$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer (raw, json) Hash identifier: llDy/mst4hG/HP9FLcHu3EevxRVnEhCkl/H2f2RSnVg= Subject key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 458C8C0C3E1C89C0F0D2CA976DF1D7980E3E20F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft caRepository: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Oct 2023 17:54:11 +0000 Certificate not after: Wed 16 Oct 2024 17:59:11 +0000 Subordinate resources: IP: 103.143.20.0/24 IP: 2001:df1:6780::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8c:8c:0c:3e:1c:89:c0:f0:d2:ca:97:6d:f1:d7:98:0e:3e:20:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 18 17:54:11 2023 GMT Not After : Oct 16 17:59:11 2024 GMT Subject: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:47:46:4f:fe:5e:fc:b8:d1:82:ff:59:5c: 83:1a:16:47:50:d8:59:f1:dd:81:68:04:2f:07:04: 56:9d:14:8c:66:62:76:cb:9c:09:62:1b:65:fb:5e: b8:f7:86:93:5d:20:5d:17:e6:e2:24:30:47:6c:1e: 5d:af:cd:db:4c:ad:c7:f3:f9:a3:4d:7e:f9:77:73: b7:d2:1c:a0:82:2a:59:f6:25:f7:0e:44:b1:6a:21: e0:8f:be:37:b4:4a:e1:dd:46:fd:97:00:8e:d2:6c: c3:c7:4b:eb:44:cc:a2:69:be:22:e7:89:6e:82:ab: f3:66:d1:cf:e9:dd:a7:1c:da:f9:16:34:1d:dc:d9: e2:45:bc:a0:90:e6:df:b2:79:68:1d:17:b4:f3:bd: c9:70:ba:29:c6:bf:c3:32:a5:dd:68:89:ef:b9:05: 90:96:f9:bc:68:c4:49:76:14:fb:14:27:1a:34:79: f5:40:16:b0:10:08:52:c9:14:8b:57:d8:e3:e3:b3: 8d:8a:88:75:31:c4:2b:03:d3:44:e2:d7:c7:87:52: 8a:29:f5:d3:c0:f7:b8:66:dd:8d:3a:8c:56:8b:f4: a5:ed:3e:8a:cb:9f:73:02:88:b5:3a:70:c0:3d:fb: 95:da:90:02:25:ab:6e:f0:c1:69:43:c5:95:60:78: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.20.0/24 IPv6: 2001:df1:6780::/48 Signature Algorithm: sha256WithRSAEncryption 18:5c:85:35:98:f1:ce:1d:a6:e4:b3:6e:c0:be:e0:f3:ab:53: fe:49:bb:10:e5:55:49:e6:7c:ad:cf:1a:43:81:85:24:dd:eb: 83:ed:2c:14:91:91:f5:de:8b:65:c8:36:57:23:11:bc:3e:57: d0:51:e0:0d:24:a9:d6:3b:69:af:f0:24:20:6b:42:e4:5e:5e: 71:fb:41:83:71:19:b3:11:8f:7e:76:a9:dd:40:31:74:4d:c6: bd:35:37:bc:d3:bf:d2:b4:14:f8:fa:1c:4a:e0:46:df:d6:0a: 12:a8:81:36:25:76:16:2b:e6:c6:0c:6e:a7:c6:ff:ce:a7:0c: 99:c5:57:25:be:32:01:08:99:5b:05:e2:d8:c9:3d:4b:95:0e: 33:2f:f7:95:0b:41:87:89:a0:e9:bc:27:7f:63:67:cd:ca:68: c3:92:0f:70:6c:57:bb:cb:2a:cf:d1:4a:31:e5:a6:38:6a:9e: fa:88:bc:72:7c:6d:48:ed:5a:45:0a:93:f1:6e:ad:ca:14:c3: b5:b9:72:49:c4:96:c2:7d:12:5d:37:68:8d:a6:94:e8:42:f2: ca:42:ee:ef:ac:3c:5b:1e:10:72:18:5f:7a:e3:fe:8f:b7:23: c6:e3:ef:d5:31:f8:a0:2c:0e:1b:59:07:a9:5a:e3:47:97:e9: 79:24:5d:70 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIURYyMDD4cicDw0sqXbfHXmA4+IPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxODE3NTQxMVoX DTI0MTAxNjE3NTkxMVowMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFC MURFMDYzRjgyQzYxRTA4MDFGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKPR0ZP/l78uNGC/1lcgxoWR1DYWfHdgWgELwcEVp0UjGZidsucCWIbZfte uPeGk10gXRfm4iQwR2weXa/N20ytx/P5o01++Xdzt9IcoIIqWfYl9w5EsWoh4I++ N7RK4d1G/ZcAjtJsw8dL60TMomm+IueJboKr82bRz+ndpxza+RY0HdzZ4kW8oJDm 37J5aB0XtPO9yXC6Kca/wzKl3WiJ77kFkJb5vGjESXYU+xQnGjR59UAWsBAIUskU i1fY4+OzjYqIdTHEKwPTROLXx4dSiin108D3uGbdjTqMVov0pe0+isufcwKItTpw wD37ldqQAiWrbvDBaUPFlWB4sHsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECDlZFKGnT/Tmqx3gY/gsYeCAHyMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3OGMzYzY5 LTM2ZDAtNGFlOC1hOGRmLTYzZDNmNDRjY2Q4ZC8wLzQwODM5NTkxNEExQTc0RkY0 RTZBQjFERTA2M0Y4MkM2MUUwODAxRjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnjxQwDwQCAAIwCQMHACABDfFngDANBgkqhkiG9w0BAQsFAAOCAQEAGFyFNZjx zh2m5LNuwL7g86tT/km7EOVVSeZ8rc8aQ4GFJN3rg+0sFJGR9d6LZcg2VyMRvD5X 0FHgDSSp1jtpr/AkIGtC5F5ecftBg3EZsxGPfnap3UAxdE3GvTU3vNO/0rQU+Poc SuBG39YKEqiBNiV2Fivmxgxup8b/zqcMmcVXJb4yAQiZWwXi2Mk9S5UOMy/3lQtB h4mg6bwnf2Nnzcpow5IPcGxXu8sqz9FKMeWmOGqe+oi8cnxtSO1aRQqT8W6tyhTD tblyScSWwn0SXTdojaaU6ELyykLu76w8Wx4QchhfeuP+j7cjxuPv1TH4oCwOG1kH qVrjR5fpeSRdcA== -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org