$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer File: B197F427572524588487CFDB163A9E512FAE4DF2.cer (raw, json) Hash identifier: DBj1kgZh/+S7jbH0HATGekzvM4NzcxIvCXMBXB4itJ0= Subject key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CDDC14547930229982591951BA5A4BD089D8257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft caRepository: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 26 Feb 2024 11:49:17 +0000 Certificate not after: Mon 24 Feb 2025 11:54:17 +0000 Subordinate resources: IP: 103.153.246.0/23 IP: 2406:4ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:dd:c1:45:47:93:02:29:98:25:91:95:1b:a5:a4:bd:08:9d:82:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 26 11:49:17 2024 GMT Not After : Feb 24 11:54:17 2025 GMT Subject: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:07:b5:35:be:95:d5:bb:49:9c:15:26:1c: bb:5c:b1:dc:a1:94:45:68:9b:d8:4a:10:d6:ac:dd: c5:13:70:fc:9d:2d:86:7f:62:17:da:c5:93:7b:df: e3:06:e0:99:9b:fe:bd:8a:81:52:fd:bf:b4:4b:7f: 9c:38:0f:b4:ac:e3:a9:bf:3d:de:1d:cb:7c:45:d2: 55:23:46:93:06:ce:8f:7c:ef:75:be:80:03:86:20: 08:78:6c:93:00:d9:96:7c:ca:b9:04:e6:01:a9:59: 28:61:d7:80:67:f8:1a:36:9f:e4:fe:98:b8:93:f9: 3e:8f:da:f3:f4:4b:49:9c:56:15:7c:6d:70:be:c4: 77:0f:e2:c6:32:5a:e9:4a:ad:e4:fb:37:b5:f3:b6: 3f:1f:2f:85:a0:70:00:52:13:c4:5f:fd:0b:bc:bf: b2:64:98:02:7e:b7:00:6f:95:e6:b8:1b:a7:16:3f: 5e:f2:f6:b2:1b:0f:33:97:8b:34:b5:d2:35:fa:55: b7:54:a1:8a:3c:0d:b9:47:21:8a:15:a7:20:2f:87: 31:32:7f:17:0e:11:6b:a2:91:a7:dd:7d:4e:2c:1a: 07:47:5f:4c:ae:e3:47:98:a3:d1:8a:09:a2:81:02: af:9a:f5:b6:48:31:8a:8a:e1:7a:47:a5:a4:a9:7d: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.246.0/23 IPv6: 2406:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 19:76:c5:ff:14:69:90:fc:60:3f:69:75:b2:15:df:ae:36:f5: 68:8f:10:de:17:54:32:fa:ed:9b:fa:30:07:ff:b7:d2:cc:5d: 01:a5:b0:6a:1c:28:4b:b1:be:29:98:02:8e:a0:d2:f8:44:d5: c4:3a:36:26:d5:26:3d:a8:43:99:4a:1b:39:68:71:42:6c:4a: 3c:55:42:7f:a6:cb:9a:f7:be:07:60:cd:c3:fc:c6:6f:24:83: bd:c8:e9:48:b4:ea:6e:8a:cd:40:81:de:71:a5:fb:f2:5f:b8: 74:61:c2:1e:40:f8:53:8f:0f:9f:80:59:f3:d0:0c:70:4c:ff: 9b:ef:a2:95:ac:7d:58:f0:c5:c2:fb:5e:ba:c4:74:e2:b3:cd: 8c:94:9c:30:37:0f:a4:2f:be:e3:99:b8:2d:84:fb:68:4c:a5: ce:98:a9:5a:1b:b5:92:61:68:75:d9:0c:e3:f7:3e:01:1c:0f: d7:4d:3d:14:44:c0:d8:c9:68:c0:4a:52:19:96:85:89:d0:d0: 1c:b5:df:c3:ed:d2:8d:3a:96:0b:4a:00:0c:36:a1:27:f3:81: a6:8f:9e:0c:00:42:5e:fe:81:c6:47:d9:31:f2:49:c4:77:bf: 3d:d0:a9:08:b1:a8:3e:b6:85:48:bd:6e:86:4c:56:ad:95:de: eb:ca:14:d0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUfN3BRUeTAimYJZGVG6WkvQidglcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyNjExNDkxN1oX DTI1MDIyNDExNTQxN1owMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdD RkRCMTYzQTlFNTEyRkFFNERGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9BB7U1vpXVu0mcFSYcu1yx3KGURWib2EoQ1qzdxRNw/J0thn9iF9rFk3vf 4wbgmZv+vYqBUv2/tEt/nDgPtKzjqb893h3LfEXSVSNGkwbOj3zvdb6AA4YgCHhs kwDZlnzKuQTmAalZKGHXgGf4Gjaf5P6YuJP5Po/a8/RLSZxWFXxtcL7Edw/ixjJa 6Uqt5Ps3tfO2Px8vhaBwAFITxF/9C7y/smSYAn63AG+V5rgbpxY/XvL2shsPM5eL NLXSNfpVt1ShijwNuUchihWnIC+HMTJ/Fw4Ra6KRp919TiwaB0dfTK7jR5ij0YoJ ooECr5r1tkgxiorhekelpKl9apsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGX9CdXJSRYhIfP2xY6nlEvrk3yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkY2Y0MDY3 LWE2OWQtNDkwOC1iZWU4LWI0NjU1YmRjMTVmOC8wL0IxOTdGNDI3NTcyNTI0NTg4 NDg3Q0ZEQjE2M0E5RTUxMkZBRTRERjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmfYwDQQCAAIwBwMFACQGTsAwDQYJKoZIhvcNAQELBQADggEBABl2xf8UaZD8 YD9pdbIV36429WiPEN4XVDL67Zv6MAf/t9LMXQGlsGocKEuxvimYAo6g0vhE1cQ6 NibVJj2oQ5lKGzlocUJsSjxVQn+my5r3vgdgzcP8xm8kg73I6Ui06m6KzUCB3nGl +/JfuHRhwh5A+FOPD5+AWfPQDHBM/5vvopWsfVjwxcL7XrrEdOKzzYyUnDA3D6Qv vuOZuC2E+2hMpc6YqVobtZJhaHXZDOP3PgEcD9dNPRREwNjJaMBKUhmWhYnQ0By1 38Pt0o06lgtKAAw2oSfzgaaPngwAQl7+gcZH2THyScR3vz3QqQixqD62hUi9boZM Vq2V3uvKFNA= -----END CERTIFICATE-----Generated at Thu May 9 00:37:09 2024 by rpki-client on console-fra.rpki-client.org