$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer (raw, json) Hash identifier: wRRyPcpbiaLcZleRRUXdNm+ta+PvImxLhln8Hg27p1s= Subject key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F7243B4FE21A53CE21F4ED813E881AF8AF7EC7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Jul 2024 00:33:08 +0000 Certificate not after: Fri 18 Jul 2025 00:38:08 +0000 Subordinate resources: IP: 103.160.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:72:43:b4:fe:21:a5:3c:e2:1f:4e:d8:13:e8:81:af:8a:f7:ec:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 19 00:33:08 2024 GMT Not After : Jul 18 00:38:08 2025 GMT Subject: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:93:e2:32:46:25:43:6f:71:57:b1:a4:87: 8d:4a:5c:b6:07:a5:30:aa:20:16:f4:68:7d:73:43: 3a:45:95:d3:ed:b6:ee:41:37:46:72:d5:3a:d8:7a: 90:f7:aa:4f:4a:f3:5d:fa:d7:3d:65:e0:7a:fd:67: d6:4c:5e:e2:2e:4e:b7:90:ed:93:0a:1f:1c:fd:d3: 1c:e6:85:eb:fc:e3:77:89:c7:69:1f:c2:f4:7d:2d: a9:2d:81:21:97:bb:c6:7e:2f:83:0e:8a:54:46:37: ec:9d:46:39:d2:d6:96:9b:ab:b6:c0:f8:98:96:d2: a6:23:68:35:93:80:f9:b1:da:4e:a4:86:a4:ad:d7: 44:d7:d4:40:f6:dc:3b:d7:47:00:ba:ad:38:af:6f: 8a:50:85:ed:b6:fe:13:12:af:f4:63:c2:a3:0b:a1: dd:04:14:78:af:8c:e1:36:b8:8b:2b:56:59:1b:47: 8f:00:fa:eb:3a:bf:7a:71:45:1a:a6:48:8d:15:99: 38:dd:8c:83:5d:f8:1c:e7:2a:16:ea:a5:44:52:2b: 76:7e:02:31:88:bb:41:32:e0:3a:c4:6e:3d:c9:5b: b4:ca:8c:8f:25:2c:d6:25:d2:3b:59:6e:cf:0b:fe: 1f:74:53:30:75:39:3b:d1:33:66:52:1b:3d:1f:8b: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.68.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:84:0d:c0:99:47:b9:89:8a:1f:d9:ee:e9:91:bc:73:d2:43: 37:fc:13:fe:9f:a9:8d:c9:9b:23:96:cc:e7:c5:60:b5:42:ef: f8:31:1d:0d:bc:e3:04:58:8d:09:20:2d:7f:e9:5a:69:ce:80: f1:35:73:73:80:c8:93:aa:ab:e4:09:f1:be:e1:be:5f:66:b5: c3:f7:7b:74:69:1c:bc:bf:c2:04:5c:dd:fa:24:29:60:5b:75: ca:70:7b:12:73:75:8c:27:f3:0d:59:05:a1:80:06:65:1a:72: 99:83:43:53:66:12:66:80:d8:af:b3:c5:d5:af:b6:80:ae:00: e6:73:b8:0c:36:fa:cf:25:ba:65:06:e7:f6:a3:f7:96:39:6f: 7c:00:9f:bc:d5:dd:5a:dd:44:3b:2b:1c:55:9c:51:bd:91:48: f2:c3:74:7c:e1:83:52:0c:89:55:a9:df:bd:db:6f:ce:f4:31: 46:85:27:74:ea:b8:e7:3c:f7:db:ec:71:39:d3:40:13:ec:d3: 3f:5f:0c:0a:d3:8c:39:61:13:b3:42:20:e6:02:b9:3d:e4:ce: 22:f6:11:ae:b0:0e:e1:a2:48:55:9e:9b:cf:16:0f:16:f3:03: ed:ae:66:9d:da:93:d2:5c:a2:36:9b:41:03:6a:e6:f0:22:93: d6:fb:77:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX3JDtP4hpTziH07YE+iBr4r37H0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxOTAwMzMwOFoX DTI1MDcxODAwMzgwOFowMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFB Njg0RkZDRjUzRkZGOURERTNERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnik+IyRiVDb3FXsaSHjUpctgelMKogFvRofXNDOkWV0+227kE3RnLVOth6 kPeqT0rzXfrXPWXgev1n1kxe4i5Ot5DtkwofHP3THOaF6/zjd4nHaR/C9H0tqS2B IZe7xn4vgw6KVEY37J1GOdLWlpurtsD4mJbSpiNoNZOA+bHaTqSGpK3XRNfUQPbc O9dHALqtOK9vilCF7bb+ExKv9GPCowuh3QQUeK+M4Ta4iytWWRtHjwD66zq/enFF GqZIjRWZON2Mg134HOcqFuqlRFIrdn4CMYi7QTLgOsRuPclbtMqMjyUs1iXSO1lu zwv+H3RTMHU5O9EzZlIbPR+LWoECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEAapWr1mcyizXGmhP/PU//53ePdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzc5ZmJl LTQ3OTAtNDZiZS1iOWIyLTAzNTliMWExOGUzMy8wLzQwMUFBNTZBRjU5OUNDQTJD RDcxQTY4NEZGQ0Y1M0ZGRjlEREUzREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoEQwDQYJKoZIhvcNAQELBQADggEBAI2EDcCZR7mJih/Z7umRvHPSQzf8E/6f qY3JmyOWzOfFYLVC7/gxHQ284wRYjQkgLX/pWmnOgPE1c3OAyJOqq+QJ8b7hvl9m tcP3e3RpHLy/wgRc3fokKWBbdcpwexJzdYwn8w1ZBaGABmUacpmDQ1NmEmaA2K+z xdWvtoCuAOZzuAw2+s8lumUG5/aj95Y5b3wAn7zV3VrdRDsrHFWcUb2RSPLDdHzh g1IMiVWp373bb870MUaFJ3TquOc899vscTnTQBPs0z9fDArTjDlhE7NCIOYCuT3k ziL2Ea6wDuGiSFWem88WDxbzA+2uZp3ak9JcojabQQNq5vAik9b7d7A= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:20 2024 by rpki-client on console-ams.rpki-client.org