$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer (raw, json) Hash identifier: rSydHM2ALooqnd8+lLEKiTJQoKAdhGD9ADXnJNy7PPM= Subject key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63E9180ECFBAA2A5F3773B29CC4DF9F814BDF838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft caRepository: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Mar 2024 19:56:18 +0000 Certificate not after: Thu 13 Mar 2025 20:01:18 +0000 Subordinate resources: IP: 103.152.242.0/23 IP: 2407:7240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e9:18:0e:cf:ba:a2:a5:f3:77:3b:29:cc:4d:f9:f8:14:bd:f8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 19:56:18 2024 GMT Not After : Mar 13 20:01:18 2025 GMT Subject: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:b6:45:7a:30:96:ca:89:4e:95:84:09:34: 1d:a6:b6:3b:a0:d2:e4:52:8f:ba:ab:27:47:e8:74: f7:b1:3e:e0:e4:89:1c:c2:21:e0:b6:bc:48:84:42: 3c:6f:aa:c1:f7:af:fa:99:90:6b:53:9c:9f:3d:1e: 81:cf:4f:7c:b2:d1:41:77:17:15:63:40:ab:b9:c2: 32:43:a6:68:c4:b6:5f:4b:4c:a0:29:3c:99:12:15: 3a:6d:e0:f1:8b:50:92:db:af:4c:9e:94:58:79:8b: c8:f7:37:c4:63:58:d2:65:1d:1c:7f:52:55:31:4b: c5:ed:5b:a6:ea:e8:a3:4e:32:0b:51:87:3c:09:e3: ef:8b:30:56:0a:c8:6d:cc:78:45:5f:0d:f6:a4:8f: cf:a1:18:4a:2d:a9:a5:85:0c:cd:a9:4b:d9:e7:93: 9d:b2:a7:bf:fb:7b:e8:1a:68:a1:67:dd:89:53:63: 8d:c5:ee:02:3c:1e:a1:a3:62:70:b9:6b:c0:2f:40: 48:e4:a2:be:96:7a:01:fb:e2:31:e7:a3:85:90:ca: 61:7b:32:10:36:15:bd:3c:3f:a3:ac:b9:03:a0:3e: 98:da:ae:6c:0f:b9:a4:2d:7d:09:40:7b:97:7d:d6: 40:67:2d:3b:1f:96:26:4e:56:03:64:77:eb:2f:89: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/23 IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 35:79:51:27:6a:05:36:6a:6c:b2:eb:82:c8:e1:3c:02:15:77: ef:3a:b5:b6:69:16:27:f6:d4:72:7b:42:d6:db:94:06:0b:cd: 31:36:82:46:1b:47:fd:97:22:2f:92:82:66:80:7f:b2:1a:b9: 22:a2:b6:51:f0:fc:75:32:b6:9d:17:b3:b4:f3:f0:2e:e3:a2: 8b:de:77:f2:65:e7:41:17:15:56:72:cd:40:a3:c5:13:a3:cf: 33:5a:5c:7f:33:b4:29:53:d1:6a:41:28:f4:19:0b:da:25:34: 75:14:eb:22:a1:dd:8e:95:3d:c0:bc:2c:b4:f8:53:bf:26:a4: 7d:70:d1:79:6f:96:9a:c0:20:f3:7c:85:bf:33:54:ea:f8:00: cd:bc:c9:d4:1f:2e:10:ac:ff:6a:b8:5b:db:7f:e3:a4:09:4e: a2:ee:7a:19:2d:0f:23:78:58:5b:ac:c4:c3:52:2e:76:d0:7c: 4c:1f:70:46:6d:78:a6:22:d1:5f:23:ce:2f:fe:2e:b8:f4:59: 7e:66:96:e2:fb:ce:77:ea:aa:e0:b8:ae:5c:fa:59:76:98:80: a5:5a:61:f2:7e:fb:76:1a:2b:7e:e5:da:64:2c:af:38:66:0e: 29:f3:9b:82:1b:b0:ac:ff:8c:5a:3f:a3:c5:21:24:a9:bc:86: 92:75:27:cf -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUY+kYDs+6oqXzdzspzE35+BS9+DgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNDE5NTYxOFoX DTI1MDMxMzIwMDExOFowMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFE NEFDOTlDNEFCREZEQ0RCQjQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmftkV6MJbKiU6VhAk0Haa2O6DS5FKPuqsnR+h097E+4OSJHMIh4La8SIRC PG+qwfev+pmQa1Ocnz0egc9PfLLRQXcXFWNAq7nCMkOmaMS2X0tMoCk8mRIVOm3g 8YtQktuvTJ6UWHmLyPc3xGNY0mUdHH9SVTFLxe1bpuroo04yC1GHPAnj74swVgrI bcx4RV8N9qSPz6EYSi2ppYUMzalL2eeTnbKnv/t76BpooWfdiVNjjcXuAjweoaNi cLlrwC9ASOSivpZ6AfviMeejhZDKYXsyEDYVvTw/o6y5A6A+mNqubA+5pC19CUB7 l33WQGctOx+WJk5WA2R36y+JP10CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDFJiKefKlItLtHUrJnEq9/c27QAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4 LWIxNmQtNGJhOC05ODRmLTM0ZTQxOWZjOWM0OS8wLzMxNDk4OEE3OUYyQTUyMkQy RUQxRDRBQzk5QzRBQkRGRENEQkI0MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmPIwDQQCAAIwBwMFACQHckAwDQYJKoZIhvcNAQELBQADggEBADV5USdqBTZq bLLrgsjhPAIVd+86tbZpFif21HJ7QtbblAYLzTE2gkYbR/2XIi+SgmaAf7IauSKi tlHw/HUytp0Xs7Tz8C7jooved/Jl50EXFVZyzUCjxROjzzNaXH8ztClT0WpBKPQZ C9olNHUU6yKh3Y6VPcC8LLT4U78mpH1w0XlvlprAIPN8hb8zVOr4AM28ydQfLhCs /2q4W9t/46QJTqLuehktDyN4WFusxMNSLnbQfEwfcEZteKYi0V8jzi/+Lrj0WX5m luL7znfqquC4rlz6WXaYgKVaYfJ++3YaK37l2mQsrzhmDinzm4IbsKz/jFo/o8Uh JKm8hpJ1J88= -----END CERTIFICATE-----Generated at Wed May 8 22:46:37 2024 by rpki-client on console-ams.rpki-client.org