$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer File: 64285236074D6BC2BB384B2D544C7F545C16CF31.cer (raw, json) Hash identifier: s3nN8Va/v4lkgK7MS27K2dsHRWoun8xkhAN067Jnj5Q= Subject key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 016B12878AA180806DB977AAD16EDED714166B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft caRepository: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Jan 2024 17:20:52 +0000 Certificate not after: Tue 28 Jan 2025 17:25:52 +0000 Subordinate resources: IP: 103.184.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6b:12:87:8a:a1:80:80:6d:b9:77:aa:d1:6e:de:d7:14:16:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 30 17:20:52 2024 GMT Not After : Jan 28 17:25:52 2025 GMT Subject: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:fc:a2:50:68:ce:8f:c1:96:00:9e:71:0f: 10:4d:f1:4c:0f:e8:53:10:98:8b:24:ad:b4:0f:2c: 20:aa:1d:30:59:22:e3:d0:e9:eb:97:40:39:9f:c4: 5f:95:a3:4f:59:69:05:87:c0:9a:75:91:89:19:1e: a7:b3:65:59:82:71:1c:24:d2:f6:d0:64:15:31:15: 1d:b2:5f:36:4c:ce:14:ec:c4:8a:3d:c4:4c:f2:f9: df:45:bf:0b:fe:65:25:17:f9:e9:6b:19:9e:e6:07: 26:1f:3d:13:b4:ea:0c:e0:dc:bf:dd:51:f8:12:3b: da:4d:95:b2:3c:98:c5:e2:db:d9:20:2f:ce:69:fb: 6b:f9:57:16:81:86:d1:de:fa:ed:ad:d3:46:69:bb: 90:cc:fa:af:4c:bd:ed:69:9e:5c:e2:03:a4:a9:1a: 49:29:64:3c:62:58:ef:6b:60:9e:34:47:63:1c:58: eb:61:12:38:42:ad:78:c8:d2:36:34:12:fb:5e:ae: 5a:b8:f1:ec:1d:e0:f8:22:21:22:1c:d4:0d:78:5b: 31:cf:48:8c:bb:3d:42:a2:4c:78:41:89:d7:6a:6f: 7f:37:3e:99:e5:ad:9e:58:cc:ce:ab:e2:b9:1e:1e: 50:bf:30:0c:43:bf:b0:70:3d:bd:14:b0:8f:65:08: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.50.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:25:4f:a1:14:ac:28:7a:55:a9:7a:43:b4:14:6a:f1:8a:23: 8f:bc:ee:60:25:63:7d:b3:b0:b8:77:64:42:71:66:fe:82:dc: 02:e4:87:88:3f:4e:e4:54:9a:df:d8:fe:b3:25:1b:27:96:3e: c1:3f:9b:96:93:c7:73:7c:44:2b:65:ce:ee:da:18:df:29:7c: 76:64:05:79:53:ab:c3:d2:80:95:c6:ee:e3:07:89:14:c4:47: 83:be:20:fa:d3:0d:c9:b9:55:a5:b4:45:04:7e:f8:77:f2:72: 9e:2e:cf:f6:29:1f:61:59:b7:84:b3:fa:bd:51:5b:f9:1c:98: a1:e7:b4:be:82:92:07:2b:71:ec:a3:85:c6:b8:23:f3:6c:84: 4f:a8:3b:52:f4:5a:27:b6:1c:f0:40:d3:b8:ab:57:b5:a9:46: 1e:80:9a:2b:1a:14:47:f0:0c:76:45:e8:a0:b2:92:55:fe:6b: 06:ac:d5:aa:d0:15:72:e3:d9:c5:46:cd:25:76:9f:0d:ee:90: 41:37:79:bc:75:89:d8:99:28:4e:3b:ea:a5:51:e0:ae:02:f3: 4a:68:6e:17:57:79:17:bc:63:55:22:cb:5e:1b:91:b1:c7:af: 86:8d:4a:40:9b:ad:4c:7e:90:01:78:5a:77:2a:8f:f1:c8:03: a5:30:09:03 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAWsSh4qhgIBtuXeq0W7e1xQWa4AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEzMDE3MjA1MloX DTI1MDEyODE3MjU1MlowMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0 QjJENTQ0QzdGNTQ1QzE2Q0YzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7d/KJQaM6PwZYAnnEPEE3xTA/oUxCYiySttA8sIKodMFki49Dp65dAOZ/E X5WjT1lpBYfAmnWRiRkep7NlWYJxHCTS9tBkFTEVHbJfNkzOFOzEij3ETPL530W/ C/5lJRf56WsZnuYHJh89E7TqDODcv91R+BI72k2VsjyYxeLb2SAvzmn7a/lXFoGG 0d767a3TRmm7kMz6r0y97WmeXOIDpKkaSSlkPGJY72tgnjRHYxxY62ESOEKteMjS NjQS+16uWrjx7B3g+CIhIhzUDXhbMc9IjLs9QqJMeEGJ12pvfzc+meWtnljMzqvi uR4eUL8wDEO/sHA9vRSwj2UID50CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGQoUjYHTWvCuzhLLVRMf1RcFs8xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzYzE5N2Y4 LTRlMmUtNDZkOS1iZTJiLWUzNDhhMTMzZGM1Ny8wLzY0Mjg1MjM2MDc0RDZCQzJC QjM4NEIyRDU0NEM3RjU0NUMxNkNGMzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuDIwDQYJKoZIhvcNAQELBQADggEBACwlT6EUrCh6Val6Q7QUavGKI4+87mAl Y32zsLh3ZEJxZv6C3ALkh4g/TuRUmt/Y/rMlGyeWPsE/m5aTx3N8RCtlzu7aGN8p fHZkBXlTq8PSgJXG7uMHiRTER4O+IPrTDcm5VaW0RQR++Hfycp4uz/YpH2FZt4Sz +r1RW/kcmKHntL6Ckgcrceyjhca4I/NshE+oO1L0Wie2HPBA07irV7WpRh6Amisa FEfwDHZF6KCyklX+awas1arQFXLj2cVGzSV2nw3ukEE3ebx1idiZKE476qVR4K4C 80pobhdXeRe8Y1Uiy14bkbHHr4aNSkCbrUx+kAF4Wncqj/HIA6UwCQM= -----END CERTIFICATE-----Generated at Wed May 8 17:45:18 2024 by rpki-client on console-ams.rpki-client.org