$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer File: 528A271B82B6185862B06F250499140113F6FE20.cer (raw, json) Hash identifier: OFmU1YS+p1eToPsAl26satCxeri/fm/Yg/2IOB6bC2c= Subject key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A1020997CECFE0092DB056EF28EF91100556B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft caRepository: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Apr 2024 19:38:17 +0000 Certificate not after: Fri 11 Apr 2025 19:43:17 +0000 Subordinate resources: IP: 103.189.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:10:20:99:7c:ec:fe:00:92:db:05:6e:f2:8e:f9:11:00:55:6b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 12 19:38:17 2024 GMT Not After : Apr 11 19:43:17 2025 GMT Subject: CN=528A271B82B6185862B06F250499140113F6FE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:db:1a:ef:96:31:21:7e:d9:c2:e0:31:e0: c6:37:09:99:13:b5:40:c8:5f:32:c8:bb:ce:71:e4: 93:fe:a5:15:1f:7e:ee:42:f5:58:48:7b:2f:8a:67: f4:df:bd:ca:b2:ea:d0:a4:f8:e9:7d:1a:f4:f5:43: df:ba:0f:43:77:f3:76:aa:88:3a:25:0d:9e:e9:f2: 2e:d4:4c:20:a5:2c:ef:86:0e:ea:53:84:88:db:f9: 1b:ea:0e:ed:db:5c:7c:ac:e0:45:e1:e5:72:13:e4: 49:d6:09:b8:db:2d:c8:ac:bb:b1:63:15:ac:d3:5f: a8:ae:25:2c:19:df:6b:6b:99:59:b7:05:82:c6:91: 43:da:8a:bf:d8:74:6c:0c:44:73:c6:54:25:0b:f7: de:1c:a2:1c:d4:93:34:e8:e0:17:f1:02:43:90:8b: 60:8a:d8:90:b5:7a:d5:be:47:c1:39:cc:a0:6a:4c: e8:a9:59:71:0a:e7:1c:c9:b3:3b:69:7c:dc:b4:94: 52:0a:49:8a:5d:26:ea:3e:6d:24:65:d1:9a:08:81: d3:ab:7f:f0:92:6b:9f:92:78:df:77:23:4e:fa:43: a2:56:4a:ea:4f:e8:8f:76:e7:2c:4a:c0:41:07:7b: e7:51:47:95:b2:40:36:97:2e:c5:00:4c:98:60:e8: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.60.0/23 Signature Algorithm: sha256WithRSAEncryption 34:a1:f0:25:d8:6b:83:5c:04:01:95:3c:15:b5:63:a6:71:b2: 6c:38:1b:49:4b:37:3b:5a:b4:34:b0:cf:d4:68:8c:99:fe:84: df:e5:3e:24:32:0f:90:15:1d:61:af:d4:6d:2f:a4:28:93:9e: f7:8c:2b:8d:0a:b7:c9:bd:20:9f:f5:50:5b:9b:d7:a9:42:7f: c9:60:6c:e0:53:fe:bb:d5:17:f5:e5:44:2d:d0:37:e3:c2:30: 9b:ab:cb:13:0a:1a:eb:a2:dd:d2:63:10:7b:8a:96:2d:82:80: a2:26:59:a1:33:7c:da:d8:01:fe:fe:59:03:3e:81:53:b4:04: aa:e2:08:09:1a:42:b0:a9:63:29:4e:8d:cc:5b:1e:2a:10:87: 0c:28:67:50:b1:57:c5:c5:ef:b7:d2:b3:07:ad:e1:c6:a0:61: 67:2b:06:cf:c2:61:5b:f0:92:36:f6:e0:60:27:3e:31:71:47: 4a:1e:f9:2c:0c:6e:f8:3e:7d:0c:f1:49:1f:a5:34:b0:3e:2d: f8:1d:16:cd:0f:8d:a7:e9:c2:94:68:23:85:4e:4b:19:01:63: d3:00:da:7b:5a:8a:7b:0e:64:46:1a:56:98:e6:92:13:b0:dc: 63:15:e3:86:8c:79:99:7d:e5:74:23:0b:bf:b2:b3:b2:b9:c2: b0:76:79:eb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOhAgmXzs/gCS2wVu8o75EQBVa5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMjE5MzgxN1oX DTI1MDQxMTE5NDMxN1owMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2 RjI1MDQ5OTE0MDExM0Y2RkUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMj82xrvljEhftnC4DHgxjcJmRO1QMhfMsi7znHkk/6lFR9+7kL1WEh7L4pn 9N+9yrLq0KT46X0a9PVD37oPQ3fzdqqIOiUNnunyLtRMIKUs74YO6lOEiNv5G+oO 7dtcfKzgReHlchPkSdYJuNstyKy7sWMVrNNfqK4lLBnfa2uZWbcFgsaRQ9qKv9h0 bAxEc8ZUJQv33hyiHNSTNOjgF/ECQ5CLYIrYkLV61b5HwTnMoGpM6KlZcQrnHMmz O2l83LSUUgpJil0m6j5tJGXRmgiB06t/8JJrn5J433cjTvpDolZK6k/oj3bnLErA QQd751FHlbJANpcuxQBMmGDo9ysCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFKKJxuCthhYYrBvJQSZFAET9v4gMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhZDNjYzhh LTk3MzgtNDUxYi1hNzk4LTdiNzZiMDk0MGI0Yi8wLzUyOEEyNzFCODJCNjE4NTg2 MkIwNkYyNTA0OTkxNDAxMTNGNkZFMjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvTwwDQYJKoZIhvcNAQELBQADggEBADSh8CXYa4NcBAGVPBW1Y6Zxsmw4G0lL NztatDSwz9RojJn+hN/lPiQyD5AVHWGv1G0vpCiTnveMK40Kt8m9IJ/1UFub16lC f8lgbOBT/rvVF/XlRC3QN+PCMJuryxMKGuui3dJjEHuKli2CgKImWaEzfNrYAf7+ WQM+gVO0BKriCAkaQrCpYylOjcxbHioQhwwoZ1CxV8XF77fSswet4cagYWcrBs/C YVvwkjb24GAnPjFxR0oe+SwMbvg+fQzxSR+lNLA+LfgdFs0PjafpwpRoI4VOSxkB Y9MA2ntainsOZEYaVpjmkhOw3GMV44aMeZl95XQjC7+ys7K5wrB2ees= -----END CERTIFICATE-----Generated at Wed May 8 17:45:18 2024 by rpki-client on console-ams.rpki-client.org