$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer File: 35AF7B054A8CC95835EC5A2F9275004D39521553.cer (raw, json) Hash identifier: U8AscFQ1cf7smWymsqAvFs2Mca9I9pJPnLfoAHaCi7k= Subject key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29F1D7AAA6226267E62836C297795F9344324CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 Mar 2024 19:37:17 +0000 Certificate not after: Sat 01 Mar 2025 19:42:17 +0000 Subordinate resources: IP: 103.173.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f1:d7:aa:a6:22:62:67:e6:28:36:c2:97:79:5f:93:44:32:4c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 2 19:37:17 2024 GMT Not After : Mar 1 19:42:17 2025 GMT Subject: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:c6:45:aa:ef:ff:72:39:a5:37:fb:b1:77: f1:38:27:67:bc:8b:50:21:da:5a:97:77:d2:a2:72: 3e:ae:c8:27:dd:28:1a:35:11:41:ce:f7:bf:b7:04: b0:94:b5:ed:eb:cb:d2:73:04:c8:a6:1a:38:de:bd: 8d:28:cd:48:8a:e6:64:93:5a:20:d3:9e:14:f1:74: 22:a9:35:4e:e6:6c:e1:c2:47:3f:02:a2:05:2e:f5: 4a:aa:0d:14:ea:a3:4b:8e:55:e7:19:27:d2:18:6e: 28:f2:18:91:2f:fa:7e:ba:58:df:9c:22:91:18:73: 1f:0b:cb:2e:a7:10:5a:5a:3f:7e:73:35:2b:fa:8f: f1:5c:9e:ad:17:57:74:b4:88:45:07:00:72:4a:5d: ea:c7:70:58:17:81:2d:8a:bb:72:c6:f9:b9:d5:53: b3:d1:47:15:ca:9a:9c:39:df:67:af:4a:8e:2d:bb: 73:f5:51:60:41:6a:d7:93:c8:8f:b3:8e:83:e3:3e: ad:89:7a:38:36:5b:8d:c6:00:ca:e3:c2:7a:07:2d: 4f:fd:2b:74:46:9e:90:3a:ae:09:d1:12:a0:8d:a4: 7d:5d:d4:52:aa:a2:a5:f3:96:29:e7:3f:82:1a:5c: 62:29:47:c8:a7:9e:29:98:f3:ad:19:5c:fd:c8:8e: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.164.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:f8:a4:6c:ac:dc:70:be:5e:34:8b:0a:29:fb:49:eb:d3:ad: 0d:b8:45:cd:68:39:18:0b:e4:b1:b3:0c:40:7c:f6:30:0c:8a: f7:62:6d:c8:19:1a:5d:2b:25:7c:97:9e:1b:f9:fd:13:cb:92: 25:66:b3:39:f4:5f:c5:8a:36:b0:28:92:3a:86:7c:5d:2a:98: 9e:21:89:fc:63:1f:9a:d6:23:34:8c:27:c6:d3:80:4d:b8:89: 5f:aa:9b:3d:4d:80:1a:02:38:b7:b4:22:c3:9b:cd:37:3b:f2: 21:6e:da:98:a0:f2:0d:74:9b:37:9f:ed:f5:fd:c3:98:2d:08: 2b:85:0b:a4:29:7c:aa:95:1d:02:b4:74:e0:6c:ff:8c:bd:64: a5:0b:2e:24:cf:7b:60:bd:8b:c4:b9:51:26:e4:f6:32:07:6c: 98:fc:97:ef:71:66:2f:2b:13:04:b1:4d:75:22:f1:f9:c3:8c: 56:f7:31:ef:ce:b4:41:4f:b5:5a:43:41:e4:e8:1b:47:3a:b3: da:79:65:34:d3:53:69:f8:ae:80:82:8f:5b:07:51:88:47:73: d0:b4:8c:1c:5c:17:ad:79:49:04:c2:f4:b0:64:9d:a9:45:fd: 0c:4d:eb:ac:ac:a2:e1:b7:bb:e7:ed:e2:13:12:4c:8f:2b:a0: 75:5b:ec:7b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKfHXqqYiYmfmKDbCl3lfk0QyTKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwMjE5MzcxN1oX DTI1MDMwMTE5NDIxN1owMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1 QTJGOTI3NTAwNEQzOTUyMTU1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhDxkWq7/9yOaU3+7F38TgnZ7yLUCHaWpd30qJyPq7IJ90oGjURQc73v7cE sJS17evL0nMEyKYaON69jSjNSIrmZJNaINOeFPF0Iqk1TuZs4cJHPwKiBS71SqoN FOqjS45V5xkn0hhuKPIYkS/6frpY35wikRhzHwvLLqcQWlo/fnM1K/qP8VyerRdX dLSIRQcAckpd6sdwWBeBLYq7csb5udVTs9FHFcqanDnfZ69Kji27c/VRYEFq15PI j7OOg+M+rYl6ODZbjcYAyuPCegctT/0rdEaekDquCdESoI2kfV3UUqqipfOWKec/ ghpcYilHyKeeKZjzrRlc/ciOhn8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWvewVKjMlYNexaL5J1AE05UhVTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDZhOWNh LTEwOTYtNGZlNC04OTkzLWQwYmU5N2I1NGE3Ni8wLzM1QUY3QjA1NEE4Q0M5NTgz NUVDNUEyRjkyNzUwMDREMzk1MjE1NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnraQwDQYJKoZIhvcNAQELBQADggEBAA34pGys3HC+XjSLCin7SevTrQ24Rc1o ORgL5LGzDEB89jAMivdibcgZGl0rJXyXnhv5/RPLkiVmszn0X8WKNrAokjqGfF0q mJ4hifxjH5rWIzSMJ8bTgE24iV+qmz1NgBoCOLe0IsObzTc78iFu2pig8g10mzef 7fX9w5gtCCuFC6QpfKqVHQK0dOBs/4y9ZKULLiTPe2C9i8S5USbk9jIHbJj8l+9x Zi8rEwSxTXUi8fnDjFb3Me/OtEFPtVpDQeToG0c6s9p5ZTTTU2n4roCCj1sHUYhH c9C0jBxcF615SQTC9LBknalF/QxN66ysouG3u+ft4hMSTI8roHVb7Hs= -----END CERTIFICATE-----Generated at Tue May 7 18:07:07 2024 by rpki-client on console-fra.rpki-client.org