$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.cer (raw, json) Hash identifier: aASLQUz//iqqvUJ66n78bmU/GwEUq+zSQmdviom272o= Subject key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B856BB490F633329AEF0066EE0995165E801F49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 May 2024 07:35:05 +0000 Certificate not after: Fri 09 May 2025 07:40:05 +0000 Subordinate resources: IP: 103.210.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:85:6b:b4:90:f6:33:32:9a:ef:00:66:ee:09:95:16:5e:80:1f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 10 07:35:05 2024 GMT Not After : May 9 07:40:05 2025 GMT Subject: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:44:0c:1b:e6:2f:b4:99:50:cc:6b:84:68: a8:f5:63:a1:38:9a:4c:ab:fb:78:3a:37:77:8e:fc: bb:fb:c1:9a:74:d0:be:e1:0c:35:55:24:01:de:3a: 46:2b:f1:f0:42:08:d0:84:a2:74:73:17:fe:7f:cc: 0c:8f:ec:ff:07:a6:66:43:75:f0:6d:4e:c9:cf:ae: 73:39:f6:2e:c6:51:62:9b:4f:5c:24:9e:3f:58:3d: f0:1c:aa:98:92:c3:45:ec:65:2c:e1:21:7c:41:f7: 23:ee:ee:d1:1d:27:24:9c:29:88:57:b0:21:c1:bb: d3:3b:5a:4b:68:c2:3a:6b:5b:96:69:ce:1d:a0:08: 96:8d:d8:fd:7b:82:cb:58:16:d7:d0:b3:00:71:26: 5c:28:25:f1:fc:c2:5a:26:69:d6:9f:87:d1:2f:5b: 8d:62:49:25:8b:53:cc:5d:f6:d7:cf:09:f6:aa:26: e3:fa:f0:98:b8:00:e4:f4:fc:d2:08:d1:6e:3f:6e: 2d:d4:6d:f4:d9:a8:8b:85:3a:5a:cd:d9:dd:ec:d6: 9e:b6:a5:1c:f7:c9:a7:3a:d4:2b:ad:8b:80:cd:0a: b1:f9:da:7e:47:44:c6:df:bf:71:05:11:31:0d:ca: 96:ab:32:fe:28:49:45:28:c7:3f:35:e3:b7:2f:f4: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:8f:6c:5c:d2:ef:60:dd:5a:5c:a1:26:a7:45:33:57:ac:6e: 20:65:35:b0:37:62:33:ef:03:a1:14:4b:35:a1:23:d3:b4:88: d8:67:36:b8:e8:0e:84:68:a9:85:32:d1:ac:9a:99:ee:d6:bd: 3b:d6:11:28:bf:33:b4:e0:f5:88:c8:8f:70:42:53:a5:86:5c: 78:96:bc:0a:e1:85:74:3d:bb:8e:14:f0:96:b5:5c:fc:64:c0: c2:fe:19:b6:1d:27:b1:14:e2:b7:28:3a:e3:b2:d7:cc:ca:95: 6b:63:53:b9:07:dd:30:68:07:0b:0a:c6:7e:e9:52:a2:a8:d9: e5:df:67:b8:af:a0:e3:40:95:cc:60:4e:2d:4a:75:1f:1d:e5: 22:94:2e:29:e3:7c:b5:ab:b4:c9:ae:be:c0:69:b6:95:83:55: 25:18:6f:81:83:a9:48:ed:6b:a0:02:f4:8a:25:cf:d8:47:bc: 39:b4:01:c9:96:fe:7d:76:29:2c:e2:04:19:76:27:87:7d:0f: 58:1d:38:92:a5:fb:c0:76:28:f2:34:dd:5f:65:3f:c7:3b:73: d5:fc:b5:3c:62:d7:a8:04:72:12:b7:7a:b2:ca:73:e5:38:84: 27:63:05:3a:23:33:ea:1d:2a:a2:81:79:50:e7:6e:b1:0e:89: b6:cc:cc:75 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW4VrtJD2MzKa7wBm7gmVFl6AH0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMDA3MzUwNVoX DTI1MDUwOTA3NDAwNVowMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJC REM5ODJEN0YzNUQxNTQwRDUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk/RAwb5i+0mVDMa4RoqPVjoTiaTKv7eDo3d478u/vBmnTQvuEMNVUkAd46 Rivx8EII0ISidHMX/n/MDI/s/wemZkN18G1Oyc+uczn2LsZRYptPXCSeP1g98Byq mJLDRexlLOEhfEH3I+7u0R0nJJwpiFewIcG70ztaS2jCOmtblmnOHaAIlo3Y/XuC y1gW19CzAHEmXCgl8fzCWiZp1p+H0S9bjWJJJYtTzF32188J9qom4/rwmLgA5PT8 0gjRbj9uLdRt9Nmoi4U6Ws3Z3ezWnralHPfJpzrUK62LgM0KsfnafkdExt+/cQUR MQ3Klqsy/ihJRSjHPzXjty/0gLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWPTUF6ExfLIgu9yYLX810VQNUaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MzhjMTk1 LTQ5NGEtNDZhMi1iOTNjLThlMTU2NjhmMDViMi8wLzM1OEY0RDQxN0ExMzE3Q0Iy MjBCQkRDOTgyRDdGMzVEMTU0MEQ1MUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0kQwDQYJKoZIhvcNAQELBQADggEBAI6PbFzS72DdWlyhJqdFM1esbiBlNbA3 YjPvA6EUSzWhI9O0iNhnNrjoDoRoqYUy0ayame7WvTvWESi/M7Tg9YjIj3BCU6WG XHiWvArhhXQ9u44U8Ja1XPxkwML+GbYdJ7EU4rcoOuOy18zKlWtjU7kH3TBoBwsK xn7pUqKo2eXfZ7ivoONAlcxgTi1KdR8d5SKULinjfLWrtMmuvsBptpWDVSUYb4GD qUjta6AC9Iolz9hHvDm0AcmW/n12KSziBBl2J4d9D1gdOJKl+8B2KPI03V9lP8c7 c9X8tTxi16gEchK3erLKc+U4hCdjBTojM+odKqKBeVDnbrEOibbMzHU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:15 2024 by rpki-client on console-fra.rpki-client.org