$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer (raw, json) Hash identifier: 0aT+lHf0h2ls4e4r4TrMXO24iXkFTVYv+x7zS2c7zR8= Subject key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C61DF31F4309511D00F772D93874508264FE536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Dec 2023 16:21:57 +0000 Certificate not after: Sat 07 Dec 2024 16:26:57 +0000 Subordinate resources: IP: 103.161.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:61:df:31:f4:30:95:11:d0:0f:77:2d:93:87:45:08:26:4f:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 16:21:57 2023 GMT Not After : Dec 7 16:26:57 2024 GMT Subject: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:ee:5b:19:00:cb:c5:19:55:03:58:98:d1: e4:f0:6a:e4:f1:59:f0:c1:1e:dc:6e:46:e3:1f:a1: d2:1e:0d:86:1e:ae:7c:a3:d8:4a:bf:b1:54:fa:10: 80:d2:22:f8:78:a6:80:05:7d:ec:ad:c7:7b:8e:0a: c4:5b:07:36:b5:be:11:a0:cf:2b:3e:e1:81:7d:56: 26:84:8e:3d:7c:dc:96:06:20:ef:09:b8:46:a5:c9: d8:e6:0c:62:16:a6:68:df:41:28:19:ec:46:db:dd: 18:91:d0:56:68:f9:dd:51:88:23:c5:98:29:d2:2c: f6:0f:32:52:73:86:6c:4b:b3:fe:60:50:15:e3:7a: b2:d1:be:3f:97:2e:86:f9:e9:36:1f:6b:29:7f:88: de:94:2c:8a:21:5e:29:bd:8f:91:c8:ff:07:7b:05: bf:d8:c5:3d:c6:90:d0:e2:a5:66:bd:0d:ec:66:31: 3a:fa:01:4a:35:e4:bb:aa:58:fe:2c:d5:34:aa:cc: 2b:c1:f0:16:04:41:5f:ce:a4:d4:61:97:ed:5f:5f: 26:06:6b:bb:6a:d9:82:6f:23:25:a3:45:08:68:24: 31:0b:11:54:5a:f1:01:93:6a:80:42:c1:ab:89:37: 4a:8a:a4:75:3f:34:f1:bc:23:d6:62:ed:a1:6e:88: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.190.0/23 Signature Algorithm: sha256WithRSAEncryption 84:23:1b:ce:88:9c:07:95:14:80:91:c6:e1:2d:ca:c6:08:67: b7:c6:07:ba:27:66:15:f5:3b:0d:e2:6e:58:ef:be:2a:53:06: 37:8c:f1:21:f1:4b:08:dc:23:61:56:1e:05:5c:e7:ed:90:5a: 05:0f:2d:c7:0a:c3:63:12:e1:07:94:27:2d:f6:d2:9e:8e:f4: 84:91:b1:37:da:a3:98:5d:d7:de:86:e1:05:bf:52:54:d6:59: 7d:b8:1e:a7:97:51:6e:1a:d6:76:ea:52:0b:1c:8c:bd:70:80: 48:74:0c:6a:ff:b1:76:4b:ce:56:53:b9:40:dd:1c:3f:30:28: 74:ba:a4:45:09:da:a1:b3:69:14:3d:c6:6b:e8:05:68:8c:ee: 6a:80:6d:ce:b4:bd:26:bd:fe:f9:e4:64:f7:dd:23:61:83:63: 17:f6:8f:37:9c:97:4d:a9:a3:89:b4:ef:03:a0:d5:5f:5e:44: 3d:d5:37:59:31:9c:05:dd:dd:0e:42:62:ad:28:10:3b:5a:f3: 3d:5c:a3:ff:66:30:c7:33:dd:65:23:b1:e5:8f:26:8a:0c:57: 93:51:e6:ec:49:20:55:bf:79:d3:06:1b:07:0a:1a:35:75:fc: 7e:5a:ac:aa:05:71:2b:47:84:f0:f5:f3:31:55:2c:55:47:dc: bc:14:94:5e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPGHfMfQwlRHQD3ctk4dFCCZP5TYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwOTE2MjE1N1oX DTI0MTIwNzE2MjY1N1owMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2 ODJDMTlDN0IzMEY1Qzc3RTJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANue7lsZAMvFGVUDWJjR5PBq5PFZ8MEe3G5G4x+h0h4Nhh6ufKPYSr+xVPoQ gNIi+HimgAV97K3He44KxFsHNrW+EaDPKz7hgX1WJoSOPXzclgYg7wm4RqXJ2OYM YhamaN9BKBnsRtvdGJHQVmj53VGII8WYKdIs9g8yUnOGbEuz/mBQFeN6stG+P5cu hvnpNh9rKX+I3pQsiiFeKb2Pkcj/B3sFv9jFPcaQ0OKlZr0N7GYxOvoBSjXku6pY /izVNKrMK8HwFgRBX86k1GGX7V9fJgZru2rZgm8jJaNFCGgkMQsRVFrxAZNqgELB q4k3SoqkdT808bwj1mLtoW6I9aMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHFdxt6oD+XYn9xoLBnHsw9cd+LBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1OTFiNTli LTFjYTUtNDQ2NC05OTgyLWJmNmY2ZDhhMWM5NC8wLzcxNURDNkRFQTgwRkU1RDg5 RkRDNjgyQzE5QzdCMzBGNUM3N0UyQzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnob4wDQYJKoZIhvcNAQELBQADggEBAIQjG86InAeVFICRxuEtysYIZ7fGB7on ZhX1Ow3ibljvvipTBjeM8SHxSwjcI2FWHgVc5+2QWgUPLccKw2MS4QeUJy320p6O 9ISRsTfao5hd196G4QW/UlTWWX24HqeXUW4a1nbqUgscjL1wgEh0DGr/sXZLzlZT uUDdHD8wKHS6pEUJ2qGzaRQ9xmvoBWiM7mqAbc60vSa9/vnkZPfdI2GDYxf2jzec l02po4m07wOg1V9eRD3VN1kxnAXd3Q5CYq0oEDta8z1co/9mMMcz3WUjseWPJooM V5NR5uxJIFW/edMGGwcKGjV1/H5arKoFcStHhPD18zFVLFVH3LwUlF4= -----END CERTIFICATE-----Generated at Tue May 7 16:42:37 2024 by rpki-client on console-ams.rpki-client.org