$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer File: 20566897603B029812606C25ABC972BAC5BF4AFB.cer (raw, json) Hash identifier: IPeOSsxesxwbz0wtX2h5o7+Xsqh084b9+5iiw0/Xeuo= Subject key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 518686179A1D8340A2E449C9FBF986DDB7C16BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 24 Dec 2023 20:21:58 +0000 Certificate not after: Sun 22 Dec 2024 20:26:58 +0000 Subordinate resources: IP: 203.190.40.0/21 IP: 2406:1b00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:86:86:17:9a:1d:83:40:a2:e4:49:c9:fb:f9:86:dd:b7:c1:6b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 20:21:58 2023 GMT Not After : Dec 22 20:26:58 2024 GMT Subject: CN=20566897603B029812606C25ABC972BAC5BF4AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:fe:36:7b:26:b0:fe:b1:1f:c0:22:cd:6c: f1:24:51:68:72:66:e2:cb:a8:09:02:76:3f:cf:75: f8:f5:39:9a:2e:86:56:9f:cb:49:f3:21:2a:2e:d1: 57:8d:2d:a4:b0:92:70:44:30:c8:e7:b0:01:7a:90: 14:5f:90:59:a4:96:84:67:6d:19:d5:ae:60:98:93: ed:4c:4a:eb:fd:cd:c0:c5:94:65:35:58:42:8b:a1: 63:0e:08:b7:ec:72:d7:cd:90:e4:1c:b9:4c:03:ae: 65:45:fa:e4:34:9e:4b:c4:3c:d2:3e:3b:02:19:8f: 1f:32:82:ff:c0:76:6c:0f:89:09:55:f1:56:88:72: cc:94:56:f1:65:e8:6e:0f:30:ca:97:08:21:c1:24: 62:17:f7:fe:dc:8e:48:e7:b8:d4:5e:8f:1f:86:a5: a0:76:7d:1a:89:75:33:68:fa:5b:d5:3c:e3:41:3a: d0:69:c9:6e:ab:2d:90:48:df:a3:75:4b:be:b7:07: 3a:19:ea:9c:59:3f:7e:de:bb:25:de:0a:6d:9a:1d: 82:11:50:86:5a:36:a7:a5:c1:20:4c:3f:9d:2a:10: 2f:70:0e:87:69:d9:cd:d9:61:68:7a:cc:b3:e7:59: c7:c5:52:46:ec:3a:85:8b:81:88:7e:fe:1c:c5:10: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.40.0/21 IPv6: 2406:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 8c:97:58:c4:e4:85:a0:49:a8:b9:cd:7b:41:8c:aa:00:09:18: c8:5a:c3:7d:d8:ba:fc:b9:53:f5:ab:a8:62:e4:98:5c:85:a8: 3c:31:e2:f8:40:0f:b5:1e:b1:34:f0:3c:32:6e:8c:63:ee:b9: c6:56:1f:6d:66:9a:74:0a:9f:78:27:14:62:ec:b3:d1:36:dc: d0:57:8f:3b:68:41:7e:2d:ef:24:ae:b5:a1:c8:19:bf:5b:78: 8d:ed:31:ae:90:83:cc:2c:8c:51:6b:5f:ef:44:43:bc:9d:76: ab:42:cf:41:82:6c:a9:8c:69:88:ec:76:17:ab:31:0c:c2:4b: 58:3d:fb:71:10:10:2d:9a:75:7d:83:4f:31:f7:4a:1e:de:ea: 51:26:b3:17:ac:d7:20:44:6a:5f:9a:77:6e:10:29:9a:50:00: 03:9a:ce:28:ae:50:55:c6:09:b0:3c:94:dc:b5:29:2d:f4:d4: 8a:06:61:b3:e0:2e:58:06:dd:29:5a:1a:67:0b:63:bb:f5:da: 61:8e:d1:06:23:4e:29:d2:51:a3:78:70:ab:3a:39:4c:37:8f: cf:ad:10:a5:2d:c4:bf:27:82:e3:fc:32:9f:d3:bd:88:c8:28: c1:d5:25:aa:0e:02:ca:ad:89:50:bf:ea:b6:12:b9:12:f2:08: 09:96:92:7a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUUYaGF5odg0Ci5EnJ+/mG3bfBa9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNDIwMjE1OFoX DTI0MTIyMjIwMjY1OFowMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2 QzI1QUJDOTcyQkFDNUJGNEFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHs/jZ7JrD+sR/AIs1s8SRRaHJm4suoCQJ2P891+PU5mi6GVp/LSfMhKi7R V40tpLCScEQwyOewAXqQFF+QWaSWhGdtGdWuYJiT7UxK6/3NwMWUZTVYQouhYw4I t+xy182Q5By5TAOuZUX65DSeS8Q80j47AhmPHzKC/8B2bA+JCVXxVohyzJRW8WXo bg8wypcIIcEkYhf3/tyOSOe41F6PH4aloHZ9Gol1M2j6W9U840E60GnJbqstkEjf o3VLvrcHOhnqnFk/ft67Jd4KbZodghFQhlo2p6XBIEw/nSoQL3AOh2nZzdlhaHrM s+dZx8VSRuw6hYuBiH7+HMUQMLcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCBWaJdgOwKYEmBsJavJcrrFv0r7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYWNjMzY1 LWUxOTQtNGFjMC05NTNhLTRkZjNhNTkwMGIxNC8wLzIwNTY2ODk3NjAzQjAyOTgx MjYwNkMyNUFCQzk3MkJBQzVCRjRBRkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLvigwDQQCAAIwBwMFACQGGwAwDQYJKoZIhvcNAQELBQADggEBAIyXWMTkhaBJ qLnNe0GMqgAJGMhaw33Yuvy5U/WrqGLkmFyFqDwx4vhAD7UesTTwPDJujGPuucZW H21mmnQKn3gnFGLss9E23NBXjztoQX4t7ySutaHIGb9beI3tMa6Qg8wsjFFrX+9E Q7yddqtCz0GCbKmMaYjsdherMQzCS1g9+3EQEC2adX2DTzH3Sh7e6lEmsxes1yBE al+ad24QKZpQAAOaziiuUFXGCbA8lNy1KS301IoGYbPgLlgG3SlaGmcLY7v12mGO 0QYjTinSUaN4cKs6OUw3j8+tEKUtxL8nguP8Mp/TvYjIKMHVJaoOAsqtiVC/6rYS uRLyCAmWkno= -----END CERTIFICATE-----Generated at Thu May 9 00:29:09 2024 by rpki-client on console-ams.rpki-client.org