$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer (raw, json) Hash identifier: l0PnEhbuopG2zXOU3r29SwpdFWAqW4Y4FverILb44q4= Subject key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52EBC43B592CE28307BF0C8B0A51D30FCE64CE57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft caRepository: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 29 May 2024 19:47:38 +0000 Certificate not after: Wed 28 May 2025 19:52:38 +0000 Subordinate resources: IP: 103.227.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:eb:c4:3b:59:2c:e2:83:07:bf:0c:8b:0a:51:d3:0f:ce:64:ce:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 29 19:47:38 2024 GMT Not After : May 28 19:52:38 2025 GMT Subject: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:b4:9f:20:ac:f8:d2:88:00:fe:01:a6:37: b6:86:9b:ec:cc:34:43:14:9e:d1:b2:44:28:b5:bb: a5:d8:77:1a:61:b6:c0:41:71:aa:ff:b1:2c:0e:ea: 56:49:54:cc:bd:ce:81:f6:7c:80:88:2b:05:4a:34: bf:b9:82:30:ae:d1:bb:e7:74:9f:38:57:b9:ab:99: 6e:06:da:df:4d:ad:90:4f:76:38:d7:26:6f:aa:92: 76:cc:2c:5f:1b:f2:1c:ac:7f:4b:de:d2:26:71:dc: f1:ea:46:44:4c:6e:52:40:9b:07:dc:21:27:75:47: c1:28:ea:0a:db:5d:49:7b:5b:b8:80:4c:ec:5f:7b: 2f:ac:46:7c:9f:14:ec:97:7c:9b:5e:85:7a:a1:e7: 7f:9d:ce:10:4e:7a:2c:b2:62:40:61:6d:c5:dc:d7: fc:e9:b1:68:84:9d:c7:e6:85:3c:f8:ef:20:b9:58: cf:d5:94:63:10:35:7a:c3:42:26:9d:b7:4a:2e:76: 79:a4:a9:3e:62:1d:7d:8c:ee:28:92:25:17:14:26: 88:5d:7f:27:98:57:5d:1a:59:fa:12:04:05:ed:21: 3f:90:cc:75:1e:a2:1d:f0:fa:d5:c5:ef:49:81:50: 07:fa:07:0b:2c:73:03:01:5c:11:f7:91:6c:13:42: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.184.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:d1:b9:84:16:d3:60:e7:34:f7:a5:34:07:a9:99:82:4a:42: 3a:00:68:b8:f0:66:88:82:1c:6c:08:85:0e:85:e0:e5:1c:c1: 62:25:9d:2c:71:87:0d:96:6c:8a:0e:1e:a1:0e:0e:c2:91:d8: fd:69:62:c0:da:c5:28:8c:b8:bb:ea:26:bd:5a:1f:cc:8e:dc: 6a:0d:f4:54:1a:e0:6f:00:1c:68:2c:ab:7d:5f:11:5d:f1:15: eb:e2:ef:c9:89:44:d0:78:c5:05:05:b8:c8:f7:3b:6d:ff:c2: 6b:01:5a:8e:63:4d:5f:e5:43:01:b1:e5:51:e4:78:b9:86:7d: c1:fa:e7:04:71:8f:2b:db:98:24:b5:85:1d:92:34:05:e9:5d: 38:33:9d:86:3f:26:31:15:53:1d:44:6e:6e:9b:7c:d9:39:74: 8e:c9:3f:3a:28:cc:ca:58:7d:b3:cd:5a:71:a1:43:2b:3b:33: 26:4e:f9:4e:27:8a:85:66:b5:3e:53:82:b8:c0:89:8d:a7:d7: 26:a5:9b:85:5f:d9:86:ea:a2:59:9f:d3:a9:4f:75:38:a3:59: 2f:43:c2:30:8f:44:ba:30:3a:08:d0:29:99:99:dc:1c:63:75: 67:8c:87:d7:bd:2b:c2:05:da:d9:25:94:fa:55:75:e5:cb:a6: 4b:f1:a0:23 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUuvEO1ks4oMHvwyLClHTD85kzlcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyOTE5NDczOFoX DTI1MDUyODE5NTIzOFowMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYz QzcxMEI0NjcwNjlCMTE5NEREODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOE0tJ8grPjSiAD+AaY3toab7Mw0QxSe0bJEKLW7pdh3GmG2wEFxqv+xLA7q VklUzL3OgfZ8gIgrBUo0v7mCMK7Ru+d0nzhXuauZbgba302tkE92ONcmb6qSdsws XxvyHKx/S97SJnHc8epGRExuUkCbB9whJ3VHwSjqCttdSXtbuIBM7F97L6xGfJ8U 7Jd8m16FeqHnf53OEE56LLJiQGFtxdzX/OmxaISdx+aFPPjvILlYz9WUYxA1esNC Jp23Si52eaSpPmIdfYzuKJIlFxQmiF1/J5hXXRpZ+hIEBe0hP5DMdR6iHfD61cXv SYFQB/oHCyxzAwFcEfeRbBNCAO0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLMP295w++cMxE88cQtGcGmxGU3YMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNzUwODhl LTQ5YWYtNDcyYi05YjYyLTgxZTczZGFhZjFkNi8wL0IzMEZEQkRFNzBGQkU3MEND NDRGM0M3MTBCNDY3MDY5QjExOTRERDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn47gwDQYJKoZIhvcNAQELBQADggEBAI3RuYQW02DnNPelNAepmYJKQjoAaLjw ZoiCHGwIhQ6F4OUcwWIlnSxxhw2WbIoOHqEODsKR2P1pYsDaxSiMuLvqJr1aH8yO 3GoN9FQa4G8AHGgsq31fEV3xFevi78mJRNB4xQUFuMj3O23/wmsBWo5jTV/lQwGx 5VHkeLmGfcH65wRxjyvbmCS1hR2SNAXpXTgznYY/JjEVUx1Ebm6bfNk5dI7JPzoo zMpYfbPNWnGhQys7MyZO+U4nioVmtT5TgrjAiY2n1yalm4Vf2Ybqolmf06lPdTij WS9DwjCPRLowOgjQKZmZ3BxjdWeMh9e9K8IF2tkllPpVdeXLpkvxoCM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:31 2024 by rpki-client on console-ams.rpki-client.org