$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer (raw, json) Hash identifier: Wr/KWLcCFP5obDCHCOmi/5gh7jPl2deSxMVWD8rNx2A= Subject key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 169BF432D992736DEB4F22B533D5EB177CB5AB13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 17 Aug 2023 12:05:29 +0000 Certificate not after: Thu 15 Aug 2024 12:10:29 +0000 Subordinate resources: IP: 103.160.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:f4:32:d9:92:73:6d:eb:4f:22:b5:33:d5:eb:17:7c:b5:ab:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 17 12:05:29 2023 GMT Not After : Aug 15 12:10:29 2024 GMT Subject: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:93:e2:32:46:25:43:6f:71:57:b1:a4:87: 8d:4a:5c:b6:07:a5:30:aa:20:16:f4:68:7d:73:43: 3a:45:95:d3:ed:b6:ee:41:37:46:72:d5:3a:d8:7a: 90:f7:aa:4f:4a:f3:5d:fa:d7:3d:65:e0:7a:fd:67: d6:4c:5e:e2:2e:4e:b7:90:ed:93:0a:1f:1c:fd:d3: 1c:e6:85:eb:fc:e3:77:89:c7:69:1f:c2:f4:7d:2d: a9:2d:81:21:97:bb:c6:7e:2f:83:0e:8a:54:46:37: ec:9d:46:39:d2:d6:96:9b:ab:b6:c0:f8:98:96:d2: a6:23:68:35:93:80:f9:b1:da:4e:a4:86:a4:ad:d7: 44:d7:d4:40:f6:dc:3b:d7:47:00:ba:ad:38:af:6f: 8a:50:85:ed:b6:fe:13:12:af:f4:63:c2:a3:0b:a1: dd:04:14:78:af:8c:e1:36:b8:8b:2b:56:59:1b:47: 8f:00:fa:eb:3a:bf:7a:71:45:1a:a6:48:8d:15:99: 38:dd:8c:83:5d:f8:1c:e7:2a:16:ea:a5:44:52:2b: 76:7e:02:31:88:bb:41:32:e0:3a:c4:6e:3d:c9:5b: b4:ca:8c:8f:25:2c:d6:25:d2:3b:59:6e:cf:0b:fe: 1f:74:53:30:75:39:3b:d1:33:66:52:1b:3d:1f:8b: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.68.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:86:ff:cc:f1:f1:73:2c:c7:5f:a3:2c:5e:dc:bc:b9:fa:bd: a0:89:68:81:28:ac:0a:f3:5a:b9:d4:d1:9d:92:63:c8:04:8e: 0d:50:bf:30:5d:23:2f:c4:7f:ba:47:a1:87:76:80:9b:51:9d: 72:d4:19:f6:0d:42:99:59:f2:70:57:71:10:66:a0:ad:69:af: 74:ba:2f:ef:87:b4:80:3b:88:e6:5e:d2:b7:66:04:eb:5d:c5: a3:a0:e8:77:50:93:2b:d1:6f:77:2e:e4:6c:7a:bf:1e:ec:91: c1:17:52:05:74:e4:b2:40:8c:5c:0f:53:a0:d9:bc:67:bd:1e: 78:e1:ea:5e:d9:7d:e2:c3:c2:59:c2:08:40:69:51:5f:cf:2d: d4:3a:89:32:54:27:db:0e:cb:a1:b5:86:61:be:67:f0:e8:31: 73:df:d9:0b:e0:16:16:94:a8:59:34:b8:91:93:f4:4b:f2:82: b4:c7:75:26:a5:0d:05:4f:f6:a5:64:55:56:78:4b:45:dd:da: 03:89:7c:00:ae:72:87:de:48:aa:48:28:66:f4:2f:a6:f3:53: 88:3d:be:00:3b:18:9c:d2:9f:76:49:a4:31:2e:58:f3:6b:47: 26:42:f3:47:71:76:9b:0b:67:ff:63:c8:ba:a7:26:84:b5:db: a8:20:b4:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFpv0MtmSc23rTyK1M9XrF3y1qxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxNzEyMDUyOVoX DTI0MDgxNTEyMTAyOVowMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFB Njg0RkZDRjUzRkZGOURERTNERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnik+IyRiVDb3FXsaSHjUpctgelMKogFvRofXNDOkWV0+227kE3RnLVOth6 kPeqT0rzXfrXPWXgev1n1kxe4i5Ot5DtkwofHP3THOaF6/zjd4nHaR/C9H0tqS2B IZe7xn4vgw6KVEY37J1GOdLWlpurtsD4mJbSpiNoNZOA+bHaTqSGpK3XRNfUQPbc O9dHALqtOK9vilCF7bb+ExKv9GPCowuh3QQUeK+M4Ta4iytWWRtHjwD66zq/enFF GqZIjRWZON2Mg134HOcqFuqlRFIrdn4CMYi7QTLgOsRuPclbtMqMjyUs1iXSO1lu zwv+H3RTMHU5O9EzZlIbPR+LWoECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEAapWr1mcyizXGmhP/PU//53ePdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzc5ZmJl LTQ3OTAtNDZiZS1iOWIyLTAzNTliMWExOGUzMy8wLzQwMUFBNTZBRjU5OUNDQTJD RDcxQTY4NEZGQ0Y1M0ZGRjlEREUzREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoEQwDQYJKoZIhvcNAQELBQADggEBAH+G/8zx8XMsx1+jLF7cvLn6vaCJaIEo rArzWrnU0Z2SY8gEjg1QvzBdIy/Ef7pHoYd2gJtRnXLUGfYNQplZ8nBXcRBmoK1p r3S6L++HtIA7iOZe0rdmBOtdxaOg6HdQkyvRb3cu5Gx6vx7skcEXUgV05LJAjFwP U6DZvGe9Hnjh6l7ZfeLDwlnCCEBpUV/PLdQ6iTJUJ9sOy6G1hmG+Z/DoMXPf2Qvg FhaUqFk0uJGT9EvygrTHdSalDQVP9qVkVVZ4S0Xd2gOJfACucofeSKpIKGb0L6bz U4g9vgA7GJzSn3ZJpDEuWPNrRyZC80dxdpsLZ/9jyLqnJoS126ggtLE= -----END CERTIFICATE-----Generated at Wed May 8 10:06:47 2024 by rpki-client on console-ams.rpki-client.org