$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer File: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer (raw, json) Hash identifier: EcJj1lbFRsDo18bPF3xWq7Sbv9NNGox/FO2X1djeGLY= Subject key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1AA9F0E881203E8D5AE5A988BEE490DBA89231DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft caRepository: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:51:42 +0000 Certificate not after: Mon 29 Jul 2024 00:56:42 +0000 Subordinate resources: IP: 103.153.148.0/23 IP: 2406:45c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:f0:e8:81:20:3e:8d:5a:e5:a9:88:be:e4:90:db:a8:92:31:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:51:42 2023 GMT Not After : Jul 29 00:56:42 2024 GMT Subject: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:b8:49:2b:56:45:cc:18:fc:8f:b0:1b:c4: ed:b5:fe:f3:28:40:25:00:94:bd:83:fa:2d:93:3d: e2:17:d0:30:0d:80:9e:e3:65:ae:2e:1f:93:72:27: aa:93:b7:58:f1:85:27:c3:5d:05:4f:32:cc:14:6b: 21:cc:c2:bf:1e:90:bd:92:15:1c:1d:ce:89:b6:71: a4:e3:bb:ea:95:fd:2c:83:74:52:8e:1f:e2:3c:b8: 22:30:25:b2:ea:1f:a8:d8:cc:4a:77:88:8f:0a:d2: 0d:41:df:15:dd:7d:d4:66:4a:4d:6d:31:1a:88:af: 3e:79:5f:05:a6:87:8d:80:f4:61:38:22:79:76:62: e6:41:2d:5d:4c:1d:c8:56:43:bb:ac:a7:c1:7d:70: 3f:7f:53:66:2d:e1:b7:3a:70:fd:07:6b:be:15:84: f8:9a:10:0e:13:fe:88:b8:3e:3d:60:d1:fc:38:8e: 1f:7d:70:d1:a4:cf:42:f5:f2:21:d7:87:e2:11:2a: ea:ef:04:47:48:5c:f3:54:a7:81:38:a7:b2:6f:42: e3:6b:70:32:0a:f5:d4:44:3a:d3:b8:4f:38:36:61: 51:b2:12:53:40:94:3e:a8:0f:f5:dc:cb:bb:96:b2: 06:08:62:7d:77:b2:20:90:e8:89:05:91:a9:3f:98: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.148.0/23 IPv6: 2406:45c0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:70:8f:7a:05:00:61:b3:e5:5c:bd:66:3b:cb:d7:90:63:53: 74:89:ea:28:b8:68:8d:98:c9:5b:06:46:8d:b5:47:3a:08:cd: 32:fe:4c:b5:5b:74:09:24:4f:25:ae:f8:f0:7a:34:da:c4:92: a3:03:3f:05:0e:3e:94:80:a8:b9:1f:37:6e:da:a5:c2:8d:c6: 1a:24:3d:4d:04:c1:59:37:48:21:e4:71:a6:05:a6:67:7c:38: cf:af:69:1d:86:f2:5c:eb:32:87:a6:a5:7e:6d:e6:b9:84:6d: 90:ab:cf:b1:cc:25:a4:3c:30:9e:1c:93:38:e6:86:14:4e:88: 93:f1:72:67:05:45:d0:0c:3a:4a:20:cf:c6:4b:75:1f:02:1d: 61:6a:7b:89:0d:e1:f7:2a:87:56:0f:1f:39:99:6c:f7:64:93: 3e:d2:7d:31:24:a1:51:42:de:b6:a2:59:8d:e6:0b:32:30:e2: 49:82:dd:75:47:68:60:51:c0:e5:1a:4d:79:47:f9:43:4c:25: 51:92:33:58:3a:08:a5:35:d0:0e:92:3b:33:86:ff:d1:7a:a4: fd:63:b9:a8:06:7a:1c:6e:ce:7f:9b:2c:c1:a0:4d:09:14:1c: 3a:03:da:56:c0:6c:c1:52:fd:59:aa:fe:7b:f1:f0:b3:76:b5: 0d:57:f4:3e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUGqnw6IEgPo1a5amIvuSQ26iSMdwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwNTE0MloX DTI0MDcyOTAwNTY0MlowMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlE RUMxN0RERjUzRTBERTE0RkQ4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoAuEkrVkXMGPyPsBvE7bX+8yhAJQCUvYP6LZM94hfQMA2AnuNlri4fk3In qpO3WPGFJ8NdBU8yzBRrIczCvx6QvZIVHB3OibZxpOO76pX9LIN0Uo4f4jy4IjAl suofqNjMSneIjwrSDUHfFd191GZKTW0xGoivPnlfBaaHjYD0YTgieXZi5kEtXUwd yFZDu6ynwX1wP39TZi3htzpw/QdrvhWE+JoQDhP+iLg+PWDR/DiOH31w0aTPQvXy IdeH4hEq6u8ER0hc81SngTinsm9C42twMgr11EQ607hPODZhUbISU0CUPqgP9dzL u5ayBghifXeyIJDoiQWRqT+YzUkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJLmymg6+hjqAxnewX3fU+DeFP2JMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0MzA0YjY0 LTI4OTktNDgzMC05YzNjLTM3NTg0YTMyN2UxZS8wLzkyRTZDQTY4M0FGQTE4RUEw MzE5REVDMTdEREY1M0UwREUxNEZEODkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmZQwDQQCAAIwBwMFACQGRcAwDQYJKoZIhvcNAQELBQADggEBABpwj3oFAGGz 5Vy9ZjvL15BjU3SJ6ii4aI2YyVsGRo21RzoIzTL+TLVbdAkkTyWu+PB6NNrEkqMD PwUOPpSAqLkfN27apcKNxhokPU0EwVk3SCHkcaYFpmd8OM+vaR2G8lzrMoempX5t 5rmEbZCrz7HMJaQ8MJ4ckzjmhhROiJPxcmcFRdAMOkogz8ZLdR8CHWFqe4kN4fcq h1YPHzmZbPdkkz7SfTEkoVFC3raiWY3mCzIw4kmC3XVHaGBRwOUaTXlH+UNMJVGS M1g6CKU10A6SOzOG/9F6pP1juagGehxuzn+bLMGgTQkUHDoD2lbAbMFS/Vmq/nvx 8LN2tQ1X9D4= -----END CERTIFICATE-----Generated at Thu May 9 00:29:13 2024 by rpki-client on console-ams.rpki-client.org