$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer (raw, json) Hash identifier: EsQ3C0zaw28FAATug0toy2uEgVkMiRVw71ge/iETi9M= Subject key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 499DC14CB16612270FAF7F0B1DA861BEF4F8A5FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft caRepository: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Nov 2023 15:56:21 +0000 Certificate not after: Wed 13 Nov 2024 16:01:21 +0000 Subordinate resources: IP: 103.161.110.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9d:c1:4c:b1:66:12:27:0f:af:7f:0b:1d:a8:61:be:f4:f8:a5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 15 15:56:21 2023 GMT Not After : Nov 13 16:01:21 2024 GMT Subject: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:17:9e:c4:75:6e:fa:d6:d5:ae:07:ef:67: 88:dc:bb:5e:f3:37:e7:6c:c4:37:5a:41:66:a3:35: c2:b8:48:5d:39:3a:59:40:53:ea:7a:0a:3f:90:52: 0c:80:fc:8a:17:91:0c:cb:72:0d:a2:aa:2f:f9:19: cb:26:4d:a8:7d:bf:95:f5:80:d9:15:6e:09:9c:ab: 9d:07:f8:68:b5:b2:c2:47:31:45:e5:7b:b9:b0:69: 03:71:07:07:de:8d:1f:76:14:16:89:a9:f7:ae:54: 9d:fd:ce:e0:c8:ae:2d:ab:ef:84:89:2e:0b:f9:1a: 07:dd:0b:a1:21:f2:e0:38:b7:66:fe:da:d3:92:76: a6:23:10:90:e1:3a:ef:c6:f9:b5:06:4d:24:ad:69: 08:61:7b:d5:7f:b9:5a:07:db:2a:d6:ea:d7:09:0a: 9f:c2:2c:7f:c8:52:38:50:95:65:70:01:a0:e5:40: a2:df:37:07:93:3f:96:2a:49:bb:62:99:c0:6b:3f: 7d:bb:74:2a:a5:be:8f:ee:5a:2b:80:1f:92:36:fc: 88:cc:da:b7:ef:bb:d9:3e:2d:e5:d6:79:0d:a4:2e: 7e:4e:31:2e:24:f4:d7:cd:fe:1e:00:25:22:c0:82: f0:08:31:26:fe:90:df:05:97:9a:fb:b5:f9:72:22: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.110.0/23 Signature Algorithm: sha256WithRSAEncryption 88:ad:37:9d:89:fd:51:26:13:4e:93:5b:5c:10:36:34:6d:43: 7c:1a:88:77:aa:2b:78:5d:f9:af:a8:18:58:fd:f9:6d:54:f4: cc:8c:aa:8f:6f:23:bf:d2:3f:b4:b6:c3:db:83:b7:da:80:46: 84:ec:0c:19:4c:a0:22:8a:29:c3:0e:f2:0e:0a:d1:ac:16:ae: db:22:f2:28:6c:39:c6:bb:5e:0c:03:d9:a3:bc:9a:39:d8:66: 37:bc:61:98:4d:57:61:0c:00:25:44:58:2b:b8:46:f7:92:d5: 7a:d2:40:58:a5:6d:26:36:46:df:25:5a:9a:f2:7a:51:70:a6: ae:f4:ff:eb:cb:e8:9c:8e:3d:c5:c5:ed:87:76:8c:a6:fc:60: 02:a0:88:3c:2b:e8:c6:b7:7e:c2:bf:76:8b:1b:36:80:3a:7c: 8d:7c:57:1f:bf:9b:5e:d3:86:a9:62:12:2f:9d:08:ff:6a:f4: f3:5b:a3:0d:ba:d5:e4:cd:fb:4b:69:91:d9:88:4a:67:ad:e4: d0:a4:63:e5:29:5e:2d:19:7c:d2:de:a8:58:8d:3d:77:1d:d0: e5:4a:95:42:1e:0d:d7:2a:a9:6d:81:72:4e:23:fb:d9:62:72: 7a:79:26:17:ad:15:a7:e6:0a:5a:13:50:95:48:93:78:85:04: 58:1d:b8:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSZ3BTLFmEicPr38LHahhvvT4pfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNTE1NTYyMVoX DTI0MTExMzE2MDEyMVowMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRB RTI4REE1OTc4NEE1QUFFQUFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKWF57EdW761tWuB+9niNy7XvM352zEN1pBZqM1wrhIXTk6WUBT6noKP5BS DID8iheRDMtyDaKqL/kZyyZNqH2/lfWA2RVuCZyrnQf4aLWywkcxReV7ubBpA3EH B96NH3YUFomp965Unf3O4MiuLavvhIkuC/kaB90LoSHy4Di3Zv7a05J2piMQkOE6 78b5tQZNJK1pCGF71X+5WgfbKtbq1wkKn8Isf8hSOFCVZXABoOVAot83B5M/lipJ u2KZwGs/fbt0KqW+j+5aK4Afkjb8iMzat++72T4t5dZ5DaQufk4xLiT0183+HgAl IsCC8AgxJv6Q3wWXmvu1+XIi03ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGjVeC+625FM/XSuKNpZeEparqr4MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNDA4ZTQ0 LTNlOWMtNDVlNS1iY2E0LTVkZmJkNGIyNzEzMC8wLzY4RDU3ODJGQkFEQjkxNENG RDc0QUUyOERBNTk3ODRBNUFBRUFBRjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoW4wDQYJKoZIhvcNAQELBQADggEBAIitN52J/VEmE06TW1wQNjRtQ3waiHeq K3hd+a+oGFj9+W1U9MyMqo9vI7/SP7S2w9uDt9qARoTsDBlMoCKKKcMO8g4K0awW rtsi8ihsOca7XgwD2aO8mjnYZje8YZhNV2EMACVEWCu4RveS1XrSQFilbSY2Rt8l WpryelFwpq70/+vL6JyOPcXF7Yd2jKb8YAKgiDwr6Ma3fsK/dosbNoA6fI18Vx+/ m17ThqliEi+dCP9q9PNbow261eTN+0tpkdmISmet5NCkY+UpXi0ZfNLeqFiNPXcd 0OVKlUIeDdcqqW2Bck4j+9licnp5JhetFafmCloTUJVIk3iFBFgduBY= -----END CERTIFICATE-----Generated at Thu May 9 00:37:01 2024 by rpki-client on console-fra.rpki-client.org