$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer (raw, json) Hash identifier: dB7DEhZWLX0sHBo4G+Xk2L+Qhb9NBrwcIxBtgHjP0E8= Subject key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 190FF31D38575E7DFB84242EFBBA319AF6BDF1E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft caRepository: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 17 Apr 2024 19:03:18 +0000 Certificate not after: Wed 16 Apr 2025 19:08:18 +0000 Subordinate resources: IP: 103.68.136.0/23 IP: 2001:df3:1200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0f:f3:1d:38:57:5e:7d:fb:84:24:2e:fb:ba:31:9a:f6:bd:f1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 17 19:03:18 2024 GMT Not After : Apr 16 19:08:18 2025 GMT Subject: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:ee:05:45:0c:96:09:97:00:4c:5b:ea:28: 13:b3:e1:82:d6:e5:3b:af:42:56:93:01:5e:5b:ff: 0f:41:be:5f:0b:45:42:cd:15:2a:07:ab:dc:b9:58: 85:3a:dd:c5:c8:86:b6:14:30:7d:e7:24:9b:78:b2: 77:d7:54:7d:9e:f8:86:fc:94:e0:08:b6:9b:22:d4: c7:a0:10:0e:b7:ce:75:f1:8d:f0:fe:8c:0d:eb:3d: 88:e6:e4:a3:13:c9:03:01:55:dc:d7:f2:6e:91:e6: 68:e5:32:d4:87:d3:1e:ec:6a:6b:ba:a5:23:19:c2: c7:8c:e5:50:fb:cc:e6:d0:e0:dc:71:d5:7f:02:d3: 4f:fb:8d:d7:96:ff:fb:b5:3b:67:52:35:1c:c3:79: fb:76:8f:c6:9a:26:94:12:c1:bc:38:91:5c:10:6a: 82:59:84:80:59:87:d7:b4:8e:be:d1:c9:8c:25:f3: cd:d7:8b:34:68:c3:8f:1f:64:1b:0b:0b:56:9c:f7: be:10:fc:47:f5:c9:68:e2:d2:00:28:08:ed:d0:d6: c3:ae:ef:2e:6d:fc:d3:ad:74:c5:a8:b4:30:87:b0: 4d:0c:7f:96:6c:51:20:7d:52:6d:46:3f:00:36:6b: 2e:c1:87:bd:63:ba:c1:b2:30:bd:8e:d5:fb:69:39: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.136.0/23 IPv6: 2001:df3:1200::/48 Signature Algorithm: sha256WithRSAEncryption 7e:16:22:b2:65:37:f9:36:64:54:74:2b:05:38:a6:1b:fa:54: 18:49:16:27:04:7f:cf:90:67:d8:89:2c:bf:13:e6:eb:1d:ab: c5:0c:4b:55:c5:97:c5:c3:e5:de:ae:80:c8:57:ad:45:3d:03: f3:8c:d0:6d:11:b3:0c:76:95:ad:d7:3e:18:cf:51:e3:6b:f1: b6:3f:58:77:9e:3e:db:2b:fd:a6:9f:47:85:11:53:a2:6d:98: f4:84:a9:b5:aa:ac:5a:18:16:1e:ac:3b:9b:d6:68:86:f6:fb: d7:2a:1d:1e:ca:47:0d:30:82:1a:da:49:ca:bf:c5:e2:6f:df: 73:c9:c2:29:d2:c8:c0:7d:59:40:05:ae:b8:1b:86:0c:15:50: 9d:da:f3:d4:14:b1:ee:36:3f:26:80:66:02:5c:4d:bf:2a:e6: f2:d1:f3:0d:1c:b0:12:00:72:b6:eb:69:18:07:90:cb:d7:ba: ae:a0:94:4d:d0:57:1c:f3:de:f0:de:b3:2f:6a:ac:9b:d5:5d: 84:ce:9b:b1:24:53:da:aa:42:d6:9e:f9:86:65:ed:44:39:93: 68:a5:21:2a:99:d0:bc:d5:39:9a:6e:19:8d:7c:3c:19:8a:e1: 0a:c6:f2:b7:f5:25:dc:1d:7e:1a:c8:ab:71:61:a1:9d:78:d1: 4c:9a:c2:6c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGQ/zHThXXn37hCQu+7oxmva98eQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxNzE5MDMxOFoX DTI1MDQxNjE5MDgxOFowMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMz M0Y1REVCRDBCMDU1RjlEQTQxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbv7gVFDJYJlwBMW+ooE7PhgtblO69CVpMBXlv/D0G+XwtFQs0VKger3LlY hTrdxciGthQwfeckm3iyd9dUfZ74hvyU4Ai2myLUx6AQDrfOdfGN8P6MDes9iObk oxPJAwFV3NfybpHmaOUy1IfTHuxqa7qlIxnCx4zlUPvM5tDg3HHVfwLTT/uN15b/ +7U7Z1I1HMN5+3aPxpomlBLBvDiRXBBqglmEgFmH17SOvtHJjCXzzdeLNGjDjx9k GwsLVpz3vhD8R/XJaOLSACgI7dDWw67vLm380610xai0MIewTQx/lmxRIH1SbUY/ ADZrLsGHvWO6wbIwvY7V+2k5ZRsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLLBjhHIUwvfTuMz9d69CwVfnaQWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZGMxYjA1 LTJhNjktNDViMC04YzQ0LTYyNjc3MjI3NmJkOS8wL0IyQzE4RTExQzg1MzBCREY0 RUUzMzNGNURFQkQwQjA1NUY5REE0MTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnRIgwDwQCAAIwCQMHACABDfMSADANBgkqhkiG9w0BAQsFAAOCAQEAfhYismU3 +TZkVHQrBTimG/pUGEkWJwR/z5Bn2IksvxPm6x2rxQxLVcWXxcPl3q6AyFetRT0D 84zQbRGzDHaVrdc+GM9R42vxtj9Yd54+2yv9pp9HhRFTom2Y9ISptaqsWhgWHqw7 m9Zohvb71yodHspHDTCCGtpJyr/F4m/fc8nCKdLIwH1ZQAWuuBuGDBVQndrz1BSx 7jY/JoBmAlxNvyrm8tHzDRywEgBytutpGAeQy9e6rqCUTdBXHPPe8N6zL2qsm9Vd hM6bsSRT2qpC1p75hmXtRDmTaKUhKpnQvNU5mm4ZjXw8GYrhCsbyt/Ul3B1+Gsir cWGhnXjRTJrCbA== -----END CERTIFICATE-----Generated at Wed May 8 21:02:26 2024 by rpki-client on console-fra.rpki-client.org