$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.cer (raw, json) Hash identifier: Y3xR3o+d/mEf4bM8D0NP0RYzDCzSpfvNwY+D5apT7AQ= Subject key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B8FBC4F06FC39B4B354ACD65307B906AFA1E085 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft caRepository: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 09 Oct 2024 21:37:14 +0000 Certificate not after: Wed 08 Oct 2025 21:42:14 +0000 Subordinate resources: IP: 103.140.76.0/23 IP: 2404:fa40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8f:bc:4f:06:fc:39:b4:b3:54:ac:d6:53:07:b9:06:af:a1:e0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 9 21:37:14 2024 GMT Not After : Oct 8 21:42:14 2025 GMT Subject: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:77:bc:42:82:be:30:a1:e1:2d:e6:8f:99: 74:f6:25:fd:19:23:11:4f:9b:24:12:e3:32:b5:8b: 18:1d:6e:26:63:21:53:12:e6:22:30:42:2e:d1:b9: 64:37:1f:fd:c2:2e:70:7c:e7:54:f5:e3:b3:f0:a4: a2:9d:9e:b8:5a:61:a2:d7:01:31:03:d2:4f:a4:3b: b8:ce:04:c7:05:58:e0:7f:dc:c9:03:60:07:fb:50: 58:9f:aa:49:c9:20:62:8c:a0:64:eb:10:57:47:7e: b3:bf:51:91:04:9a:c4:2c:80:b9:51:e9:a0:00:cb: d4:a1:f3:0f:7b:72:22:90:0c:12:34:9a:d6:9a:c2: a7:0a:5d:f6:bd:ad:7a:de:93:64:4c:64:f6:96:9d: 3f:b6:b9:42:9d:b8:ab:d8:2f:82:fd:70:3f:97:6c: f9:78:76:bf:95:be:ce:cb:67:08:43:c4:53:24:1c: 1d:39:ab:6b:3b:79:b8:7c:09:56:8f:8f:ed:ab:c9: 80:76:0a:e0:f0:58:ac:78:c3:56:9f:e3:96:56:63: 11:91:6c:31:42:54:3e:c9:bc:6b:c3:8d:6d:8a:1f: fc:4f:7b:b4:67:d3:15:93:a4:c3:6d:e8:aa:e8:ce: b8:a4:53:30:9f:c3:e7:86:22:e7:58:64:f8:16:d7: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.76.0/23 IPv6: 2404:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 71:09:bb:a1:84:6f:d9:e8:e6:e5:7c:42:16:87:6d:8b:ec:3a: 8b:f3:bd:56:d1:a7:fb:55:b4:60:5f:9e:dd:19:96:72:5b:6d: 92:a4:69:a8:5d:53:1d:8f:d2:d1:c1:47:e1:30:b0:b2:6c:05: 26:54:4a:32:20:f9:2c:33:46:e5:32:ae:d9:51:09:a3:ec:9e: 18:9c:c9:4b:48:f7:69:60:59:64:9c:3c:82:4c:f3:1d:8a:5a: c7:72:99:f1:76:0d:a0:51:12:af:5d:4d:fa:6a:21:8d:ec:41: 48:49:37:a6:74:9e:be:a7:0d:eb:b7:9f:11:2a:2b:0f:3c:1f: fb:98:fb:fe:be:99:74:bb:4e:69:75:80:fd:85:5f:78:d2:1f: d5:c5:ab:d3:3e:6d:e1:1e:d1:f0:e0:fa:21:04:9f:5b:ed:22: 1b:77:40:71:99:c4:c6:ae:e0:5b:17:d3:10:dd:90:6e:42:ec: d1:c1:1d:8b:39:3e:6b:93:86:36:f6:2d:c1:81:5f:63:d4:74: ae:80:e5:d0:03:dd:95:5b:8a:e4:70:d3:4c:0b:39:7b:21:4f: 17:b7:23:c9:fd:9c:e8:0a:40:bb:82:d9:75:b2:6e:c2:bd:2d: 0b:fa:b2:18:81:82:6b:82:7c:2b:9d:4a:64:4a:4b:8f:09:1f: d9:00:41:c2 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUG4+8Twb8ObSzVKzWUwe5Bq+h4IUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwOTIxMzcxNFoX DTI1MTAwODIxNDIxNFowMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJB OEE1REU0NkI1MTkwODM2NjZDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrLd7xCgr4woeEt5o+ZdPYl/RkjEU+bJBLjMrWLGB1uJmMhUxLmIjBCLtG5 ZDcf/cIucHznVPXjs/Ckop2euFphotcBMQPST6Q7uM4ExwVY4H/cyQNgB/tQWJ+q SckgYoygZOsQV0d+s79RkQSaxCyAuVHpoADL1KHzD3tyIpAMEjSa1prCpwpd9r2t et6TZExk9padP7a5Qp24q9gvgv1wP5ds+Xh2v5W+zstnCEPEUyQcHTmrazt5uHwJ Vo+P7avJgHYK4PBYrHjDVp/jllZjEZFsMUJUPsm8a8ONbYof/E97tGfTFZOkw23o qujOuKRTMJ/D54Yi51hk+BbXUHsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDXmsjV8mLl0wUuopd5GtRkINmbGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMDczMTY0 LTgwMDgtNDljNi1iMTg2LTNjN2ZlOWI4MGExNy8wLzM1RTZCMjM1N0M5OEI5NzRD MTRCQThBNURFNDZCNTE5MDgzNjY2QzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjEwwDQQCAAIwBwMFACQE+kAwDQYJKoZIhvcNAQELBQADggEBAHEJu6GEb9no 5uV8QhaHbYvsOovzvVbRp/tVtGBfnt0ZlnJbbZKkaahdUx2P0tHBR+EwsLJsBSZU SjIg+SwzRuUyrtlRCaPsnhicyUtI92lgWWScPIJM8x2KWsdymfF2DaBREq9dTfpq IY3sQUhJN6Z0nr6nDeu3nxEqKw88H/uY+/6+mXS7Tml1gP2FX3jSH9XFq9M+beEe 0fDg+iEEn1vtIht3QHGZxMau4FsX0xDdkG5C7NHBHYs5PmuThjb2LcGBX2PUdK6A 5dAD3ZVbiuRw00wLOXshTxe3I8n9nOgKQLuC2XWybsK9LQv6shiBgmuCfCudSmRK S48JH9kAQcI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org