$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.cer (raw, json) Hash identifier: 5yVQE1tEZ9uEwiTw31teRCSaog1uih2+dpewiyk9icE= Subject key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2576508EEBB365269052E4A063F4E9862A73E156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 19:36:51 +0000 Certificate not after: Fri 04 Apr 2025 19:41:51 +0000 Subordinate resources: IP: 103.122.121.0/24 IP: 2001:df6:af00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:76:50:8e:eb:b3:65:26:90:52:e4:a0:63:f4:e9:86:2a:73:e1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 5 19:36:51 2024 GMT Not After : Apr 4 19:41:51 2025 GMT Subject: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:16:10:45:1f:7d:00:f2:d9:17:da:91:30: 69:d6:ce:dd:ed:c1:d5:a8:9d:41:c6:ce:9c:b0:8b: 01:85:dc:29:0b:68:ff:d7:df:17:64:68:b4:a0:26: 15:72:d3:36:50:78:0f:e7:7d:e8:57:58:0e:65:a2: df:7b:05:5f:5e:e8:c3:4f:06:62:65:a2:97:c6:33: ce:10:06:9a:2c:fe:df:11:59:ec:69:a5:26:ae:79: 67:a4:b6:4b:f1:05:ea:c6:e9:c3:fb:d5:7e:0b:ca: 21:ae:82:53:a3:d0:91:e5:fb:fd:db:8d:97:6c:c6: 37:74:9b:c2:19:46:2b:a8:18:96:2c:d3:d5:e6:24: 93:30:43:95:db:a4:a3:23:77:c9:10:e9:10:7b:2c: 1e:73:38:67:5a:ea:4c:87:5d:d3:d5:1d:f6:63:46: be:42:a9:a8:59:32:6b:3a:b7:f9:06:90:8d:b5:11: 99:b5:e2:95:8d:32:ae:8d:6c:81:ba:10:18:2e:cb: b9:26:2f:1d:7a:a4:1b:be:82:77:ee:0a:41:18:89: 79:ac:90:c0:53:68:ac:37:f4:78:34:d9:bc:75:d9: 6b:6a:ef:bf:ec:26:d7:72:55:80:3d:8d:54:85:da: 2d:91:82:4b:42:bd:42:48:06:42:a4:fd:0d:60:2e: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.121.0/24 IPv6: 2001:df6:af00::/48 Signature Algorithm: sha256WithRSAEncryption 66:01:42:0a:eb:4d:14:2b:5c:b9:0b:81:0b:40:bf:e4:cf:2b: b2:e3:ec:2e:b0:b2:83:67:b1:2d:01:36:a0:a2:9b:42:3e:a0: b7:3b:08:77:d9:e2:10:5f:80:d2:57:fb:a2:ca:87:4c:f2:07: 6b:07:15:79:ec:f8:87:d3:40:cb:51:a1:3b:6e:2f:11:94:d1: 6c:c3:1f:e8:60:16:0d:ba:d4:27:ed:13:6f:1b:8d:37:6e:57: 06:4b:6d:ca:7d:d4:b9:95:a7:d6:97:05:da:dc:c3:c8:00:7d: 38:ca:f8:f5:b1:a9:3c:9c:53:46:d9:2c:3c:c1:3f:9f:71:01: ac:d4:bb:0f:5c:8a:8d:69:5c:72:f5:ac:77:af:8f:d2:6b:b2: df:98:1c:c9:4c:aa:e2:0e:35:c9:dc:f3:93:1e:1d:1b:b0:7a: e3:6f:e2:cc:44:f1:e5:07:67:ef:fb:4b:03:f4:42:76:77:a6: a3:12:49:bb:5c:46:99:bd:cf:f8:cc:40:ad:9b:6f:9d:ba:de: 26:e7:26:b9:4b:29:4a:aa:2c:90:80:ab:68:89:c1:d9:98:1f: de:8a:fe:e6:fa:31:c5:04:bf:3a:eb:58:9c:79:ac:28:77:43: f9:8b:15:c8:96:ca:2e:dc:dc:95:fb:f4:c7:45:cf:f9:68:41: 1b:52:46:3f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJXZQjuuzZSaQUuSgY/Tphipz4VYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNTE5MzY1MVoX DTI1MDQwNDE5NDE1MVowMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQy NEU5QkVEQzNCOTE0MTFDMjI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXVFhBFH30A8tkX2pEwadbO3e3B1aidQcbOnLCLAYXcKQto/9ffF2RotKAm FXLTNlB4D+d96FdYDmWi33sFX17ow08GYmWil8YzzhAGmiz+3xFZ7GmlJq55Z6S2 S/EF6sbpw/vVfgvKIa6CU6PQkeX7/duNl2zGN3SbwhlGK6gYlizT1eYkkzBDlduk oyN3yRDpEHssHnM4Z1rqTIdd09Ud9mNGvkKpqFkyazq3+QaQjbURmbXilY0yro1s gboQGC7LuSYvHXqkG76Cd+4KQRiJeayQwFNorDf0eDTZvHXZa2rvv+wm13JVgD2N VIXaLZGCS0K9QkgGQqT9DWAuGosCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECFhcHWKk9hjAQk6b7cO5FBHCJ2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iN2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3ZTI2Yzgz LTVlZDItNGM4Yi04YTAzLTZjYjAwZDFlZDMzOC8wLzQwODU4NUMxRDYyQTRGNjE4 QzA0MjRFOUJFREMzQjkxNDExQzIyNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnenkwDwQCAAIwCQMHACABDfavADANBgkqhkiG9w0BAQsFAAOCAQEAZgFCCutN FCtcuQuBC0C/5M8rsuPsLrCyg2exLQE2oKKbQj6gtzsId9niEF+A0lf7osqHTPIH awcVeez4h9NAy1GhO24vEZTRbMMf6GAWDbrUJ+0TbxuNN25XBkttyn3UuZWn1pcF 2tzDyAB9OMr49bGpPJxTRtksPME/n3EBrNS7D1yKjWlccvWsd6+P0muy35gcyUyq 4g41ydzzkx4dG7B642/izETx5Qdn7/tLA/RCdnemoxJJu1xGmb3P+MxArZtvnbre JucmuUspSqoskICraInB2Zgf3or+5voxxQS/OutYnHmsKHdD+YsVyJbKLtzclfv0 x0XP+WhBG1JGPw== -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org