$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.cer (raw, json) Hash identifier: nCvf/z/33qc9hKt+u0Pqq0k+KAhzCmrEsCWa3Fw9Rmo= Subject key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 564AB8BC789D27335A626AC01880FB5D14E301E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Nov 2024 09:02:32 +0000 Certificate not after: Fri 14 Nov 2025 09:07:32 +0000 Subordinate resources: IP: 103.245.226.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4a:b8:bc:78:9d:27:33:5a:62:6a:c0:18:80:fb:5d:14:e3:01:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 15 09:02:32 2024 GMT Not After : Nov 14 09:07:32 2025 GMT Subject: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:25:79:8f:a1:29:89:08:0d:d6:79:93:96: 13:87:7b:41:da:86:cf:1b:d3:6d:84:02:a5:e2:84: 90:25:0e:f9:84:99:2d:ad:c1:a8:1f:0d:06:a2:8b: 69:f8:f1:13:1e:b4:7d:d2:87:ab:31:0f:08:d7:22: b0:25:96:3a:aa:9b:00:da:a2:42:2e:f9:f7:9a:90: 3f:f2:d6:35:3e:de:d5:59:47:56:77:8c:8d:a6:4a: c7:f0:03:38:fe:46:a4:16:a7:5a:e4:63:2b:11:3f: fd:7e:a6:b8:9a:d9:b8:f2:58:39:6a:97:5b:54:57: 48:2b:73:6b:bf:c6:ce:84:dd:13:d4:3c:fe:eb:5f: 47:59:19:32:b1:98:28:6f:88:41:7b:0c:64:6e:f6: 25:3d:a2:46:a9:ff:d3:b1:06:0e:6c:7e:e5:bf:b2: d0:15:bc:d0:10:ca:d8:22:f3:5a:9e:89:06:9e:71: 4b:a3:42:3e:84:f2:5b:ec:29:fd:06:5d:21:ce:fc: d8:eb:96:ed:a0:0d:ca:38:90:d0:20:d6:fa:e2:06: 59:14:5e:05:6b:5a:66:48:40:cf:5a:3c:1c:8a:20: d4:ca:d9:d9:bf:75:b0:f9:a4:95:84:a4:28:ac:3a: 40:7e:cb:48:19:79:de:04:bf:8c:aa:ba:24:c7:ad: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.226.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:c3:cd:21:31:90:42:de:e5:05:17:d5:ab:d8:8f:c0:da:d8: ca:cc:b3:b0:7e:8f:26:32:b2:ea:07:f6:16:67:25:46:48:42: ee:5f:7d:4b:5c:3f:53:c4:65:f2:c5:a0:9e:1b:f1:cb:cf:1b: f8:82:ad:98:05:82:5e:2b:ff:90:87:d4:0a:73:5c:33:19:7d: 5a:01:d5:92:d9:b5:f2:d7:81:a6:c1:86:07:be:c1:2e:0c:56: 7d:94:b4:f1:8a:0d:00:d6:2c:6a:95:f9:85:eb:b4:60:1c:f0: 2e:7c:df:5d:9c:7f:8a:a5:43:e6:1d:f2:2f:be:27:43:96:f4: 34:ad:fe:04:b3:40:62:d1:ef:d4:6b:9d:4d:07:c2:17:4d:c5: 75:55:d9:f5:92:93:4c:63:fb:6c:88:cf:09:5c:42:ef:73:c1: 7d:c2:d9:fa:5c:db:2a:1c:94:e1:a6:6b:d7:f5:ff:78:e2:ab: 3a:13:e5:07:30:99:e9:21:b6:1e:06:14:43:cd:c2:34:94:c2: fe:18:80:e3:c8:1a:a8:09:32:7f:af:30:93:67:cc:00:7e:be: 30:66:96:bf:e3:6b:d7:96:f8:6e:d2:12:3e:74:09:07:df:5f: 28:fa:9c:2d:5c:f6:16:e4:d2:ae:8e:6f:04:6b:8f:d2:33:89: 4b:8e:b3:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVkq4vHidJzNaYmrAGID7XRTjAeEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExNTA5MDIzMloX DTI1MTExNDA5MDczMlowMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNG RjQxNzVGRkREODMyODUzRjVCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHwJXmPoSmJCA3WeZOWE4d7QdqGzxvTbYQCpeKEkCUO+YSZLa3BqB8NBqKL afjxEx60fdKHqzEPCNcisCWWOqqbANqiQi7595qQP/LWNT7e1VlHVneMjaZKx/AD OP5GpBanWuRjKxE//X6muJrZuPJYOWqXW1RXSCtza7/GzoTdE9Q8/utfR1kZMrGY KG+IQXsMZG72JT2iRqn/07EGDmx+5b+y0BW80BDK2CLzWp6JBp5xS6NCPoTyW+wp /QZdIc782OuW7aANyjiQ0CDW+uIGWRReBWtaZkhAz1o8HIog1MrZ2b91sPmklYSk KKw6QH7LSBl53gS/jKq6JMetsdMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCFRI82414mzUZz/QXX/3YMoU/W+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmY2QyYTQy LTkyYjktNDBhNC1hMGJmLTA5YjY1YTMxOGI1ZS8wLzIxNTEyM0NEQjhENzg5QjM1 MTlDRkY0MTc1RkZERDgzMjg1M0Y1QkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn9eIwDQYJKoZIhvcNAQELBQADggEBADvDzSExkELe5QUX1avYj8Da2MrMs7B+ jyYysuoH9hZnJUZIQu5ffUtcP1PEZfLFoJ4b8cvPG/iCrZgFgl4r/5CH1ApzXDMZ fVoB1ZLZtfLXgabBhge+wS4MVn2UtPGKDQDWLGqV+YXrtGAc8C58312cf4qlQ+Yd 8i++J0OW9DSt/gSzQGLR79RrnU0HwhdNxXVV2fWSk0xj+2yIzwlcQu9zwX3C2fpc 2yoclOGma9f1/3jiqzoT5Qcwmekhth4GFEPNwjSUwv4YgOPIGqgJMn+vMJNnzAB+ vjBmlr/ja9eW+G7SEj50CQffXyj6nC1c9hbk0q6ObwRrj9IziUuOs+o= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org