$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer (raw, json) Hash identifier: mzJr4OCOUHCvw6TTVSInGRePHxv1TSY0Qhg1AMYjXFc= Subject key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EE8C0FA03AF28BC7A027666454B6C633454E711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft caRepository: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 Feb 2024 08:09:22 +0000 Certificate not after: Tue 11 Feb 2025 08:14:22 +0000 Subordinate resources: IP: 2001:df5:eb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e8:c0:fa:03:af:28:bc:7a:02:76:66:45:4b:6c:63:34:54:e7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 13 08:09:22 2024 GMT Not After : Feb 11 08:14:22 2025 GMT Subject: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:3b:f7:f3:14:1c:84:0c:2b:d3:8c:d0:60: 5a:51:ce:9f:bd:af:4f:58:56:7f:13:0e:9a:13:8b: 8e:6c:e2:8b:16:e1:97:89:6a:bc:9d:a1:12:1c:4a: ff:96:5b:4b:8a:e7:de:5d:aa:91:f2:d3:2f:00:6d: f5:ac:cb:74:c3:eb:23:dd:69:c7:e2:67:ab:05:69: f1:65:bb:29:f1:f6:41:40:f3:02:f3:c7:8b:a8:1c: c5:10:87:0f:93:b4:48:83:d9:81:53:1b:e6:36:df: 77:e2:9c:09:48:84:88:fb:66:70:c3:2a:25:d4:48: 29:6d:2c:a4:1a:e4:e5:15:06:23:c9:b4:6a:82:13: be:1e:60:56:7c:cd:a1:31:e3:e2:4d:08:69:97:4c: c0:b1:18:c9:3f:30:2a:fc:3d:09:1c:b0:e6:c1:da: 01:b9:20:a1:8d:5a:94:dc:94:58:2e:ec:fa:f5:b1: 8b:2c:31:d3:38:5d:59:2a:8b:ec:b4:a8:18:09:e1: a8:09:63:19:3b:bf:84:a4:27:54:53:53:2c:d5:92: 65:33:75:38:e7:b8:42:7d:50:56:d4:b5:43:69:4d: 22:e5:e4:50:68:7b:af:ab:a5:7a:df:49:54:d0:c8: 49:b3:69:78:52:19:a7:44:a8:6a:cb:4b:76:fb:26: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:eb00::/48 Signature Algorithm: sha256WithRSAEncryption 1b:4e:be:dd:f0:d8:df:db:e1:5d:af:ee:32:48:b5:83:8a:b2: 0c:f5:1b:62:48:e6:d7:65:a7:b6:8a:fd:99:4d:e9:be:24:2b: 25:45:6a:3e:58:b1:c5:f8:4d:65:58:95:22:61:21:61:96:74: c0:89:fe:7c:fb:d4:d1:99:3b:fa:ba:8f:47:6b:aa:8a:87:02: dc:ef:2a:16:d8:cf:ba:5d:d9:43:42:e9:e4:0e:fa:80:72:49: bd:f1:ff:2a:34:10:4a:ae:5b:5a:3c:6d:11:b2:db:83:73:29: be:4d:7b:88:d0:d1:f9:93:00:6f:39:4f:18:9b:92:b9:6b:78: c1:a4:b7:2a:51:0e:af:4a:d3:0f:bc:96:2a:46:72:20:bd:21: d6:ed:24:0d:11:c6:a5:c3:87:17:fa:be:f0:8f:e2:76:17:1b: 87:b4:01:e6:71:6c:94:fd:76:58:7f:96:68:81:89:6a:67:03: 51:66:88:5a:83:12:4a:b1:a3:f7:c6:39:78:dc:ba:d2:c9:dc: 0c:52:20:c2:f1:07:c9:e9:b1:5f:0a:6e:56:b5:85:a6:34:9a: b3:6e:9d:1d:7f:a4:26:03:ed:05:f1:4f:9c:61:dc:6d:49:34: 9e:b9:46:ee:c5:0e:ab:20:b6:3c:2c:5e:91:99:83:a3:39:f7: 77:1b:1c:f2 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUXujA+gOvKLx6AnZmRUtsYzRU5xEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxMzA4MDkyMloX DTI1MDIxMTA4MTQyMlowMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3 QTZFNDJEODgyRkNCN0U0NjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQoO/fzFByEDCvTjNBgWlHOn72vT1hWfxMOmhOLjmziixbhl4lqvJ2hEhxK /5ZbS4rn3l2qkfLTLwBt9azLdMPrI91px+JnqwVp8WW7KfH2QUDzAvPHi6gcxRCH D5O0SIPZgVMb5jbfd+KcCUiEiPtmcMMqJdRIKW0spBrk5RUGI8m0aoITvh5gVnzN oTHj4k0IaZdMwLEYyT8wKvw9CRyw5sHaAbkgoY1alNyUWC7s+vWxiywx0zhdWSqL 7LSoGAnhqAljGTu/hKQnVFNTLNWSZTN1OOe4Qn1QVtS1Q2lNIuXkUGh7r6ulet9J VNDISbNpeFIZp0SoastLdvsmle0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB/VfUxCJpYM4Ct6bkLYgvy35GDuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMzRiYjQ4 LThhNjUtNDI4Yi05NGYxLTk5NWFlZDcyZWNiNS8wLzFGRDU3RDRDNDIyNjk2MENF MDJCN0E2RTQyRDg4MkZDQjdFNDYwRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ316wAwDQYJKoZIhvcNAQELBQADggEBABtOvt3w2N/b4V2v7jJItYOKsgz1 G2JI5tdlp7aK/ZlN6b4kKyVFaj5YscX4TWVYlSJhIWGWdMCJ/nz71NGZO/q6j0dr qoqHAtzvKhbYz7pd2UNC6eQO+oBySb3x/yo0EEquW1o8bRGy24NzKb5Ne4jQ0fmT AG85TxibkrlreMGktypRDq9K0w+8lipGciC9IdbtJA0RxqXDhxf6vvCP4nYXG4e0 AeZxbJT9dlh/lmiBiWpnA1FmiFqDEkqxo/fGOXjcutLJ3AxSIMLxB8npsV8Kbla1 haY0mrNunR1/pCYD7QXxT5xh3G1JNJ65Ru7FDqsgtjwsXpGZg6M593cbHPI= -----END CERTIFICATE-----Generated at Wed May 8 05:33:15 2024 by rpki-client on console-ams.rpki-client.org