$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer (raw, json) Hash identifier: 16KhhLh1xO5pIYM9JkQxQs5qTRMK3hEtDKz82ApstRI= Subject key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D119B50CAB30EA0068574EA13E174CAC6520861 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 05:38:47 +0000 Certificate not after: Mon 29 Jul 2024 05:43:47 +0000 Subordinate resources: IP: 103.123.236.0/24 IP: 2001:df6:d700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:9b:50:ca:b3:0e:a0:06:85:74:ea:13:e1:74:ca:c6:52:08:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 05:38:47 2023 GMT Not After : Jul 29 05:43:47 2024 GMT Subject: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:85:39:07:02:9a:d7:79:11:67:31:7a:0f: ed:52:b1:dc:14:29:54:6e:8e:f2:87:d5:44:d6:88: 41:0d:b5:5b:30:56:b4:6a:e2:d5:8d:5c:31:83:cb: 9b:02:cc:17:2e:6d:1b:24:99:36:ba:12:9c:51:94: b9:fb:de:22:26:7f:57:b4:e2:82:50:be:51:1c:86: 87:57:78:3b:c5:89:d2:3d:5f:68:1f:f4:45:72:47: 7d:73:57:04:ad:fa:07:ab:18:1e:8f:54:1d:9f:02: a7:8d:88:00:eb:42:e1:28:1d:f5:4a:36:38:a3:db: 5f:f7:14:df:b4:a5:08:c0:57:6d:c4:34:92:7e:2a: ab:d2:39:47:27:cf:b4:54:95:b3:66:0f:69:6d:96: cf:c1:eb:68:85:5d:24:09:19:26:e2:c8:cf:f5:7d: 4a:5e:ad:da:94:15:3f:3d:b1:76:b1:e4:4e:2d:65: f8:12:b7:b6:15:72:7b:b2:6c:88:ac:03:90:fc:b3: d6:d4:d7:fd:15:c9:bf:29:e7:40:87:54:69:ea:d7: 47:e7:30:59:65:d2:94:6f:08:9f:a2:7f:1f:8c:72: fa:a3:f1:6d:23:79:5a:e5:80:30:7f:e2:4c:87:6a: b9:f8:b6:bc:44:18:34:08:63:1f:da:ca:36:32:b1: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.236.0/24 IPv6: 2001:df6:d700::/48 Signature Algorithm: sha256WithRSAEncryption 6f:f8:01:ed:ae:fd:15:f2:6e:75:b8:b4:bb:41:95:9f:aa:26: bb:93:4e:98:e9:db:68:19:f2:cb:ba:0a:a6:60:37:89:cf:7e: ce:7e:bf:21:e8:6d:00:00:4d:57:9e:05:10:96:84:5a:91:79: 95:28:d1:fa:48:ba:b4:2a:41:47:7d:d4:41:9f:26:8b:d7:f4: d6:e9:cd:85:e4:84:90:47:75:a1:9d:d5:58:8c:22:23:be:8b: 9a:ee:cf:37:22:50:59:61:02:50:93:5c:c0:b9:eb:5b:b2:12: 50:05:99:93:9c:64:e1:2e:9a:40:05:d8:97:00:12:1e:38:7e: fd:00:53:c2:85:10:ae:a7:ce:b5:91:b5:59:0e:62:05:3f:d9: 82:89:90:f5:83:21:36:f2:1d:c7:93:7c:1a:af:6e:f2:eb:79: cc:76:51:3e:b7:0c:6d:56:0b:9c:03:11:71:d7:5d:4e:42:80: c3:3a:51:b5:1f:1b:0e:cb:f9:d0:f9:c3:0c:0d:54:2d:3c:6c: f1:72:33:62:c7:15:83:7c:24:94:18:c4:54:49:0a:2a:2f:da: 40:53:7c:68:87:f0:c5:16:14:22:e7:c6:72:36:9b:a6:f3:82: dd:5f:3f:a4:7c:dc:a6:3e:41:d0:9d:0a:86:05:ad:86:e6:e6: 8b:c6:05:91 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTRGbUMqzDqAGhXTqE+F0ysZSCGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA1Mzg0N1oX DTI0MDcyOTA1NDM0N1owMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJB QzBERjY3MjlDOUE1REU1Q0ZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk3hTkHAprXeRFnMXoP7VKx3BQpVG6O8ofVRNaIQQ21WzBWtGri1Y1cMYPL mwLMFy5tGySZNroSnFGUufveIiZ/V7TiglC+URyGh1d4O8WJ0j1faB/0RXJHfXNX BK36B6sYHo9UHZ8Cp42IAOtC4Sgd9Uo2OKPbX/cU37SlCMBXbcQ0kn4qq9I5RyfP tFSVs2YPaW2Wz8HraIVdJAkZJuLIz/V9Sl6t2pQVPz2xdrHkTi1l+BK3thVye7Js iKwDkPyz1tTX/RXJvynnQIdUaerXR+cwWWXSlG8In6J/H4xy+qPxbSN5WuWAMH/i TIdqufi2vEQYNAhjH9rKNjKxc80CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLQVPc7ofhX5KqusDfZynJpd5c/MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1YzljMzk0 LWZjZDAtNGI0Yi1iYjFhLTgyNDc3MGY0MDM0Mi8wL0I0MTUzRENFRTg3RTE1Rjky QUFCQUMwREY2NzI5QzlBNURFNUNGQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABne+wwDwQCAAIwCQMHACABDfbXADANBgkqhkiG9w0BAQsFAAOCAQEAb/gB7a79 FfJudbi0u0GVn6omu5NOmOnbaBnyy7oKpmA3ic9+zn6/IehtAABNV54FEJaEWpF5 lSjR+ki6tCpBR33UQZ8mi9f01unNheSEkEd1oZ3VWIwiI76Lmu7PNyJQWWECUJNc wLnrW7ISUAWZk5xk4S6aQAXYlwASHjh+/QBTwoUQrqfOtZG1WQ5iBT/ZgomQ9YMh NvIdx5N8Gq9u8ut5zHZRPrcMbVYLnAMRcdddTkKAwzpRtR8bDsv50PnDDA1ULTxs 8XIzYscVg3wklBjEVEkKKi/aQFN8aIfwxRYUIufGcjabpvOC3V8/pHzcpj5B0J0K hgWthubmi8YFkQ== -----END CERTIFICATE-----Generated at Wed May 8 18:12:19 2024 by rpki-client on console-fra.rpki-client.org