$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer File: B392381083372148D0977D0066CFF38FD5A32CDB.cer (raw, json) Hash identifier: b5h2/E2Ts+12xj3yfzWbGItwpwk4J1/+vEJ60hJ/aEQ= Subject key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 275D887FC757E42A41464C3388F7364410F3C577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 06 Feb 2024 13:23:21 +0000 Certificate not after: Tue 04 Feb 2025 13:28:21 +0000 Subordinate resources: IP: 103.185.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5d:88:7f:c7:57:e4:2a:41:46:4c:33:88:f7:36:44:10:f3:c5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 13:23:21 2024 GMT Not After : Feb 4 13:28:21 2025 GMT Subject: CN=B392381083372148D0977D0066CFF38FD5A32CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:3d:28:b4:9b:46:2a:a1:89:ec:d4:9d:d8: e3:0e:5e:4e:e7:d6:af:de:00:cc:de:07:71:c8:b6: d4:fc:e0:02:27:75:f5:f7:08:a4:af:13:48:53:ad: 7f:fd:bd:ba:06:8d:d3:c8:c1:9e:cd:62:f1:c7:91: 78:5e:73:44:c9:92:c0:c1:61:88:87:b4:4b:43:04: 92:ec:4b:a1:8c:1c:72:65:9e:55:f7:26:66:01:d1: e1:1f:02:8a:f4:d8:ac:14:bd:f3:a4:6d:30:ec:64: 1f:53:27:c5:a4:1b:4f:aa:4d:3a:63:1b:78:20:f3: b5:56:b4:d9:55:10:e9:f0:b7:b6:62:71:e0:5c:39: 0c:14:1b:86:d6:85:87:a5:5b:35:b7:bb:c0:db:04: 99:a7:dd:48:2b:a2:27:f4:af:5b:dd:82:32:69:f7: 23:a0:ae:87:17:21:a7:f6:bf:af:f9:c1:47:28:36: 8e:e9:29:ee:a8:78:12:0e:04:f6:38:53:7b:43:58: 7c:d6:db:e3:7b:8e:4d:21:91:89:a7:dd:f2:a0:dc: e0:96:47:7a:20:84:e9:2a:57:54:7d:1d:70:57:99: bd:46:98:b6:44:5d:93:0e:9f:b0:a9:15:b4:f4:7f: 68:c7:01:9b:44:48:bf:d1:72:d9:d4:eb:ff:18:25: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.82.0/23 Signature Algorithm: sha256WithRSAEncryption 20:e1:af:11:ee:52:1c:22:8e:f4:86:db:dd:f8:4b:59:29:93: 5b:21:6f:24:fb:c6:a3:39:81:fd:2e:cf:cb:31:37:9c:a8:c2: ea:6c:2d:9f:a0:90:5c:be:f5:32:df:94:12:ea:a3:db:7d:56: b7:0e:56:d4:87:36:4f:ab:3d:72:43:21:9f:32:af:6a:55:ce: 05:7f:58:cf:92:0e:f0:92:5f:02:3e:5c:85:ff:f4:3f:39:c0: 04:35:0b:e3:b9:86:06:4c:c4:0c:09:d3:dd:01:a7:36:e3:ae: 29:e4:f7:84:c7:74:60:0f:db:3f:b5:63:ab:ff:c6:94:14:5d: b2:0d:e6:17:17:b2:84:08:a9:e3:83:b8:72:f8:bb:d2:64:8e: be:3b:5f:9e:a7:ec:3b:30:46:ae:29:04:06:8b:10:52:9c:e6: 4e:4c:d7:77:3f:02:00:55:65:05:8e:7d:4c:d9:4e:1c:57:24: 42:26:64:9a:5d:8c:b3:e2:f6:a0:bb:65:b6:3b:41:28:86:24: d9:b4:ae:bb:e0:a1:f2:e1:a7:5a:61:94:a8:bf:38:78:f9:85: 59:36:4e:56:d3:61:0a:d0:24:9d:f6:94:af:2f:5e:2f:2e:43: 76:08:1b:2e:6e:97:c7:a2:1b:fa:19:85:28:f5:86:d6:6a:fe: 75:01:26:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJ12If8dX5CpBRkwziPc2RBDzxXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNjEzMjMyMVoX DTI1MDIwNDEzMjgyMVowMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3 RDAwNjZDRkYzOEZENUEzMkNEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNFPSi0m0YqoYns1J3Y4w5eTufWr94AzN4Hcci21PzgAid19fcIpK8TSFOt f/29ugaN08jBns1i8ceReF5zRMmSwMFhiIe0S0MEkuxLoYwccmWeVfcmZgHR4R8C ivTYrBS986RtMOxkH1MnxaQbT6pNOmMbeCDztVa02VUQ6fC3tmJx4Fw5DBQbhtaF h6VbNbe7wNsEmafdSCuiJ/SvW92CMmn3I6Cuhxchp/a/r/nBRyg2jukp7qh4Eg4E 9jhTe0NYfNbb43uOTSGRiafd8qDc4JZHeiCE6SpXVH0dcFeZvUaYtkRdkw6fsKkV tPR/aMcBm0RIv9Fy2dTr/xglpncCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLOSOBCDNyFI0Jd9AGbP84/VoyzbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViZjJjZjAz LWY5ZjktNGJjYS04YzJjLTYwNzMyODBkZmVhOC8wL0IzOTIzODEwODMzNzIxNDhE MDk3N0QwMDY2Q0ZGMzhGRDVBMzJDREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuVIwDQYJKoZIhvcNAQELBQADggEBACDhrxHuUhwijvSG2934S1kpk1shbyT7 xqM5gf0uz8sxN5yowupsLZ+gkFy+9TLflBLqo9t9VrcOVtSHNk+rPXJDIZ8yr2pV zgV/WM+SDvCSXwI+XIX/9D85wAQ1C+O5hgZMxAwJ090Bpzbjrink94THdGAP2z+1 Y6v/xpQUXbIN5hcXsoQIqeODuHL4u9Jkjr47X56n7DswRq4pBAaLEFKc5k5M13c/ AgBVZQWOfUzZThxXJEImZJpdjLPi9qC7ZbY7QSiGJNm0rrvgofLhp1phlKi/OHj5 hVk2TlbTYQrQJJ32lK8vXi8uQ3YIGy5ul8eiG/oZhSj1htZq/nUBJuI= -----END CERTIFICATE-----Generated at Wed May 8 17:45:24 2024 by rpki-client on console-ams.rpki-client.org