$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer (raw, json) Hash identifier: bsekJmP/PJVfrL07tOh2rmHs7OntX/FrUQGVc7NAz7U= Subject key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15BA93404FFC1A1C60A1AF376C413566AB07C26C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft caRepository: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 10 Jun 2024 07:58:10 +0000 Certificate not after: Mon 09 Jun 2025 08:03:10 +0000 Subordinate resources: IP: 103.14.231.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ba:93:40:4f:fc:1a:1c:60:a1:af:37:6c:41:35:66:ab:07:c2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 10 07:58:10 2024 GMT Not After : Jun 9 08:03:10 2025 GMT Subject: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:73:a1:53:f6:e9:58:da:7c:18:96:43:1c: 00:e6:50:8e:f1:00:ca:22:e9:b5:6d:2d:05:c0:f8: 9f:ad:b6:b3:b9:69:57:8b:60:b6:73:8e:89:60:3e: 71:26:75:4b:fc:c2:2f:de:12:81:21:f2:7a:91:32: 10:c7:e2:d4:38:54:2d:53:54:9c:81:7d:4a:41:2e: 3c:25:5b:6f:c4:35:5f:ed:a2:07:1a:86:6e:03:e0: 11:5b:02:aa:c4:1b:d3:a3:a9:51:5d:2a:98:26:02: bf:b3:dc:0f:f5:ff:d4:07:d0:f2:06:43:50:9e:ef: 3b:25:f4:54:95:f5:e1:4c:05:70:6b:7b:7b:8e:45: b1:62:36:57:64:47:2f:9d:1a:4b:f8:e4:2b:97:1d: 1e:e3:05:6f:18:94:e4:12:34:1e:74:21:20:ed:65: 24:83:fb:ac:54:53:32:1c:4f:b3:1f:29:31:85:4c: 9a:03:26:2f:2d:a5:4e:99:58:bd:4c:8f:87:c5:c1: 8e:02:83:dd:8d:96:b8:59:3b:0c:58:33:fc:60:cf: c7:9e:03:e3:d1:23:84:2c:f3:c1:e1:b0:59:7d:9a: f7:d2:27:a2:35:11:52:b5:90:92:aa:8f:42:65:e4: 61:a7:6e:fe:53:e5:ec:37:e1:e9:aa:22:25:a7:4b: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.231.0/24 Signature Algorithm: sha256WithRSAEncryption 95:2b:d9:a4:0b:95:2d:8f:9f:7e:15:e7:9e:c4:b5:9b:f4:b2: 30:cb:3b:d6:b0:d7:48:e9:0c:da:4a:5b:75:93:d1:63:3f:96: f4:a7:97:b9:75:93:5f:d4:1c:c6:71:50:70:0a:f9:ee:62:ba: db:2a:bb:da:8e:bf:0d:40:58:20:5c:d7:56:f6:7f:c6:4c:6f: e5:3c:1a:4c:6a:52:c2:9b:25:69:8e:1d:ca:e2:2e:83:62:ba: 62:57:b6:1d:6d:5b:87:9b:fc:ee:ca:b1:bc:3c:b8:04:5a:f5: 55:25:1c:31:4e:7d:cf:a2:4c:81:c1:5d:41:45:dc:18:84:2f: f2:de:14:19:80:40:a7:9d:5d:53:28:8c:8b:78:11:85:a9:cc: 77:d3:12:36:81:25:34:ab:51:13:78:4c:12:5f:b8:b0:02:7e: d2:7a:d9:80:df:34:8f:54:9d:2a:72:78:ae:f5:9c:dc:57:ad: 10:21:fa:ab:7c:45:64:c0:41:94:72:ce:35:2a:e7:0a:30:8a: a0:f8:6c:ee:ae:e4:7e:01:15:b8:6f:a9:48:35:c2:87:16:cb: 45:9f:61:e7:75:d9:68:bc:83:08:18:a4:a6:af:e5:c3:b6:75: 84:ed:15:39:81:17:04:2e:75:3a:6a:2d:71:73:a5:e4:65:9a: 97:84:ff:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFbqTQE/8Ghxgoa83bEE1ZqsHwmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxMDA3NTgxMFoX DTI1MDYwOTA4MDMxMFowMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMx RjlBNUI2RENEQTE5MTVBQzc2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbbc6FT9ulY2nwYlkMcAOZQjvEAyiLptW0tBcD4n622s7lpV4tgtnOOiWA+ cSZ1S/zCL94SgSHyepEyEMfi1DhULVNUnIF9SkEuPCVbb8Q1X+2iBxqGbgPgEVsC qsQb06OpUV0qmCYCv7PcD/X/1AfQ8gZDUJ7vOyX0VJX14UwFcGt7e45FsWI2V2RH L50aS/jkK5cdHuMFbxiU5BI0HnQhIO1lJIP7rFRTMhxPsx8pMYVMmgMmLy2lTplY vUyPh8XBjgKD3Y2WuFk7DFgz/GDPx54D49EjhCzzweGwWX2a99InojURUrWQkqqP QmXkYadu/lPl7Dfh6aoiJadLTW0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBwalzPqJbI7gwfmlttzaGRWsdtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkZjQyOTZm LTFjYTktNDVmYy1iYjA4LTg0MTM1ZWIwMGZhNy8wLzQwNzA2QTVDQ0ZBODk2QzhF RTBDMUY5QTVCNkRDREExOTE1QUM3NkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnDucwDQYJKoZIhvcNAQELBQADggEBAJUr2aQLlS2Pn34V557EtZv0sjDLO9aw 10jpDNpKW3WT0WM/lvSnl7l1k1/UHMZxUHAK+e5iutsqu9qOvw1AWCBc11b2f8ZM b+U8GkxqUsKbJWmOHcriLoNiumJXth1tW4eb/O7Ksbw8uARa9VUlHDFOfc+iTIHB XUFF3BiEL/LeFBmAQKedXVMojIt4EYWpzHfTEjaBJTSrURN4TBJfuLACftJ62YDf NI9UnSpyeK71nNxXrRAh+qt8RWTAQZRyzjUq5wowiqD4bO6u5H4BFbhvqUg1wocW y0WfYed12Wi8gwgYpKav5cO2dYTtFTmBFwQudTpqLXFzpeRlmpeE/0o= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org