$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer (raw, json) Hash identifier: sflcshFn/dDo2IMEzulMJWzhbk/dzRibaLYxfy9DLZc= Subject key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 219990102FB1141963A1335C74995A406869BA0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 22 Jun 2024 23:23:23 +0000 Certificate not after: Sat 21 Jun 2025 23:28:23 +0000 Subordinate resources: IP: 103.231.112.0/22 IP: 202.8.28.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:99:90:10:2f:b1:14:19:63:a1:33:5c:74:99:5a:40:68:69:ba:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 22 23:23:23 2024 GMT Not After : Jun 21 23:28:23 2025 GMT Subject: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:ef:a3:2c:2a:0f:53:77:11:cf:2e:17:17: da:17:b4:5b:d7:ff:63:63:28:4a:82:ac:64:80:94: 4b:6b:dd:8d:74:5a:24:cf:92:a6:68:b2:64:c8:76: fd:1a:29:af:28:82:bb:3e:b4:08:ec:7e:9b:c4:68: 1b:51:f7:01:cc:79:6d:56:90:1e:8b:17:e6:4c:47: 86:19:98:a8:f1:9e:e1:43:8b:22:52:b6:17:18:eb: 09:53:1a:60:6d:79:08:1b:46:dd:0f:54:32:c1:26: b2:80:c5:76:b7:41:9a:24:0f:84:60:fe:44:dd:85: 29:39:75:44:d5:60:2b:39:91:0f:3a:ea:80:f4:04: 4f:00:97:8b:77:6f:3c:76:03:69:54:f0:42:5a:aa: e9:e2:55:1f:29:b7:60:5f:30:cc:95:02:6b:10:eb: e1:00:2b:45:fd:42:f3:83:5d:da:0c:86:e5:f4:bb: 02:1a:fb:05:a7:04:c4:ba:b1:9e:26:d9:6c:d3:c2: 10:c8:ce:99:5e:f9:df:4e:df:bf:df:00:50:4f:cb: d8:86:3e:30:26:b5:7b:80:89:8d:dd:6a:78:8e:70: af:7c:ff:bd:a2:f3:7a:29:ad:5e:13:5e:92:e7:38: 57:b9:de:22:37:12:20:ce:dd:76:83:27:5b:7e:72: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.112.0/22 202.8.28.0/23 Signature Algorithm: sha256WithRSAEncryption 24:02:18:7e:95:77:90:b9:75:6f:4a:d8:29:cf:de:ad:38:f9: 48:af:df:fd:0f:4e:9d:d4:57:e8:b6:aa:a5:a5:cd:e1:3d:7a: a6:0b:00:f0:29:d9:a5:d9:cb:01:0d:33:c7:da:4d:ac:1a:51: f9:8c:d2:54:4a:16:a5:2a:ee:2a:8f:96:a7:ae:43:40:b2:82: 6f:1e:ab:a4:e1:2e:0d:c9:71:e1:a4:ba:e2:26:da:65:eb:4d: 78:2a:6a:a8:6d:96:96:b7:29:3e:36:a7:5f:8c:ab:28:97:d2: 48:9b:e6:1c:bd:ce:42:38:b8:f6:5d:b5:9c:a7:34:b0:2d:ea: 2c:c3:f4:d4:51:77:bb:b3:18:73:fb:97:91:f4:55:eb:01:22: 20:b2:b0:5b:f5:f2:fe:46:db:b9:37:2b:73:d1:04:0d:f6:ab: 19:a8:4a:bf:6d:f6:23:09:60:96:5d:22:34:c8:b3:9a:45:5c: 1c:2b:a1:a1:da:17:67:63:0d:d7:d0:ba:63:e8:ab:e4:77:e0: 5e:74:99:e5:bb:f5:54:69:05:5a:31:61:1b:c3:57:0f:46:53: 9e:3c:de:74:46:22:62:2d:fc:df:e2:6d:8b:b6:b0:cf:af:8c: 74:cc:3f:d8:da:f6:8f:10:0c:d0:bd:1f:40:82:36:30:70:d0: 01:02:63:ec -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUIZmQEC+xFBljoTNcdJlaQGhpugwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyMjIzMjMyM1oX DTI1MDYyMTIzMjgyM1owMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4 OEY3ODZEOUYwRjBDODhFNEJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvb76MsKg9TdxHPLhcX2he0W9f/Y2MoSoKsZICUS2vdjXRaJM+SpmiyZMh2 /RopryiCuz60COx+m8RoG1H3Acx5bVaQHosX5kxHhhmYqPGe4UOLIlK2FxjrCVMa YG15CBtG3Q9UMsEmsoDFdrdBmiQPhGD+RN2FKTl1RNVgKzmRDzrqgPQETwCXi3dv PHYDaVTwQlqq6eJVHym3YF8wzJUCaxDr4QArRf1C84Nd2gyG5fS7Ahr7BacExLqx nibZbNPCEMjOmV75307fv98AUE/L2IY+MCa1e4CJjd1qeI5wr3z/vaLzeimtXhNe kuc4V7neIjcSIM7ddoMnW35y6OcCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDcZZ9+9IDov1E6I94bZ8PDIjkupMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYjhiODg5 LTNiM2QtNGVmNS1hZDcwLTViMTA0NWVmZjM5My8wLzM3MTk2N0RGQkQyMDNBMkZE NDRFODhGNzg2RDlGMEYwQzg4RTRCQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJn53ADBAHKCBwwDQYJKoZIhvcNAQELBQADggEBACQCGH6Vd5C5dW9K2CnP3q04 +Uiv3/0PTp3UV+i2qqWlzeE9eqYLAPAp2aXZywENM8faTawaUfmM0lRKFqUq7iqP lqeuQ0Cygm8eq6ThLg3JceGkuuIm2mXrTXgqaqhtlpa3KT42p1+MqyiX0kib5hy9 zkI4uPZdtZynNLAt6izD9NRRd7uzGHP7l5H0VesBIiCysFv18v5G27k3K3PRBA32 qxmoSr9t9iMJYJZdIjTIs5pFXBwroaHaF2djDdfQumPoq+R34F50meW79VRpBVox YRvDVw9GU5483nRGImIt/N/ibYu2sM+vjHTMP9ja9o8QDNC9H0CCNjBw0AECY+w= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:20 2024 by rpki-client on console-ams.rpki-client.org