:c8:0b:6a: d3:75:8f:24:25:4c:9e:87:2c:0b:3a:1f:f7:17:a7: 6a:6d:80:9c:2f:69:38:aa:8d:93:ce:9f:ef:99:9b: 62:9e:8e:da:80:c9:67:8d:fc:f8:28:3f:63:4d:c9: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.4.0/22 Signature Algorithm: sha256WithRSAEncryption 96:76:7c:1a:d2:c1:f9:a1:ff:c3:ee:38:b3:e7:3a:19:96:01: bb:83:45:04:be:5c:f9:ce:c4:be:92:81:14:09:28:5f:b6:74: 2d:2a:d2:70:d4:e3:c4:05:b1:36:f3:f7:bc:e6:a9:4b:5f:d2: db:7e:2e:d8:eb:db:ce:73:56:2e:66:3d:a2:40:59:ad:80:f5: 5c:f3:78:d5:a2:2d:9d:41:b5:da:07:fd:c9:41:09:cb:78:e7: b1:a2:a4:1e:70:5a:aa:28:4d:23:3f:dd:39:98:f2:e5:83:a0: ed:25:2e:91:5e:46:53:b5:e9:4b:06:31:61:5d:8c:1b:56:d9: 23:db:7b:52:48:f7:f2:fc:ee:31:6e:cf:bc:35:61:1f:52:c7: 67:b7:80:7b:39:04:38:ca:0c:22:90:6b:bb:19:81:30:ff:1b: 71:fa:fe:4f:ba:9b:e6:61:75:2d:7e:3f:11:59:75:5e:9c:b7: ea:2e:5b:3b:2f:cb:6c:ba:47:4d:bd:3a:e3:ce:62:ab:04:8a: 0e:79:8b:ab:79:a6:1f:68:dd:24:ef:6b:94:78:70:e0:3f:32: 8c:9a:e8:45:c6:52:4c:df:45:dc:e1:59:69:ad:2f:95:23:5d: b2:e3:15:57:c7:1a:b4:e9:ff:d5:9a:0b:20:ce:50:f6:29:d9: c0:df:4c:15 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNTiyBhCZY4EtOHsJOd+WHpyAhsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxNjAzNTA1N1oX DTI1MDUxNTAzNTU1N1owMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1 NDdGQkNCNDI0RURGNDUxOTFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP6QnOdO9jzBYjMftXvyTXgeLNiU7AmxZ3DcsdNVYLZcGXh57v8r+0Fly+Dc IiqEO4bcmp7bIKmBRVm1UEx8jop8G+CzZxOh42d3OcXq/eaS9Sxhk1fCQil6mqdi IDH/lqIQ6cMJJTKLQzR5+0d9NZjPrxHg2PvUSRBtmLC+714rQk5JFFXVGRESShPa /HIhCWAP8AV6mWvaI09jib29ZCHC1utjq55wcO51ecRPQydpGcE7NLRslgRGDGFV bVCyOcaZJIZs1Ntc/Y2z5bYIyAtq03WPJCVMnocsCzof9xenam2AnC9pOKqNk86f 75mbYp6O2oDJZ438+Cg/Y03JPCUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9WtPreEWMCcIZUf7y0JO30UZH9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjNDVjMjJj LTI3NWItNDI5NS1iNDUzLTYwYTc4M2I5YzQyYS8wLzFGNTZCNEZBREUxMTYzMDI3 MDg2NTQ3RkJDQjQyNEVERjQ1MTkxRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJniAQwDQYJKoZIhvcNAQELBQADggEBAJZ2fBrSwfmh/8PuOLPnOhmWAbuDRQS+ XPnOxL6SgRQJKF+2dC0q0nDU48QFsTbz97zmqUtf0tt+Ltjr285zVi5mPaJAWa2A 9VzzeNWiLZ1BtdoH/clBCct457GipB5wWqooTSM/3TmY8uWDoO0lLpFeRlO16UsG MWFdjBtW2SPbe1JI9/L87jFuz7w1YR9Sx2e3gHs5BDjKDCKQa7sZgTD/G3H6/k+6 m+ZhdS1+PxFZdV6ct+ouWzsvy2y6R029OuPOYqsEig55i6t5ph9o3STva5R4cOA/ Moya6EXGUkzfRdzhWWmtL5UjXbLjFVfHGrTp/9WaCyDOUPYp2cDfTBU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org