$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.cer (raw, json) Hash identifier: LGNuzebnxhQalFwd/5iKM+91c+wyb/c+VYeifv4zjCQ= Subject key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 16A1AB60F9A604412F286296C6EBC5C3E3DECE34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft caRepository: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Nov 2023 13:39:23 +0000 Certificate not after: Wed 06 Nov 2024 13:44:23 +0000 Subordinate resources: IP: 103.140.76.0/23 IP: 2404:fa40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a1:ab:60:f9:a6:04:41:2f:28:62:96:c6:eb:c5:c3:e3:de:ce:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 13:39:23 2023 GMT Not After : Nov 6 13:44:23 2024 GMT Subject: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:77:bc:42:82:be:30:a1:e1:2d:e6:8f:99: 74:f6:25:fd:19:23:11:4f:9b:24:12:e3:32:b5:8b: 18:1d:6e:26:63:21:53:12:e6:22:30:42:2e:d1:b9: 64:37:1f:fd:c2:2e:70:7c:e7:54:f5:e3:b3:f0:a4: a2:9d:9e:b8:5a:61:a2:d7:01:31:03:d2:4f:a4:3b: b8:ce:04:c7:05:58:e0:7f:dc:c9:03:60:07:fb:50: 58:9f:aa:49:c9:20:62:8c:a0:64:eb:10:57:47:7e: b3:bf:51:91:04:9a:c4:2c:80:b9:51:e9:a0:00:cb: d4:a1:f3:0f:7b:72:22:90:0c:12:34:9a:d6:9a:c2: a7:0a:5d:f6:bd:ad:7a:de:93:64:4c:64:f6:96:9d: 3f:b6:b9:42:9d:b8:ab:d8:2f:82:fd:70:3f:97:6c: f9:78:76:bf:95:be:ce:cb:67:08:43:c4:53:24:1c: 1d:39:ab:6b:3b:79:b8:7c:09:56:8f:8f:ed:ab:c9: 80:76:0a:e0:f0:58:ac:78:c3:56:9f:e3:96:56:63: 11:91:6c:31:42:54:3e:c9:bc:6b:c3:8d:6d:8a:1f: fc:4f:7b:b4:67:d3:15:93:a4:c3:6d:e8:aa:e8:ce: b8:a4:53:30:9f:c3:e7:86:22:e7:58:64:f8:16:d7: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.76.0/23 IPv6: 2404:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 30:0a:85:59:1f:32:af:f4:a4:d4:d2:dc:b3:ad:e7:73:9d:44: fe:23:70:a2:b8:d5:65:9b:bf:d6:eb:70:44:c0:50:92:03:53: 2d:97:1f:66:00:92:a4:92:5d:26:0c:2b:8e:f6:cb:82:4f:5e: e1:7d:70:d6:a1:dd:ac:13:ff:43:d8:f5:b6:e5:64:a3:84:7e: dc:aa:dd:84:e0:7e:02:2f:b6:b8:f9:aa:87:bd:62:09:7f:12: dd:4d:00:61:ed:c7:80:6d:52:c5:55:9a:36:d9:1f:e7:99:cf: 7c:3b:14:9e:71:b5:c2:a3:fc:cb:47:e0:63:63:1f:2f:bc:c4: 07:03:f8:cb:20:69:f4:90:8e:bd:6d:b5:9d:f5:cc:23:83:68: d5:2d:9b:04:09:c4:92:4d:28:9b:6f:4d:91:dd:b3:03:f5:94: 67:18:b3:cc:ac:bd:50:c9:d7:e7:58:0a:6e:66:24:0b:b4:29: 7a:b0:5b:06:e2:98:d6:58:cf:3f:33:83:69:d5:a6:a8:1a:3e: 82:ee:79:5e:5d:6b:d3:b2:a9:98:41:a7:f5:1a:bf:82:6d:d6: 57:66:df:97:dc:30:28:7f:77:6a:36:65:09:84:4e:59:2c:e9: 05:b8:0d:da:25:2b:d1:38:28:b3:e9:a7:da:db:ae:5f:0b:59: c3:ff:05:3a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUFqGrYPmmBEEvKGKWxuvFw+PezjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwODEzMzkyM1oX DTI0MTEwNjEzNDQyM1owMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJB OEE1REU0NkI1MTkwODM2NjZDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrLd7xCgr4woeEt5o+ZdPYl/RkjEU+bJBLjMrWLGB1uJmMhUxLmIjBCLtG5 ZDcf/cIucHznVPXjs/Ckop2euFphotcBMQPST6Q7uM4ExwVY4H/cyQNgB/tQWJ+q SckgYoygZOsQV0d+s79RkQSaxCyAuVHpoADL1KHzD3tyIpAMEjSa1prCpwpd9r2t et6TZExk9padP7a5Qp24q9gvgv1wP5ds+Xh2v5W+zstnCEPEUyQcHTmrazt5uHwJ Vo+P7avJgHYK4PBYrHjDVp/jllZjEZFsMUJUPsm8a8ONbYof/E97tGfTFZOkw23o qujOuKRTMJ/D54Yi51hk+BbXUHsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDXmsjV8mLl0wUuopd5GtRkINmbGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMDczMTY0 LTgwMDgtNDljNi1iMTg2LTNjN2ZlOWI4MGExNy8wLzM1RTZCMjM1N0M5OEI5NzRD MTRCQThBNURFNDZCNTE5MDgzNjY2QzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjEwwDQQCAAIwBwMFACQE+kAwDQYJKoZIhvcNAQELBQADggEBADAKhVkfMq/0 pNTS3LOt53OdRP4jcKK41WWbv9brcETAUJIDUy2XH2YAkqSSXSYMK472y4JPXuF9 cNah3awT/0PY9bblZKOEftyq3YTgfgIvtrj5qoe9Ygl/Et1NAGHtx4BtUsVVmjbZ H+eZz3w7FJ5xtcKj/MtH4GNjHy+8xAcD+MsgafSQjr1ttZ31zCODaNUtmwQJxJJN KJtvTZHdswP1lGcYs8ysvVDJ1+dYCm5mJAu0KXqwWwbimNZYzz8zg2nVpqgaPoLu eV5da9OyqZhBp/Uav4Jt1ldm35fcMCh/d2o2ZQmETlks6QW4DdolK9E4KLPpp9rb rl8LWcP/BTo= -----END CERTIFICATE-----Generated at Wed May 8 04:37:48 2024 by rpki-client on console-fra.rpki-client.org