$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer File: 690E7BC726C787991D438BDDB48990A7A17D8D15.cer (raw, json) Hash identifier: h+9EqHxs6X/kGyWWjdDiNivOF2LPSDOkVbbqofBx0LQ= Subject key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0FFD05930A3E5FA1BEB68854684189BBD4A86911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft caRepository: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Nov 2023 09:58:02 +0000 Certificate not after: Wed 06 Nov 2024 10:03:02 +0000 Subordinate resources: IP: 103.26.208.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fd:05:93:0a:3e:5f:a1:be:b6:88:54:68:41:89:bb:d4:a8:69:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 09:58:02 2023 GMT Not After : Nov 6 10:03:02 2024 GMT Subject: CN=690E7BC726C787991D438BDDB48990A7A17D8D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:21:85:c5:30:a0:a1:f0:f0:ad:1e:5d:22: 8f:52:83:b1:c1:28:70:ce:f1:f1:08:86:b4:db:53: f9:ef:18:b8:5c:ae:12:76:8a:27:6c:de:13:e7:d9: 37:8d:53:24:f6:2b:f3:3c:fd:db:db:55:ed:48:39: fa:85:54:64:a8:66:6e:5f:6c:00:5d:32:88:04:50: ae:00:bb:7e:9b:03:de:b0:d7:f9:a2:08:bd:ae:a6: 30:d1:e6:35:75:f6:81:46:03:ec:93:7f:8e:13:a7: 7b:50:95:bb:9a:c5:9d:65:22:e5:3e:fa:6a:7c:b7: 2c:f6:97:95:e1:fa:de:6d:35:4a:90:8e:97:94:ab: ba:b4:c7:7e:89:41:53:86:b2:79:84:1e:1e:59:16: 1b:25:b6:e3:ee:27:37:49:b0:6c:1d:6e:c9:d0:b5: 66:fe:a3:b3:9a:b5:6c:84:fe:a5:2e:f5:45:b3:6c: b1:a1:e8:e3:c4:1f:b2:92:a4:22:8a:d5:09:74:29: 4c:a4:a3:30:e8:02:e4:f0:84:3a:0c:e2:3a:6c:d4: cf:7b:3d:75:25:44:3a:02:93:61:7d:66:1a:ee:94: 42:aa:1c:26:bc:de:25:70:7c:cb:41:85:11:fe:16: e0:9b:cc:42:af:39:0e:26:8e:1e:b1:be:16:67:fc: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.208.0/22 Signature Algorithm: sha256WithRSAEncryption 57:7c:66:99:1d:c6:34:16:b6:e6:af:71:77:9e:7d:3b:46:24: 1a:f5:a9:60:7d:0b:b8:3f:60:30:52:90:b6:24:5d:1a:48:19: 3f:6f:98:cc:05:84:9d:db:43:a5:f5:27:07:6f:c8:27:92:9e: e2:28:2f:ce:93:f8:33:df:d9:50:c0:e0:8d:fd:6d:9e:bc:10: 61:bd:6a:cf:1b:5e:35:b2:fd:9d:79:02:71:a7:3f:8b:c2:fe: 38:1b:97:00:2b:33:cb:20:8e:a3:2f:67:14:be:3f:d1:e5:7f: 63:50:d9:3f:91:66:7c:dc:e5:82:2b:7a:43:65:36:8d:ae:f6: 84:20:b1:04:b3:fe:cb:45:c4:63:2e:7d:48:94:52:25:2a:47: 94:d1:1c:49:f1:a5:95:c8:30:b0:56:b8:4e:bd:bf:13:c7:b3: 4f:fd:ae:2f:f5:16:ab:4e:ef:b0:d1:47:b8:49:04:c2:c6:f0: 66:ca:43:c9:9a:31:30:39:66:3c:3a:44:1a:df:36:2c:af:77: 7b:4a:e7:97:25:85:ee:aa:35:ee:1d:f3:9d:00:87:db:43:5f: fe:2e:90:fb:89:04:26:da:c0:44:ba:8a:11:9d:9f:bb:08:93: 64:f6:18:e7:4c:7c:46:84:d9:a0:2f:fd:3b:ff:64:78:e8:74: 4a:50:9b:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD/0Fkwo+X6G+tohUaEGJu9SoaREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwODA5NTgwMloX DTI0MTEwNjEwMDMwMlowMzExMC8GA1UEAxMoNjkwRTdCQzcyNkM3ODc5OTFENDM4 QkREQjQ4OTkwQTdBMTdEOEQxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKztIYXFMKCh8PCtHl0ij1KDscEocM7x8QiGtNtT+e8YuFyuEnaKJ2zeE+fZ N41TJPYr8zz929tV7Ug5+oVUZKhmbl9sAF0yiARQrgC7fpsD3rDX+aIIva6mMNHm NXX2gUYD7JN/jhOne1CVu5rFnWUi5T76any3LPaXleH63m01SpCOl5SrurTHfolB U4ayeYQeHlkWGyW24+4nN0mwbB1uydC1Zv6js5q1bIT+pS71RbNssaHo48QfspKk IorVCXQpTKSjMOgC5PCEOgziOmzUz3s9dSVEOgKTYX1mGu6UQqocJrzeJXB8y0GF Ef4W4JvMQq85DiaOHrG+Fmf8qFsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGkOe8cmx4eZHUOL3bSJkKehfY0VMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNDQzMTc1MS02NjRiLTQ3YTAtYTUyMC1kOTdmNWMxMjYxOGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NDMxNzUx LTY2NGItNDdhMC1hNTIwLWQ5N2Y1YzEyNjE4Yy8wLzY5MEU3QkM3MjZDNzg3OTkx RDQzOEJEREI0ODk5MEE3QTE3RDhEMTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnGtAwDQYJKoZIhvcNAQELBQADggEBAFd8ZpkdxjQWtuavcXeefTtGJBr1qWB9 C7g/YDBSkLYkXRpIGT9vmMwFhJ3bQ6X1JwdvyCeSnuIoL86T+DPf2VDA4I39bZ68 EGG9as8bXjWy/Z15AnGnP4vC/jgblwArM8sgjqMvZxS+P9Hlf2NQ2T+RZnzc5YIr ekNlNo2u9oQgsQSz/stFxGMufUiUUiUqR5TRHEnxpZXIMLBWuE69vxPHs0/9ri/1 FqtO77DRR7hJBMLG8GbKQ8maMTA5Zjw6RBrfNiyvd3tK55clhe6qNe4d850Ah9tD X/4ukPuJBCbawES6ihGdn7sIk2T2GOdMfEaE2aAv/Tv/ZHjodEpQm2A= -----END CERTIFICATE-----Generated at Wed May 8 15:17:37 2024 by rpki-client on console-fra.rpki-client.org