$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer (raw, json) Hash identifier: kf+Dq9hHDrqsrCn+WAuWYgDapGR6VbwU5hwqeq0Hzd4= Subject key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70960ED0B6A84F20057C536D35C661CFF2896775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Sep 2023 14:47:09 +0000 Certificate not after: Mon 09 Sep 2024 14:52:09 +0000 Subordinate resources: IP: 103.148.100.0/23 IP: 2405:ce40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:96:0e:d0:b6:a8:4f:20:05:7c:53:6d:35:c6:61:cf:f2:89:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 11 14:47:09 2023 GMT Not After : Sep 9 14:52:09 2024 GMT Subject: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:e8:1b:b7:20:30:51:12:44:10:db:54:99: 3d:1c:32:ff:5b:e8:bb:15:df:86:8a:b0:94:9c:de: da:59:f2:2a:f4:38:b6:f7:30:b6:39:c7:ea:79:a5: 07:ff:4f:d4:a0:77:8e:f7:b3:5c:26:6d:38:1b:4a: 29:35:e0:15:3c:07:d8:61:3e:13:36:c9:05:d1:a9: c8:c5:9a:04:f3:c5:6d:c1:63:4e:c7:8d:5f:40:bd: ea:2e:1b:be:d8:76:c1:8e:9b:e5:52:c0:51:a5:15: df:b1:3b:85:ae:98:87:be:6a:bc:b1:3c:cd:32:c6: fc:9b:19:d9:04:1c:3f:10:f7:b2:2a:29:d6:4a:76: 33:be:f8:a2:39:6c:67:b3:71:7e:f5:0a:22:db:2b: 49:5e:f0:a5:21:f0:ca:06:5f:1c:b9:d2:7b:70:13: 3c:2d:26:13:d1:7d:77:7d:6d:6e:cc:58:fe:20:95: 03:42:2a:43:f6:16:12:8e:7c:a7:79:14:d7:b4:57: cb:40:ef:9a:1b:44:e8:c3:58:84:c2:ee:3f:eb:ac: 63:4b:99:61:4f:61:4a:46:d1:48:13:3e:87:b0:b4: 87:ae:49:35:84:ad:34:05:68:17:f3:5d:e8:4a:34: b1:04:a3:93:4f:ed:93:da:42:82:b2:59:2b:9c:02: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.100.0/23 IPv6: 2405:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 1a:4c:64:b5:1d:13:1b:80:28:18:90:ed:4e:64:fb:59:6e:e3: f1:89:9c:d5:1f:84:d4:ee:92:52:34:fb:1c:22:3f:43:5d:29: dc:8d:41:46:ab:5d:70:a1:1a:f7:ba:9a:ea:34:6f:7c:5a:2f: 14:de:fc:a7:6b:01:83:4e:29:87:99:5e:7c:b0:62:13:a0:73: 4f:89:93:ed:65:46:2c:9a:45:68:1e:fa:55:6f:47:c0:30:da: 50:2d:00:4b:6e:c7:06:06:a8:9f:ce:8f:2f:a6:2f:77:3f:76: f6:bb:5c:07:ce:c6:ff:f5:b7:71:52:2d:1b:60:bc:ef:f5:e5: 56:c0:93:94:40:4a:e9:da:9d:8c:15:92:fd:57:56:e2:8e:a4: e8:7c:1b:b8:1d:c4:c7:2c:21:b6:a3:a0:bd:c8:b2:54:34:a0: 21:4a:a2:2e:d4:d4:1c:87:8b:99:b5:54:9f:a0:39:b6:4b:ce: 76:0c:52:2c:1b:b6:35:90:1f:e6:a5:a6:df:8c:dc:65:22:83: 72:59:aa:82:2c:0b:60:3c:cb:bc:7e:29:13:83:bc:50:7b:90: 38:0e:ab:16:c9:3d:bc:4c:c4:ff:05:dc:2b:5e:a2:d7:4f:4e: 6c:5c:cb:23:68:b7:1a:cf:f3:17:b2:f8:6f:5a:b6:4b:29:0b: 00:39:ee:02 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcJYO0LaoTyAFfFNtNcZhz/KJZ3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMTE0NDcwOVoX DTI0MDkwOTE0NTIwOVowMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNE QjM5MzYwQUU1QTIyRDBENEI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoe6Bu3IDBREkQQ21SZPRwy/1vouxXfhoqwlJze2lnyKvQ4tvcwtjnH6nml B/9P1KB3jvezXCZtOBtKKTXgFTwH2GE+EzbJBdGpyMWaBPPFbcFjTseNX0C96i4b vth2wY6b5VLAUaUV37E7ha6Yh75qvLE8zTLG/JsZ2QQcPxD3siop1kp2M774ojls Z7NxfvUKItsrSV7wpSHwygZfHLnSe3ATPC0mE9F9d31tbsxY/iCVA0IqQ/YWEo58 p3kU17RXy0DvmhtE6MNYhMLuP+usY0uZYU9hSkbRSBM+h7C0h65JNYStNAVoF/Nd 6Eo0sQSjk0/tk9pCgrJZK5wCfn0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFM1B2uV8peL46zbOTYK5aItDUtVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZDY2ZDEw LWI4NTctNGJlZi05Mzk1LTQ1ZDVhYjJjNDRmOS8wLzUzMzUwNzZCOTVGMjk3OEJF M0FDREIzOTM2MEFFNUEyMkQwRDRCNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlGQwDQQCAAIwBwMFACQFzkAwDQYJKoZIhvcNAQELBQADggEBABpMZLUdExuA KBiQ7U5k+1lu4/GJnNUfhNTuklI0+xwiP0NdKdyNQUarXXChGve6muo0b3xaLxTe /KdrAYNOKYeZXnywYhOgc0+Jk+1lRiyaRWge+lVvR8Aw2lAtAEtuxwYGqJ/Ojy+m L3c/dva7XAfOxv/1t3FSLRtgvO/15VbAk5RASunanYwVkv1XVuKOpOh8G7gdxMcs IbajoL3IslQ0oCFKoi7U1ByHi5m1VJ+gObZLznYMUiwbtjWQH+alpt+M3GUig3JZ qoIsC2A8y7x+KRODvFB7kDgOqxbJPbxMxP8F3CteotdPTmxcyyNotxrP8xey+G9a tkspCwA57gI= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org