$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer File: 91982855FD8C4C119B32F9D536B640804091001C.cer (raw, json) Hash identifier: 9pQiNkUhNna1wGTX2ObLotdVvNKRJyqh7LuKmq8x09Q= Subject key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 133EBD67A553DFAA2D76B003EE9E51CEA61A6683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft caRepository: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:34:14 +0000 Certificate not after: Sun 28 Jul 2024 23:39:14 +0000 Subordinate resources: IP: 103.15.240.0/22 IP: 103.52.64.0/22 IP: 2001:df5:b400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3e:bd:67:a5:53:df:aa:2d:76:b0:03:ee:9e:51:ce:a6:1a:66:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 23:34:14 2023 GMT Not After : Jul 28 23:39:14 2024 GMT Subject: CN=91982855FD8C4C119B32F9D536B640804091001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:52:1a:9c:bc:32:f7:1b:e3:3b:99:26:de: 3d:ee:33:b5:4d:2a:04:1b:16:74:ff:00:be:d6:77: 1c:48:16:fc:37:b4:16:77:f0:91:58:20:85:0a:b5: c9:1e:29:17:0d:93:b5:49:8b:c9:fb:21:a3:81:f7: 87:68:b9:99:b6:c7:70:48:db:3f:61:8c:22:43:05: 39:87:9c:7e:76:f0:5c:22:7f:20:51:4b:19:82:0f: 9a:c6:0c:b2:ea:22:a0:9d:e9:c4:52:25:a1:73:fd: 65:b4:07:2c:ee:3a:53:86:d7:31:4b:ba:d1:14:5c: e7:98:c2:c0:f0:33:73:dd:6f:ad:6f:ec:3d:a4:47: 29:d7:85:e2:6a:14:ee:b7:d1:d1:ec:bd:1a:16:da: 7d:15:bf:d8:d6:84:8c:27:ec:8f:09:9f:f2:a7:03: 0a:11:16:e8:6c:66:dc:10:61:9e:a5:be:24:dc:f8: 9d:d6:51:89:64:f6:6a:6b:e4:4d:57:75:c0:e0:6a: 86:7e:1e:d8:8a:c2:b1:d8:73:f6:d3:e1:94:72:2c: a9:42:1e:2a:d1:65:88:4e:81:f0:97:f2:90:95:90: b8:86:c2:3f:2c:0e:65:12:75:ff:6d:41:10:1f:51: 4a:45:54:5e:c0:4d:90:7c:03:c6:c1:48:ef:f6:3f: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.240.0/22 103.52.64.0/22 IPv6: 2001:df5:b400::/48 Signature Algorithm: sha256WithRSAEncryption 6c:e3:fb:d6:36:3d:a2:41:c8:c3:67:8c:e7:a7:8a:01:6a:b5: a7:a6:51:d4:3c:bd:6d:ac:15:48:c7:5b:b8:45:9b:fa:38:1e: bf:2d:24:47:bf:08:2c:60:32:f3:83:c5:b2:57:21:aa:72:29: 53:66:b7:01:e4:6f:40:94:ef:d5:de:f9:aa:81:1c:55:00:9c: 73:11:9f:b8:b7:59:77:d8:74:88:42:f7:3c:72:89:10:fb:8c: 41:5d:99:cb:17:8c:df:f0:59:83:83:58:3c:b2:ab:9b:32:60: 43:c6:fb:95:50:d9:3a:ba:a3:7f:28:26:be:1c:ee:93:10:52: b2:9b:ab:f2:cc:65:75:b5:1e:e4:3d:08:3a:8e:63:c4:c7:bd: 12:1f:f6:b2:0e:03:71:bb:57:87:78:f2:b4:1d:7c:73:57:7b: e9:03:e9:59:af:15:0c:5d:ef:b2:3b:e2:90:33:25:dc:06:a3: 2d:12:69:22:16:f7:7a:92:b5:b9:1f:0b:47:fe:fc:e6:aa:a4: 7b:6a:04:40:7b:14:62:f2:16:db:fa:20:eb:a5:84:d9:6c:bc: d3:c3:8f:e4:61:1e:64:ea:5d:b7:6b:30:98:45:fb:cb:43:02: ef:2e:6d:e6:41:79:6d:69:a2:3a:16:33:1c:14:80:89:d5:dd: 7a:e4:be:bf -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUEz69Z6VT36otdrAD7p5RzqYaZoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIzMzQxNFoX DTI0MDcyODIzMzkxNFowMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJG OUQ1MzZCNjQwODA0MDkxMDAxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSTUhqcvDL3G+M7mSbePe4ztU0qBBsWdP8AvtZ3HEgW/De0FnfwkVgghQq1 yR4pFw2TtUmLyfsho4H3h2i5mbbHcEjbP2GMIkMFOYecfnbwXCJ/IFFLGYIPmsYM suoioJ3pxFIloXP9ZbQHLO46U4bXMUu60RRc55jCwPAzc91vrW/sPaRHKdeF4moU 7rfR0ey9GhbafRW/2NaEjCfsjwmf8qcDChEW6Gxm3BBhnqW+JNz4ndZRiWT2amvk TVd1wOBqhn4e2IrCsdhz9tPhlHIsqUIeKtFliE6B8JfykJWQuIbCPywOZRJ1/21B EB9RSkVUXsBNkHwDxsFI7/Y/pcMCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJGYKFX9jEwRmzL51Ta2QIBAkQAcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMmM0OTQ4 LTY4N2ItNDAyMC04N2Y0LTI4ZWU0YjYzYWE0Ny8wLzkxOTgyODU1RkQ4QzRDMTE5 QjMyRjlENTM2QjY0MDgwNDA5MTAwMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnD/ADBAJnNEAwDwQCAAIwCQMHACABDfW0ADANBgkqhkiG9w0BAQsFAAOCAQEA bOP71jY9okHIw2eM56eKAWq1p6ZR1Dy9bawVSMdbuEWb+jgevy0kR78ILGAy84PF slchqnIpU2a3AeRvQJTv1d75qoEcVQCccxGfuLdZd9h0iEL3PHKJEPuMQV2ZyxeM 3/BZg4NYPLKrmzJgQ8b7lVDZOrqjfygmvhzukxBSspur8sxldbUe5D0IOo5jxMe9 Eh/2sg4DcbtXh3jytB18c1d76QPpWa8VDF3vsjvikDMl3AajLRJpIhb3epK1uR8L R/785qqke2oEQHsUYvIW2/og66WE2Wy808OP5GEeZOpdt2swmEX7y0MC7y5t5kF5 bWmiOhYzHBSAidXdeuS+vw== -----END CERTIFICATE-----Generated at Wed May 8 22:46:40 2024 by rpki-client on console-ams.rpki-client.org