$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer (raw, json) Hash identifier: 5/Lfk/kzdh0zdlFiZmjfB25aTmp0O+mMu1bNRhapM1U= Subject key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 300D40CBDDA215279C0A8793A06BE2C0E3C98652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Nov 2024 20:09:49 +0000 Certificate not after: Sat 08 Nov 2025 20:14:49 +0000 Subordinate resources: IP: 103.161.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0d:40:cb:dd:a2:15:27:9c:0a:87:93:a0:6b:e2:c0:e3:c9:86:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 9 20:09:49 2024 GMT Not After : Nov 8 20:14:49 2025 GMT Subject: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:ee:5b:19:00:cb:c5:19:55:03:58:98:d1: e4:f0:6a:e4:f1:59:f0:c1:1e:dc:6e:46:e3:1f:a1: d2:1e:0d:86:1e:ae:7c:a3:d8:4a:bf:b1:54:fa:10: 80:d2:22:f8:78:a6:80:05:7d:ec:ad:c7:7b:8e:0a: c4:5b:07:36:b5:be:11:a0:cf:2b:3e:e1:81:7d:56: 26:84:8e:3d:7c:dc:96:06:20:ef:09:b8:46:a5:c9: d8:e6:0c:62:16:a6:68:df:41:28:19:ec:46:db:dd: 18:91:d0:56:68:f9:dd:51:88:23:c5:98:29:d2:2c: f6:0f:32:52:73:86:6c:4b:b3:fe:60:50:15:e3:7a: b2:d1:be:3f:97:2e:86:f9:e9:36:1f:6b:29:7f:88: de:94:2c:8a:21:5e:29:bd:8f:91:c8:ff:07:7b:05: bf:d8:c5:3d:c6:90:d0:e2:a5:66:bd:0d:ec:66:31: 3a:fa:01:4a:35:e4:bb:aa:58:fe:2c:d5:34:aa:cc: 2b:c1:f0:16:04:41:5f:ce:a4:d4:61:97:ed:5f:5f: 26:06:6b:bb:6a:d9:82:6f:23:25:a3:45:08:68:24: 31:0b:11:54:5a:f1:01:93:6a:80:42:c1:ab:89:37: 4a:8a:a4:75:3f:34:f1:bc:23:d6:62:ed:a1:6e:88: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.190.0/23 Signature Algorithm: sha256WithRSAEncryption 59:22:21:07:3d:95:08:47:46:59:97:4b:38:f2:5d:31:ca:cc: a6:28:87:cd:be:79:0a:b9:35:cf:08:09:25:fc:2b:7a:16:ac: e7:19:74:9e:5e:31:14:63:a8:25:f1:a5:f5:70:04:aa:fb:00: 80:41:87:c8:bf:60:67:d9:91:a5:ee:66:47:1e:47:88:06:99: 44:4c:1e:c1:0b:86:94:0b:98:46:bc:10:37:1b:c7:56:6f:1b: 13:8f:80:a1:2f:f7:3c:72:a6:4e:f5:c3:35:ac:0b:0c:33:bb: df:f4:3b:f4:9a:f2:cc:d3:3e:f8:8f:41:b8:e3:29:9c:3d:26: 6b:69:ef:03:c0:d0:f2:44:cf:53:8b:67:db:47:f9:61:65:1d: 82:5c:d2:4d:e4:e2:52:e8:b0:82:8d:75:d8:37:ff:ff:12:58: 8c:21:dc:91:0c:b7:34:d5:47:e1:f8:bb:4b:1f:ab:c6:c1:10: 90:ff:eb:b8:05:66:3e:2e:9e:4c:e3:72:5a:b2:85:12:a1:0e: 70:f3:43:83:1c:ac:90:4a:02:46:42:2f:20:4c:35:88:16:40: 9b:a8:8a:3d:20:6c:21:ef:e3:f1:e2:ce:38:33:e9:b8:a4:e2: dc:75:e8:91:e2:33:30:9f:97:bc:24:60:c8:fd:6e:0d:53:ab: 95:a0:0f:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMA1Ay92iFSecCoeToGviwOPJhlIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwOTIwMDk0OVoX DTI1MTEwODIwMTQ0OVowMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2 ODJDMTlDN0IzMEY1Qzc3RTJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANue7lsZAMvFGVUDWJjR5PBq5PFZ8MEe3G5G4x+h0h4Nhh6ufKPYSr+xVPoQ gNIi+HimgAV97K3He44KxFsHNrW+EaDPKz7hgX1WJoSOPXzclgYg7wm4RqXJ2OYM YhamaN9BKBnsRtvdGJHQVmj53VGII8WYKdIs9g8yUnOGbEuz/mBQFeN6stG+P5cu hvnpNh9rKX+I3pQsiiFeKb2Pkcj/B3sFv9jFPcaQ0OKlZr0N7GYxOvoBSjXku6pY /izVNKrMK8HwFgRBX86k1GGX7V9fJgZru2rZgm8jJaNFCGgkMQsRVFrxAZNqgELB q4k3SoqkdT808bwj1mLtoW6I9aMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHFdxt6oD+XYn9xoLBnHsw9cd+LBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1OTFiNTli LTFjYTUtNDQ2NC05OTgyLWJmNmY2ZDhhMWM5NC8wLzcxNURDNkRFQTgwRkU1RDg5 RkRDNjgyQzE5QzdCMzBGNUM3N0UyQzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnob4wDQYJKoZIhvcNAQELBQADggEBAFkiIQc9lQhHRlmXSzjyXTHKzKYoh82+ eQq5Nc8ICSX8K3oWrOcZdJ5eMRRjqCXxpfVwBKr7AIBBh8i/YGfZkaXuZkceR4gG mURMHsELhpQLmEa8EDcbx1ZvGxOPgKEv9zxypk71wzWsCwwzu9/0O/Sa8szTPviP QbjjKZw9Jmtp7wPA0PJEz1OLZ9tH+WFlHYJc0k3k4lLosIKNddg3//8SWIwh3JEM tzTVR+H4u0sfq8bBEJD/67gFZj4unkzjclqyhRKhDnDzQ4McrJBKAkZCLyBMNYgW QJuoij0gbCHv4/Hizjgz6bik4tx16JHiMzCfl7wkYMj9bg1Tq5WgD9Y= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:19 2024 by rpki-client on console-fra.rpki-client.org