$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer File: 35526D55C5F4431129EA7CE9304705CE395693D9.cer (raw, json) Hash identifier: nNCGpbpg1JcFacZ379ghegl7a7R/rJ4glvHSEy1c05w= Subject key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29EC87D2B75F26BDC58627209FE8F63396B68441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft caRepository: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Feb 2024 04:22:10 +0000 Certificate not after: Wed 19 Feb 2025 04:27:10 +0000 Subordinate resources: IP: 103.40.120.0/22 IP: 2403:cb80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ec:87:d2:b7:5f:26:bd:c5:86:27:20:9f:e8:f6:33:96:b6:84:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 21 04:22:10 2024 GMT Not After : Feb 19 04:27:10 2025 GMT Subject: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:c5:81:f8:f6:eb:b7:22:f2:a8:1f:8c:7f: 79:03:52:9b:78:cd:0b:af:c7:90:1d:d6:7f:ba:90: 2f:d0:e5:56:09:3c:9a:61:e2:f7:a2:02:c4:37:3b: b2:d8:41:2a:f5:bc:4c:92:8f:a9:a0:42:c6:58:ec: b6:b0:8b:da:1f:dd:2c:17:a1:04:4f:35:a3:20:2e: 42:e5:c6:a3:0f:b3:1d:9a:84:19:55:82:05:e5:24: 69:0b:e5:67:fe:d1:e1:b2:a7:30:8d:fe:bc:28:5f: 6d:93:ad:35:1a:24:f8:37:02:05:66:bc:95:a4:d8: e2:42:cc:8f:e0:bd:10:22:c1:08:fe:19:33:ec:01: 77:3d:f0:d9:73:1e:20:6b:06:d2:89:e8:08:be:cd: 33:f3:44:4b:1e:64:b4:16:df:3a:05:5e:a2:11:e3: 8c:de:48:59:4a:80:22:cb:c3:fb:dd:5e:ce:da:ff: 58:e7:b4:d3:1a:a5:d5:23:82:7d:a1:ff:99:67:93: 86:09:69:3e:09:48:01:f0:b9:85:7f:ac:79:4f:d1: 8f:7a:33:8b:62:80:86:03:43:a4:71:72:a7:1e:08: 98:a0:c1:19:35:a1:fb:3c:7f:86:89:a7:6b:30:33: cd:ec:a7:e2:08:3c:bf:75:dc:ba:e1:52:94:01:b2: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.120.0/22 IPv6: 2403:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 34:af:f2:48:fe:f4:e1:7e:21:ad:c2:a3:08:f8:bc:7c:9c:41: b7:19:01:31:46:d7:66:db:35:57:74:fc:af:de:39:d5:3c:5d: 63:40:46:30:3c:59:e4:fc:4e:29:42:21:0d:ba:75:e0:85:52: 1b:c8:48:24:a4:52:25:a9:7d:c8:85:9d:45:41:53:1e:ed:d1: e9:57:51:c7:cd:8a:d9:ca:d3:9c:f6:43:1f:32:88:3f:62:02: 4b:43:40:22:f2:0f:9e:e2:d8:1e:f9:f0:01:09:cb:15:c1:b6: 1e:63:a7:39:f7:91:ca:4b:73:71:00:ae:8b:41:02:62:43:f7: f9:57:3b:8d:e9:7a:f1:a6:d7:bb:d9:77:a6:45:c7:90:bf:04: 57:17:1b:ab:23:71:8b:98:99:a6:97:de:60:a4:85:ec:59:4a: 60:d8:7c:d3:52:07:b2:e8:bc:45:f8:dc:e1:a6:c9:38:a7:d9: 69:9a:41:f9:f0:5f:b7:af:7c:6f:ea:89:d4:ff:a0:33:14:bc: d3:95:b9:4b:5b:8c:fa:b5:41:71:99:e9:f3:8a:03:78:6d:13: e4:a2:eb:fe:cb:c3:ef:1b:1e:24:f8:ab:19:57:59:75:da:94: aa:08:b6:47:53:61:f0:d6:ef:25:b4:c1:42:65:69:17:2a:42: 1e:ea:52:c4 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUKeyH0rdfJr3Fhicgn+j2M5a2hEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyMTA0MjIxMFoX DTI1MDIxOTA0MjcxMFowMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3 Q0U5MzA0NzA1Q0UzOTU2OTNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPwxYH49uu3IvKoH4x/eQNSm3jNC6/HkB3Wf7qQL9DlVgk8mmHi96ICxDc7 sthBKvW8TJKPqaBCxljstrCL2h/dLBehBE81oyAuQuXGow+zHZqEGVWCBeUkaQvl Z/7R4bKnMI3+vChfbZOtNRok+DcCBWa8laTY4kLMj+C9ECLBCP4ZM+wBdz3w2XMe IGsG0onoCL7NM/NESx5ktBbfOgVeohHjjN5IWUqAIsvD+91eztr/WOe00xql1SOC faH/mWeThglpPglIAfC5hX+seU/Rj3ozi2KAhgNDpHFypx4ImKDBGTWh+zx/homn azAzzeyn4gg8v3XcuuFSlAGyAxMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVSbVXF9EMRKep86TBHBc45VpPZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YjBiZjVi LTQ1NmQtNGU2Mi05ZjQ4LTYxOTIxNDlkNTJjMi8wLzM1NTI2RDU1QzVGNDQzMTEy OUVBN0NFOTMwNDcwNUNFMzk1NjkzRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnKHgwDQQCAAIwBwMFACQDy4AwDQYJKoZIhvcNAQELBQADggEBADSv8kj+9OF+ Ia3Cowj4vHycQbcZATFG12bbNVd0/K/eOdU8XWNARjA8WeT8TilCIQ26deCFUhvI SCSkUiWpfciFnUVBUx7t0elXUcfNitnK05z2Qx8yiD9iAktDQCLyD57i2B758AEJ yxXBth5jpzn3kcpLc3EArotBAmJD9/lXO43pevGm17vZd6ZFx5C/BFcXG6sjcYuY maaX3mCkhexZSmDYfNNSB7LovEX43OGmyTin2WmaQfnwX7evfG/qidT/oDMUvNOV uUtbjPq1QXGZ6fOKA3htE+Si6/7Lw+8bHiT4qxlXWXXalKoItkdTYfDW7yW0wUJl aRcqQh7qUsQ= -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org