$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer (raw, json) Hash identifier: ERsF/8F1eQ2eXlu7iGvSoEjZdSz2yi0RVY7NLFfDFF4= Subject key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76CAAA17B43DEF87718228529DE046DCADB56491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 06 Jan 2024 16:31:17 +0000 Certificate not after: Sat 04 Jan 2025 16:36:17 +0000 Subordinate resources: IP: 103.168.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ca:aa:17:b4:3d:ef:87:71:82:28:52:9d:e0:46:dc:ad:b5:64:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 6 16:31:17 2024 GMT Not After : Jan 4 16:36:17 2025 GMT Subject: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:60:9e:85:99:31:f1:d3:37:33:9b:26:bc:01: 6d:1a:d2:c5:5c:69:b3:8d:c7:d7:2e:07:34:42:22: 3e:4c:88:a1:6b:61:ca:7c:80:12:50:8b:87:1d:c5: f6:1c:5b:c2:43:c1:2f:5e:7f:60:1c:41:f7:09:9f: 91:68:63:b0:bd:fd:b4:a4:36:80:82:6e:24:66:e6: 3f:34:29:cf:fa:e2:a0:45:0e:e9:af:80:b5:61:9c: 62:a0:25:b8:0f:1e:d9:e1:2f:99:1e:0e:3c:43:fb: 62:65:5d:19:a3:5a:c2:bc:1e:91:b1:c6:6b:6a:2d: 0d:28:ac:33:52:e1:3a:81:34:a2:5b:af:76:a1:b8: b5:24:3f:69:4c:81:71:97:5c:40:4f:b7:44:55:ff: de:07:3c:21:3d:5f:49:d1:1c:bc:be:c2:4a:2e:e5: fd:f9:d9:ee:2b:9a:17:bf:69:9d:ad:51:6e:48:54: 3f:ef:b0:d1:54:d5:ec:c4:dd:f2:2e:76:7d:e2:3f: 04:2b:96:c1:2a:6c:42:4f:b4:85:41:a6:0e:69:68: 91:2b:56:3f:4b:13:81:d6:15:dc:c0:00:6d:a9:b5: f4:74:12:39:27:38:de:09:11:b6:8c:1f:fc:03:9e: 0a:f4:0f:a4:4a:89:77:13:a2:34:9f:1f:1e:5d:5e: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:cc:fa:76:bf:00:98:22:68:cb:6e:1c:ee:8e:0f:9e:8b:fa: 38:ed:d1:5b:3c:da:ec:5b:0a:d9:36:63:94:9f:3e:cb:4f:8f: 23:82:88:b1:57:08:b7:c6:af:6b:8a:1a:fa:13:b7:12:5b:0b: a1:4c:35:ce:91:2e:e0:f4:fb:ba:26:da:80:bb:af:4d:69:73: 47:f5:01:31:f4:59:3f:7b:47:df:ba:f2:e9:69:c7:80:e9:9c: 35:50:1b:11:b5:79:fa:3c:b1:94:68:33:49:29:1e:e9:8e:de: 75:18:99:8f:c1:c8:c2:87:16:17:ed:75:a5:2b:8c:87:30:10: 94:96:95:3e:6c:4e:94:be:5f:a1:ea:ab:ac:ed:5f:a0:c9:78: c6:43:fe:02:32:84:c5:99:0e:0a:ea:6b:c8:86:bc:bc:36:64: 7c:4c:ac:b8:ab:c6:e4:24:c0:ec:b6:f2:79:76:2b:92:0c:74: c1:69:a9:58:e4:7f:74:b0:54:7b:4a:76:81:4e:0f:f4:77:c2: 8b:2c:41:78:55:13:b1:c6:a5:ab:b7:50:7c:a8:4f:99:60:15: 83:a2:61:4b:c5:c1:18:de:39:51:e2:bb:6f:80:88:ae:61:54: f1:b7:cf:86:8c:03:1f:99:9e:c6:c3:e7:b6:26:33:1b:71:20: 0f:ce:1f:1b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdsqqF7Q974dxgihSneBG3K21ZJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwNjE2MzExN1oX DTI1MDEwNDE2MzYxN1owMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5 QzE1NDU0NjlDQTJCOTgzMzRGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJgnoWZMfHTNzObJrwBbRrSxVxps43H1y4HNEIiPkyIoWthynyAElCLhx3F 9hxbwkPBL15/YBxB9wmfkWhjsL39tKQ2gIJuJGbmPzQpz/rioEUO6a+AtWGcYqAl uA8e2eEvmR4OPEP7YmVdGaNawrwekbHGa2otDSisM1LhOoE0oluvdqG4tSQ/aUyB cZdcQE+3RFX/3gc8IT1fSdEcvL7CSi7l/fnZ7iuaF79pna1RbkhUP++w0VTV7MTd 8i52feI/BCuWwSpsQk+0hUGmDmlokStWP0sTgdYV3MAAbam19HQSOSc43gkRtowf /AOeCvQPpEqJdxOiNJ8fHl1eJ0kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLHU9Ulb5PnZleqcFUVGnKK5gzTxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUw LTAwMDItNGE2Ny1hNzM5LTMwMzNkNWI1YmE2MS8wL0IxRDRGNTQ5NUJFNEY5RDk5 NUVBOUMxNTQ1NDY5Q0EyQjk4MzM0RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLgwDQYJKoZIhvcNAQELBQADggEBAIrM+na/AJgiaMtuHO6OD56L+jjt0Vs8 2uxbCtk2Y5SfPstPjyOCiLFXCLfGr2uKGvoTtxJbC6FMNc6RLuD0+7om2oC7r01p c0f1ATH0WT97R9+68ulpx4DpnDVQGxG1efo8sZRoM0kpHumO3nUYmY/ByMKHFhft daUrjIcwEJSWlT5sTpS+X6Hqq6ztX6DJeMZD/gIyhMWZDgrqa8iGvLw2ZHxMrLir xuQkwOy28nl2K5IMdMFpqVjkf3SwVHtKdoFOD/R3wossQXhVE7HGpau3UHyoT5lg FYOiYUvFwRjeOVHiu2+AiK5hVPG3z4aMAx+ZnsbD57YmMxtxIA/OHxs= -----END CERTIFICATE-----Generated at Thu May 9 00:29:17 2024 by rpki-client on console-ams.rpki-client.org