$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer File: 2ADCBF290A98776E6F59353351C879A1502B884A.cer (raw, json) Hash identifier: Xx/LT3crXvNDmo1Jbw6mKyu6XjQiTyhAxFCM+QQK2Cg= Subject key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09CC926899B1291352ADB96E799CC5414830D127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Jan 2024 08:34:36 +0000 Certificate not after: Mon 20 Jan 2025 08:39:36 +0000 Subordinate resources: IP: 103.54.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:92:68:99:b1:29:13:52:ad:b9:6e:79:9c:c5:41:48:30:d1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 22 08:34:36 2024 GMT Not After : Jan 20 08:39:36 2025 GMT Subject: CN=2ADCBF290A98776E6F59353351C879A1502B884A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:d1:08:0c:5e:71:89:7c:9c:dd:a7:27:f8: c5:69:85:87:a3:cf:8e:97:13:a9:c3:ad:72:f0:0b: 3e:dc:a2:74:61:66:39:5d:c5:4e:fb:75:95:d7:51: 6c:dc:35:95:e8:1d:45:15:61:bf:6b:68:ee:02:d9: d4:61:5a:d6:6d:41:c1:98:6d:be:c8:72:e1:59:6d: 5e:e7:0e:80:33:f5:a0:f3:76:6d:83:57:de:8d:14: a5:ab:d4:e0:25:7e:cf:d8:50:1a:5b:47:24:66:b8: 5e:18:2d:1c:b9:63:65:d5:8c:d4:f3:e5:42:ac:cd: 1f:d5:66:7b:3f:d9:22:01:93:17:e9:58:a8:fa:aa: 02:25:0e:67:53:4b:18:6d:b3:fc:93:9c:dc:cf:e2: ed:cb:a2:fd:9b:6d:99:f9:df:7d:58:bd:e3:9c:75: 99:4d:bf:ef:2d:33:07:18:2b:02:79:a7:24:28:94: 5a:33:1c:dd:37:52:f4:73:c2:06:2c:03:f0:bb:67: 05:ef:40:42:83:3a:90:01:80:fc:40:80:0d:d4:7c: 48:1e:39:00:31:75:b6:76:4c:9f:2e:b6:88:d7:7c: 16:bc:87:63:00:f4:1f:cb:f9:de:db:d6:53:d3:f8: 6e:b7:6f:23:21:cf:3e:00:2d:12:cb:ae:fb:c9:8a: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.82.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:2a:6b:5e:23:6f:2b:63:87:51:f8:f2:f6:e4:23:fc:ce:20: 8e:0f:39:f6:84:8d:56:d6:bd:6a:4c:cf:b0:7d:d4:a3:e0:55: 79:23:91:21:dc:1f:c1:0d:c4:0f:24:32:89:9f:32:cc:22:64: d6:fc:df:d5:3f:57:ba:2b:11:46:3c:db:31:d4:2b:96:53:13: 4b:e4:67:23:2e:29:20:36:f1:ab:34:b0:4c:c4:97:f2:40:52: 56:65:58:1d:76:d5:66:bd:80:1c:6e:ac:43:1c:b7:8d:1b:10: 5f:ca:d4:7e:e0:04:4b:d9:54:52:75:d0:e9:7c:8d:8e:ae:a5: 33:51:08:59:83:2a:e3:d0:81:dc:93:5b:90:a8:1a:79:1d:dc: 48:1d:32:36:5e:19:74:c1:09:16:67:bf:7b:cf:ff:59:bd:d3: 60:d6:4d:e4:95:bf:9a:4b:e3:67:ce:ab:0b:3e:1b:aa:e7:6f: aa:9a:a9:c9:c7:b1:98:4f:20:c1:78:66:fd:c2:ef:9f:84:2a: 9d:d8:2f:af:99:d6:8d:36:59:57:0e:df:ec:a5:1a:15:0a:89: 29:46:c8:e6:f6:48:1f:80:7b:f9:ea:4b:9d:77:4d:a2:37:76: 16:58:89:8c:50:3c:f1:11:dd:c6:f2:30:c0:3d:68:c1:50:b6: bb:14:0d:24 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCcySaJmxKRNSrblueZzFQUgw0ScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyMjA4MzQzNloX DTI1MDEyMDA4MzkzNlowMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkz NTMzNTFDODc5QTE1MDJCODg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRR0QgMXnGJfJzdpyf4xWmFh6PPjpcTqcOtcvALPtyidGFmOV3FTvt1lddR bNw1legdRRVhv2to7gLZ1GFa1m1BwZhtvshy4VltXucOgDP1oPN2bYNX3o0UpavU 4CV+z9hQGltHJGa4XhgtHLljZdWM1PPlQqzNH9Vmez/ZIgGTF+lYqPqqAiUOZ1NL GG2z/JOc3M/i7cui/ZttmfnffVi945x1mU2/7y0zBxgrAnmnJCiUWjMc3TdS9HPC BiwD8LtnBe9AQoM6kAGA/ECADdR8SB45ADF1tnZMny62iNd8FryHYwD0H8v53tvW U9P4brdvIyHPPgAtEsuu+8mKx3cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCrcvykKmHdub1k1M1HIeaFQK4hKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZGU5NDYz LTY4YTctNDYyZC05NDA4LWE3YzM5Y2U2ZThmZi8wLzJBRENCRjI5MEE5ODc3NkU2 RjU5MzUzMzUxQzg3OUExNTAyQjg4NEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnNlIwDQYJKoZIhvcNAQELBQADggEBAF8qa14jbytjh1H48vbkI/zOII4POfaE jVbWvWpMz7B91KPgVXkjkSHcH8ENxA8kMomfMswiZNb839U/V7orEUY82zHUK5ZT E0vkZyMuKSA28as0sEzEl/JAUlZlWB121Wa9gBxurEMct40bEF/K1H7gBEvZVFJ1 0Ol8jY6upTNRCFmDKuPQgdyTW5CoGnkd3EgdMjZeGXTBCRZnv3vP/1m902DWTeSV v5pL42fOqws+G6rnb6qaqcnHsZhPIMF4Zv3C75+EKp3YL6+Z1o02WVcO3+ylGhUK iSlGyOb2SB+Ae/nqS513TaI3dhZYiYxQPPER3cbyMMA9aMFQtrsUDSQ= -----END CERTIFICATE-----Generated at Wed May 8 22:46:37 2024 by rpki-client on console-ams.rpki-client.org