$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer File: 365454AF0090F9E623861AF2120855412F7447D1.cer (raw, json) Hash identifier: bgyZzoVVnLiN8GHbIbmxPyRlRIvzL3ntyFom/3sSt/I= Subject key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 545B29728E017770456719048F1C1C3B39309B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft caRepository: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Oct 2023 14:27:59 +0000 Certificate not after: Thu 10 Oct 2024 14:32:59 +0000 Subordinate resources: IP: 202.180.48.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5b:29:72:8e:01:77:70:45:67:19:04:8f:1c:1c:3b:39:30:9b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 14:27:59 2023 GMT Not After : Oct 10 14:32:59 2024 GMT Subject: CN=365454AF0090F9E623861AF2120855412F7447D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:da:74:e0:de:4e:43:2d:74:dd:03:0d:85: b7:fa:10:b9:f8:7d:4d:3e:27:6d:5c:dd:8f:aa:56: 74:51:a2:c4:41:a7:88:90:d5:e8:4f:22:5a:c7:dd: 27:69:3b:b9:0d:c2:df:db:8b:c5:d5:74:2c:a8:a1: 4f:9e:92:82:4e:78:cf:40:90:2c:eb:ba:f5:eb:13: c7:40:c6:29:0d:f0:ed:11:2b:70:5d:49:b8:8f:07: e1:0a:ee:96:b5:93:46:92:7d:c9:14:3f:db:7a:54: dd:97:5a:41:1a:af:e4:81:3c:6e:9d:12:0f:43:0d: 1f:ca:3f:5b:2b:1a:14:55:4f:9c:6e:83:de:35:d4: f4:1c:94:b4:65:fd:d8:e4:80:1b:ef:96:80:68:19: 47:fd:46:51:8e:ee:f5:3a:96:26:44:3e:aa:38:e0: 08:12:a3:83:2b:74:28:21:b5:9f:4a:a2:5b:35:91: 51:fc:69:0d:f5:73:fc:c7:79:d5:5a:b0:89:d5:6f: fc:cc:5c:58:e5:da:15:c5:99:a4:08:8a:d4:01:43: e3:c7:a3:7d:b5:ea:a9:ba:0e:9d:19:fd:ae:4d:37: 2c:91:df:34:01:92:61:07:e8:e2:4e:73:6e:14:96: ad:5e:0c:31:45:6d:cb:51:1b:44:64:c5:f0:c9:95: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.48.0/21 Signature Algorithm: sha256WithRSAEncryption 76:81:97:bb:7b:bf:5f:25:00:20:53:de:33:b0:41:67:4f:b9: ca:e6:62:97:41:ce:c1:3b:3f:eb:df:3a:54:91:67:43:59:13: cf:44:aa:79:9d:e9:c3:b1:db:69:33:2e:33:81:18:29:bf:6b: b0:1d:66:84:09:5e:87:29:32:0b:e2:54:9c:02:ee:22:34:10: 58:63:43:ef:c8:41:fc:5d:e7:78:85:23:53:7d:b1:4a:23:ba: 48:d3:e6:5b:d9:74:e1:00:55:b1:ce:39:27:fe:59:70:5e:29: 85:35:f9:90:b3:0e:46:2d:10:42:25:89:55:f5:c0:dd:a6:98: fc:76:3b:2e:3d:d5:69:63:ca:19:99:8b:34:e7:da:0f:79:ed: 30:6b:18:66:ea:0e:9f:74:dc:59:43:c0:27:00:af:ba:bf:fd: d8:78:d8:77:a2:0c:23:2d:19:7f:bd:19:14:18:78:dd:b1:a1: 4b:d9:51:43:cb:a4:60:a5:b1:40:99:36:f5:8d:ce:5f:05:f6: a1:8c:b9:90:10:6e:da:bf:38:c4:e2:68:e3:7a:fa:0e:71:80: c8:e6:17:04:4b:90:54:3f:96:5e:ae:6a:62:2c:1b:b3:18:fd: f2:fa:bb:73:97:b6:a1:f5:82:d8:89:4f:c4:6d:af:73:0d:a8: 89:8f:f2:ce -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVFspco4Bd3BFZxkEjxwcOzkwm50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjE0Mjc1OVoX DTI0MTAxMDE0MzI1OVowMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYx QUYyMTIwODU1NDEyRjc0NDdEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL442nTg3k5DLXTdAw2Ft/oQufh9TT4nbVzdj6pWdFGixEGniJDV6E8iWsfd J2k7uQ3C39uLxdV0LKihT56Sgk54z0CQLOu69esTx0DGKQ3w7RErcF1JuI8H4Qru lrWTRpJ9yRQ/23pU3ZdaQRqv5IE8bp0SD0MNH8o/WysaFFVPnG6D3jXU9ByUtGX9 2OSAG++WgGgZR/1GUY7u9TqWJkQ+qjjgCBKjgyt0KCG1n0qiWzWRUfxpDfVz/Md5 1VqwidVv/MxcWOXaFcWZpAiK1AFD48ejfbXqqboOnRn9rk03LJHfNAGSYQfo4k5z bhSWrV4MMUVty1EbRGTF8MmVPPUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDZUVK8AkPnmI4Ya8hIIVUEvdEfRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNh LTQ4ZjktNGNkYS1iZTZjLTQwMDZjMDhmOGZkMi8wLzM2NTQ1NEFGMDA5MEY5RTYy Mzg2MUFGMjEyMDg1NTQxMkY3NDQ3RDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPKtDAwDQYJKoZIhvcNAQELBQADggEBAHaBl7t7v18lACBT3jOwQWdPucrmYpdB zsE7P+vfOlSRZ0NZE89Eqnmd6cOx22kzLjOBGCm/a7AdZoQJXocpMgviVJwC7iI0 EFhjQ+/IQfxd53iFI1N9sUojukjT5lvZdOEAVbHOOSf+WXBeKYU1+ZCzDkYtEEIl iVX1wN2mmPx2Oy491WljyhmZizTn2g957TBrGGbqDp903FlDwCcAr7q//dh42Hei DCMtGX+9GRQYeN2xoUvZUUPLpGClsUCZNvWNzl8F9qGMuZAQbtq/OMTiaON6+g5x gMjmFwRLkFQ/ll6uamIsG7MY/fL6u3OXtqH1gtiJT8Rtr3MNqImP8s4= -----END CERTIFICATE-----Generated at Wed May 8 18:12:06 2024 by rpki-client on console-fra.rpki-client.org