$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer File: 90508FF980097E19CEF65ED72A856616A6F690AB.cer (raw, json) Hash identifier: qwzMvjQPydoqbb7VNKMqVJefvIP3L5D88nZxGCRFoRU= Subject key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 16F3A3DE45AF111A2E4F678E11F69E30B626775D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 06:30:42 +0000 Certificate not after: Mon 29 Jul 2024 06:35:42 +0000 Subordinate resources: IP: 103.119.228.0/22 IP: 2001:df5:f100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:a3:de:45:af:11:1a:2e:4f:67:8e:11:f6:9e:30:b6:26:77:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 06:30:42 2023 GMT Not After : Jul 29 06:35:42 2024 GMT Subject: CN=90508FF980097E19CEF65ED72A856616A6F690AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:c1:78:7c:c5:42:57:7e:92:eb:81:c9:48: b8:87:e4:36:c8:99:d6:c9:1c:88:8d:5b:7a:81:9e: f0:69:91:71:16:41:02:0f:91:5a:32:bc:4a:67:f4: ad:6a:b1:c3:6d:30:54:de:91:71:8d:c2:58:6a:0f: 2d:55:5d:e0:c8:30:f6:f3:0b:44:53:ab:7a:d6:66: 1e:0c:55:c7:7f:c2:df:18:d9:23:c4:06:65:8b:39: cc:40:a8:b9:06:0b:03:01:65:b6:03:4c:a7:e5:5c: c7:7e:ab:e5:88:80:fd:55:d0:b9:bc:b7:10:e5:75: 88:51:79:18:5d:a0:b9:bb:cb:f1:ae:d4:f0:fb:cf: 7a:21:57:31:32:45:db:b1:c6:15:ed:8e:70:49:7e: e2:ae:f5:fa:99:3c:dc:39:60:3b:1e:3d:cd:d1:d8: 4e:ad:11:19:a0:77:e4:fa:1a:6c:d8:3f:3c:90:70: 3b:c4:fe:ae:cf:0c:2a:03:27:df:83:c7:dd:8b:73: 8d:2f:80:31:08:36:5b:06:5f:fc:e2:17:26:5c:be: bc:69:5e:5d:37:6c:6a:e3:ec:ae:0b:28:dc:c7:53: e2:94:c5:a3:63:7d:a1:a4:04:72:d8:43:12:4c:41: 5c:d8:b5:da:aa:5f:52:e1:17:88:93:75:85:aa:c3: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.228.0/22 IPv6: 2001:df5:f100::/48 Signature Algorithm: sha256WithRSAEncryption 4b:f7:2d:b8:89:23:db:e2:1a:67:1e:56:c3:8c:bc:f2:02:42: 93:3b:a2:13:32:32:c5:99:c0:7b:5b:fe:6f:d2:77:a5:b2:5a: 69:f8:12:7b:ca:88:e4:d8:3c:28:0c:11:6a:8b:ec:12:ad:66: c4:41:c7:28:a0:14:44:21:df:a6:b7:4b:8e:44:2e:87:1e:2a: d8:fb:87:8a:24:26:9c:79:33:bd:18:96:8e:2b:39:e2:da:73: 7b:c0:14:55:6e:f5:48:05:a0:fb:d1:23:6d:a8:b5:52:2d:27: 48:0d:f5:57:31:1b:98:ef:e8:05:6b:f2:b1:29:23:94:50:c8: 2b:ea:04:db:50:6e:21:ce:78:80:09:b9:3a:37:f1:c8:84:88: 32:bc:4d:18:5c:49:1b:c5:56:bb:30:7d:c3:13:8a:e4:e5:e5: 59:72:0d:d8:3a:c4:8b:c9:3f:b0:3f:26:87:22:e6:da:f5:fc: 7b:3f:f2:fe:21:95:68:69:7e:12:f1:de:cf:a2:09:58:66:a2: 3a:56:57:65:b4:ce:52:a2:c7:47:a3:c0:6b:06:1c:ef:03:7f: 07:62:23:db:78:1f:c4:05:23:b1:8a:cb:ea:6f:6f:88:78:6b: 0d:be:99:4c:87:b8:20:e7:a2:a0:f6:44:57:68:3d:e4:b2:44: 50:8c:e7:83 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUFvOj3kWvERouT2eOEfaeMLYmd10wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA2MzA0MloX DTI0MDcyOTA2MzU0MlowMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1 RUQ3MkE4NTY2MTZBNkY2OTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYDwXh8xUJXfpLrgclIuIfkNsiZ1skciI1beoGe8GmRcRZBAg+RWjK8Smf0 rWqxw20wVN6RcY3CWGoPLVVd4Mgw9vMLRFOretZmHgxVx3/C3xjZI8QGZYs5zECo uQYLAwFltgNMp+Vcx36r5YiA/VXQuby3EOV1iFF5GF2gubvL8a7U8PvPeiFXMTJF 27HGFe2OcEl+4q71+pk83DlgOx49zdHYTq0RGaB35PoabNg/PJBwO8T+rs8MKgMn 34PH3YtzjS+AMQg2WwZf/OIXJly+vGleXTdsauPsrgso3MdT4pTFo2N9oaQEcthD EkxBXNi12qpfUuEXiJN1harDuTUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJBQj/mACX4ZzvZe1yqFZham9pCrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ODNlM2Jl LTU3ZTItNDEyNS1hMGM1LTlhOWVhNTAxYmYwNS8wLzkwNTA4RkY5ODAwOTdFMTlD RUY2NUVENzJBODU2NjE2QTZGNjkwQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnd+QwDwQCAAIwCQMHACABDfXxADANBgkqhkiG9w0BAQsFAAOCAQEAS/ctuIkj 2+IaZx5Ww4y88gJCkzuiEzIyxZnAe1v+b9J3pbJaafgSe8qI5Ng8KAwRaovsEq1m xEHHKKAURCHfprdLjkQuhx4q2PuHiiQmnHkzvRiWjis54tpze8AUVW71SAWg+9Ej bai1Ui0nSA31VzEbmO/oBWvysSkjlFDIK+oE21BuIc54gAm5OjfxyISIMrxNGFxJ G8VWuzB9wxOK5OXlWXIN2DrEi8k/sD8mhyLm2vX8ez/y/iGVaGl+EvHez6IJWGai OlZXZbTOUqLHR6PAawYc7wN/B2Ij23gfxAUjsYrL6m9viHhrDb6ZTIe4IOeioPZE V2g95LJEUIzngw== -----END CERTIFICATE-----Generated at Thu May 9 00:29:13 2024 by rpki-client on console-ams.rpki-client.org