$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.cer (raw, json) Hash identifier: 0KlRHlLU/HUxLHl3KLw2ODndk8FWuUhCxYTO3chbrIY= Subject key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52A8854186C04E553C26E8FC4B9585E725E3CFA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft caRepository: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Jun 2024 12:27:25 +0000 Certificate not after: Fri 20 Jun 2025 12:32:25 +0000 Subordinate resources: IP: 103.179.34.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:85:41:86:c0:4e:55:3c:26:e8:fc:4b:95:85:e7:25:e3:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 12:27:25 2024 GMT Not After : Jun 20 12:32:25 2025 GMT Subject: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:30:93:be:e5:04:5d:2e:1d:60:26:85:2e: f1:0e:b8:d8:92:0c:a7:f7:2e:18:71:08:5d:36:12: de:af:57:dd:b9:3b:88:31:b9:93:ee:25:e3:03:9b: a7:7c:31:4b:51:05:e6:ce:68:af:9b:e6:c3:64:c0: 7a:ec:a3:85:e3:e6:a2:cd:6f:ed:0c:47:40:2e:19: d5:29:74:1c:74:2e:b1:9c:e6:a8:3e:70:5a:f3:ed: b1:62:92:95:40:89:06:fe:37:f7:bc:96:a5:82:53: 6c:56:5c:8b:88:7a:f8:36:60:4c:80:ea:10:a5:f8: ea:f1:a0:e5:2d:bc:8d:7e:86:4b:56:ad:e5:22:e0: 76:2e:36:1d:da:04:4a:58:e6:00:aa:21:03:1d:3d: b0:ab:31:48:9a:2e:f4:15:14:28:3e:fe:30:44:80: 6e:5d:4c:39:4c:19:6f:5c:78:5a:42:b2:6a:26:71: 8b:56:18:3a:6a:76:69:31:95:96:cf:59:55:53:1a: 73:9f:e9:b6:01:06:44:c6:07:7e:22:2c:0c:b0:13: 1f:c0:f2:d1:32:f6:af:f6:15:17:0e:c3:15:24:f5: 9c:d7:c8:c6:1a:2b:43:57:c7:d6:b8:e7:03:e2:41: 1a:74:f1:8b:08:41:4b:55:d5:22:1a:4d:23:3f:04: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.34.0/23 Signature Algorithm: sha256WithRSAEncryption 94:15:48:ed:6d:fa:33:0d:24:3f:8a:87:91:07:f0:ed:15:9b: 78:f4:5d:6f:ef:23:08:bc:07:76:5b:1d:92:e7:a3:03:83:c9: 73:5f:b7:38:00:b2:b9:b1:0a:bb:44:9f:72:b2:c4:68:fc:40: e2:35:00:46:d5:fe:70:b8:ce:f3:f5:f4:38:32:e9:ef:e4:cc: 6d:b6:3d:02:02:ec:8f:c9:ea:a9:49:bc:6a:80:00:8d:6f:6e: d0:2b:53:92:21:66:14:3d:bd:e9:13:09:21:58:7e:e0:f8:c3: de:80:76:e0:62:7c:b9:a6:46:7e:7c:17:7d:62:85:81:c5:85: c3:17:76:35:d2:c6:8b:17:b7:a7:8b:ca:a3:8b:77:c6:68:96: d5:af:7c:32:4f:9b:99:fb:77:16:1e:6f:6b:16:8e:df:59:46: 23:4f:3e:ea:32:f0:58:1f:53:c5:23:6b:33:f7:6a:dc:57:31: 3a:fc:17:55:c4:ce:0e:4f:19:cf:9b:f1:77:a6:81:8b:2e:8b: e4:13:e1:11:87:19:d1:75:db:4e:d2:f6:6e:f8:f6:3e:8a:ae: 65:32:cc:68:bf:29:b2:dd:5f:9d:ed:16:87:41:39:e9:ee:45: f0:64:6f:c9:7f:89:76:ab:34:0c:41:83:7b:16:7d:b8:81:de: 60:ca:d5:a1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUqiFQYbATlU8Juj8S5WF5yXjz6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyMTEyMjcyNVoX DTI1MDYyMDEyMzIyNVowMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFG NDlBQzFFREJFNTFCRjE1RDQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTcMJO+5QRdLh1gJoUu8Q642JIMp/cuGHEIXTYS3q9X3bk7iDG5k+4l4wOb p3wxS1EF5s5or5vmw2TAeuyjhePmos1v7QxHQC4Z1Sl0HHQusZzmqD5wWvPtsWKS lUCJBv4397yWpYJTbFZci4h6+DZgTIDqEKX46vGg5S28jX6GS1at5SLgdi42HdoE SljmAKohAx09sKsxSJou9BUUKD7+MESAbl1MOUwZb1x4WkKyaiZxi1YYOmp2aTGV ls9ZVVMac5/ptgEGRMYHfiIsDLATH8Dy0TL2r/YVFw7DFST1nNfIxhorQ1fH1rjn A+JBGnTxiwhBS1XVIhpNIz8EaKsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChsmjYtgXdt1yH0msHtvlG/FdSGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmMTI3NGM2 LTc4M2MtNGYzZC1hOWI2LTc1YjNiNDZmODU0Yy8wLzI4NkM5QTM2MkQ4MTc3NkRE NzIxRjQ5QUMxRURCRTUxQkYxNUQ0ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsyIwDQYJKoZIhvcNAQELBQADggEBAJQVSO1t+jMNJD+Kh5EH8O0Vm3j0XW/v Iwi8B3ZbHZLnowODyXNftzgAsrmxCrtEn3KyxGj8QOI1AEbV/nC4zvP19Dgy6e/k zG22PQIC7I/J6qlJvGqAAI1vbtArU5IhZhQ9vekTCSFYfuD4w96AduBifLmmRn58 F31ihYHFhcMXdjXSxosXt6eLyqOLd8ZoltWvfDJPm5n7dxYeb2sWjt9ZRiNPPuoy 8FgfU8UjazP3atxXMTr8F1XEzg5PGc+b8XemgYsui+QT4RGHGdF1207S9m749j6K rmUyzGi/KbLdX53tFodBOenuRfBkb8l/iXarNAxBg3sWfbiB3mDK1aE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:19 2024 by rpki-client on console-ams.rpki-client.org