$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer (raw, json) Hash identifier: TZQmqJfOMefFj/C+IjJ9RYCrTcBt+lhneFhTBvDUm9Q= Subject key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3742AFB12D8D16119F9515E32A1E5130871C3121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft caRepository: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Apr 2024 14:07:30 +0000 Certificate not after: Fri 25 Apr 2025 14:12:30 +0000 Subordinate resources: IP: 103.189.206.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:42:af:b1:2d:8d:16:11:9f:95:15:e3:2a:1e:51:30:87:1c:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 14:07:30 2024 GMT Not After : Apr 25 14:12:30 2025 GMT Subject: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:77:07:6d:a9:6c:0d:1c:c1:39:8c:7d:a8: 4b:fc:6e:01:54:05:c7:44:ca:db:4d:30:a7:d6:6e: 67:12:d1:a7:7d:2e:4a:2a:8e:c0:85:8c:2b:14:12: d3:9f:60:33:63:e3:7c:71:06:54:62:e6:aa:fd:a6: 4a:58:ff:bb:c5:7c:7d:65:d7:56:fb:70:70:4c:cf: a8:42:c3:a4:2b:6e:0c:89:18:86:bc:4c:37:ea:ec: 2b:b7:e8:9e:fd:e4:7f:b6:c7:82:6a:f0:97:59:f3: 04:d8:6e:02:68:a6:57:64:35:d9:17:a3:15:12:f4: 44:9a:86:25:4a:72:cc:8e:b6:91:17:48:e4:50:7a: 5f:11:36:06:a2:f5:34:00:18:b8:97:c2:58:59:2f: 5d:df:2c:05:01:74:28:4d:ca:df:b6:4b:45:73:ce: 18:e0:a4:55:e6:ac:fd:e2:f0:eb:79:12:90:8e:96: b8:b7:d0:60:e6:07:88:1b:b9:fe:c4:c0:60:57:5e: 09:ac:b3:0f:1b:8a:0a:b7:c5:25:2a:1e:c9:f5:e7: ed:05:09:cd:0a:94:a1:8d:bf:a3:69:52:7e:4b:eb: 73:02:19:e8:cc:b8:e6:1d:5b:51:e4:6e:37:8b:2e: 6c:25:df:fe:04:ae:50:04:ac:3c:ae:bf:c5:a2:ef: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.206.0/23 Signature Algorithm: sha256WithRSAEncryption 33:cb:e3:b4:58:41:b0:7d:a3:0e:31:4f:e5:2a:56:43:cb:b5: 1d:74:12:26:b9:ee:9f:36:fb:81:a3:26:1c:41:12:8d:ea:b4: aa:7f:29:eb:86:bd:ed:c0:76:ee:90:dd:46:79:ea:f8:59:43: 6b:15:f1:fc:16:1a:56:0f:a2:4e:18:99:18:47:fe:51:d1:dd: 5c:93:73:7b:da:7a:5a:85:8d:97:c7:9e:c1:45:7a:ea:42:4e: 73:2b:3a:10:2d:34:d2:6b:59:a4:0d:7e:48:6e:f0:64:c8:c3: a6:36:43:b6:75:87:bf:eb:14:d8:64:04:d0:51:82:d6:b5:b2: 50:38:4e:84:35:66:09:1c:54:19:3d:ce:ee:7e:77:71:0b:47: 0f:ec:44:aa:98:cd:a1:2c:9b:1e:7f:c2:b5:89:54:82:36:ab: dc:dc:6c:b1:11:ef:0a:53:f9:f6:fe:25:b5:56:76:9a:cf:e6: 75:fc:88:8e:b6:80:81:6e:d8:66:eb:64:f5:82:e7:f5:93:fa: 0e:a2:ac:f7:c5:de:ce:da:51:06:12:b9:92:f6:1e:c1:6f:e7: 5a:f8:dd:54:f6:6c:49:cb:f4:ca:aa:b8:71:70:88:56:1d:2e: 1b:3e:ce:03:17:31:ea:db:f7:d4:31:ca:27:de:b2:be:2d:61: 94:58:0a:64 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN0KvsS2NFhGflRXjKh5RMIccMSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNjE0MDczMFoX DTI1MDQyNTE0MTIzMFowMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBB RUNFREY5OTk5RUE1REFFRTQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZIdwdtqWwNHME5jH2oS/xuAVQFx0TK200wp9ZuZxLRp30uSiqOwIWMKxQS 059gM2PjfHEGVGLmqv2mSlj/u8V8fWXXVvtwcEzPqELDpCtuDIkYhrxMN+rsK7fo nv3kf7bHgmrwl1nzBNhuAmimV2Q12RejFRL0RJqGJUpyzI62kRdI5FB6XxE2BqL1 NAAYuJfCWFkvXd8sBQF0KE3K37ZLRXPOGOCkVeas/eLw63kSkI6WuLfQYOYHiBu5 /sTAYFdeCayzDxuKCrfFJSoeyfXn7QUJzQqUoY2/o2lSfkvrcwIZ6My45h1bUeRu N4subCXf/gSuUASsPK6/xaLveQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGmUXDhps+Qp1LCuzt+ZmepdruQpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MzFlZWI0 LWYzNTctNDVhNy05MjY1LTQyOGIwMDdhMDI3MC8wLzY5OTQ1QzM4NjlCM0U0MjlE NEIwQUVDRURGOTk5OUVBNURBRUU0MjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvc4wDQYJKoZIhvcNAQELBQADggEBADPL47RYQbB9ow4xT+UqVkPLtR10Eia5 7p82+4GjJhxBEo3qtKp/KeuGve3Adu6Q3UZ56vhZQ2sV8fwWGlYPok4YmRhH/lHR 3VyTc3vaelqFjZfHnsFFeupCTnMrOhAtNNJrWaQNfkhu8GTIw6Y2Q7Z1h7/rFNhk BNBRgta1slA4ToQ1ZgkcVBk9zu5+d3ELRw/sRKqYzaEsmx5/wrWJVII2q9zcbLER 7wpT+fb+JbVWdprP5nX8iI62gIFu2GbrZPWC5/WT+g6irPfF3s7aUQYSuZL2HsFv 51r43VT2bEnL9MqquHFwiFYdLhs+zgMXMerb99Qxyifesr4tYZRYCmQ= -----END CERTIFICATE-----Generated at Wed May 8 21:02:15 2024 by rpki-client on console-fra.rpki-client.org