$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.cer (raw, json) Hash identifier: T491tTKOFkRTKQbH+kXCE3WP9iUbLj6JTAzSGDVzKGA= Subject key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0664D80F199054011F42DA28C27A69252A27E257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft caRepository: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Jul 2023 12:07:25 +0000 Certificate not after: Fri 19 Jul 2024 12:12:25 +0000 Subordinate resources: IP: 103.179.34.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:64:d8:0f:19:90:54:01:1f:42:da:28:c2:7a:69:25:2a:27:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 12:07:25 2023 GMT Not After : Jul 19 12:12:25 2024 GMT Subject: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:30:93:be:e5:04:5d:2e:1d:60:26:85:2e: f1:0e:b8:d8:92:0c:a7:f7:2e:18:71:08:5d:36:12: de:af:57:dd:b9:3b:88:31:b9:93:ee:25:e3:03:9b: a7:7c:31:4b:51:05:e6:ce:68:af:9b:e6:c3:64:c0: 7a:ec:a3:85:e3:e6:a2:cd:6f:ed:0c:47:40:2e:19: d5:29:74:1c:74:2e:b1:9c:e6:a8:3e:70:5a:f3:ed: b1:62:92:95:40:89:06:fe:37:f7:bc:96:a5:82:53: 6c:56:5c:8b:88:7a:f8:36:60:4c:80:ea:10:a5:f8: ea:f1:a0:e5:2d:bc:8d:7e:86:4b:56:ad:e5:22:e0: 76:2e:36:1d:da:04:4a:58:e6:00:aa:21:03:1d:3d: b0:ab:31:48:9a:2e:f4:15:14:28:3e:fe:30:44:80: 6e:5d:4c:39:4c:19:6f:5c:78:5a:42:b2:6a:26:71: 8b:56:18:3a:6a:76:69:31:95:96:cf:59:55:53:1a: 73:9f:e9:b6:01:06:44:c6:07:7e:22:2c:0c:b0:13: 1f:c0:f2:d1:32:f6:af:f6:15:17:0e:c3:15:24:f5: 9c:d7:c8:c6:1a:2b:43:57:c7:d6:b8:e7:03:e2:41: 1a:74:f1:8b:08:41:4b:55:d5:22:1a:4d:23:3f:04: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.34.0/23 Signature Algorithm: sha256WithRSAEncryption 61:f9:43:8f:59:44:bf:fe:f9:a8:a0:79:6a:90:56:ca:a2:f3: aa:53:00:01:a5:e7:d1:43:04:91:d0:06:f2:11:9b:6b:3d:3a: dc:7c:cf:b7:1e:e7:42:69:c0:ba:eb:de:31:bf:4b:38:89:32: 00:71:54:ac:3b:3e:58:2a:09:e6:63:3d:28:54:86:0d:f3:0e: 2e:8f:17:69:3b:f9:de:4b:57:78:d9:d5:51:d2:69:83:aa:fa: a6:69:7b:b6:da:f2:b9:e8:77:5f:0a:74:c1:4c:97:6c:38:9e: d2:79:ab:92:f4:16:b2:c1:4a:91:40:fe:39:13:d2:bd:d3:1c: dd:3b:d3:34:34:e6:e7:95:7b:2b:b6:c7:14:24:95:1f:ae:bf: 8e:1b:1a:08:47:1b:fe:41:76:16:e2:a6:fd:3d:d3:3c:fd:6b: 8c:e3:24:d5:69:7b:1c:a3:56:39:84:a1:da:de:2f:31:6c:2c: 1d:a8:47:1f:62:91:6a:82:45:e3:71:21:db:cd:e0:42:47:fe: 97:87:7e:8c:ba:1a:0e:35:e0:80:f5:55:52:e6:ce:14:7e:57: 92:27:80:ed:92:73:c8:d1:e4:df:c3:f0:cc:33:dc:7c:5c:3d: 63:79:50:a5:a6:fe:7b:8e:ea:ff:af:20:14:89:34:2a:39:43: d6:5e:c1:3e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBmTYDxmQVAEfQtoownppJSon4lcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyMTEyMDcyNVoX DTI0MDcxOTEyMTIyNVowMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFG NDlBQzFFREJFNTFCRjE1RDQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTcMJO+5QRdLh1gJoUu8Q642JIMp/cuGHEIXTYS3q9X3bk7iDG5k+4l4wOb p3wxS1EF5s5or5vmw2TAeuyjhePmos1v7QxHQC4Z1Sl0HHQusZzmqD5wWvPtsWKS lUCJBv4397yWpYJTbFZci4h6+DZgTIDqEKX46vGg5S28jX6GS1at5SLgdi42HdoE SljmAKohAx09sKsxSJou9BUUKD7+MESAbl1MOUwZb1x4WkKyaiZxi1YYOmp2aTGV ls9ZVVMac5/ptgEGRMYHfiIsDLATH8Dy0TL2r/YVFw7DFST1nNfIxhorQ1fH1rjn A+JBGnTxiwhBS1XVIhpNIz8EaKsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChsmjYtgXdt1yH0msHtvlG/FdSGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmMTI3NGM2 LTc4M2MtNGYzZC1hOWI2LTc1YjNiNDZmODU0Yy8wLzI4NkM5QTM2MkQ4MTc3NkRE NzIxRjQ5QUMxRURCRTUxQkYxNUQ0ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsyIwDQYJKoZIhvcNAQELBQADggEBAGH5Q49ZRL/++aigeWqQVsqi86pTAAGl 59FDBJHQBvIRm2s9Otx8z7ce50JpwLrr3jG/SziJMgBxVKw7PlgqCeZjPShUhg3z Di6PF2k7+d5LV3jZ1VHSaYOq+qZpe7ba8rnod18KdMFMl2w4ntJ5q5L0FrLBSpFA /jkT0r3THN070zQ05ueVeyu2xxQklR+uv44bGghHG/5Bdhbipv090zz9a4zjJNVp exyjVjmEodreLzFsLB2oRx9ikWqCReNxIdvN4EJH/peHfoy6Gg414ID1VVLmzhR+ V5IngO2Sc8jR5N/D8Mwz3HxcPWN5UKWm/nuO6v+vIBSJNCo5Q9ZewT4= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org