$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer (raw, json) Hash identifier: xPpb56cbg/1ZjK7R5nVKdWIeSx0YJ67pAsWOvKZdFXU= Subject key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D36470AB38BF81705D2DE55BFDC99F837F8545B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jul 2024 08:43:17 +0000 Certificate not after: Tue 15 Jul 2025 08:48:17 +0000 Subordinate resources: IP: 103.150.22.0/24 IP: 2001:df3:4f80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:36:47:0a:b3:8b:f8:17:05:d2:de:55:bf:dc:99:f8:37:f8:54:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 16 08:43:17 2024 GMT Not After : Jul 15 08:48:17 2025 GMT Subject: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:f2:52:ab:ea:1d:3e:ba:0b:7d:e8:41:0e: 28:a4:aa:00:fe:7d:98:84:ec:de:96:b3:5f:fe:80: 25:66:ba:95:f7:91:91:fd:33:7f:eb:13:9b:75:41: 5a:38:82:01:dd:ca:59:34:a9:0e:99:ed:41:a5:00: c0:4e:a3:4b:bf:c7:81:ad:c6:a4:38:0c:78:e3:bf: 86:88:7f:6c:67:76:29:94:ba:b8:ff:c2:1f:42:c7: 55:67:7c:e3:77:63:2b:80:00:7f:0e:3f:06:07:f5: 3f:ff:a9:a3:83:9e:f5:4a:1f:8d:1e:d5:7a:f3:9f: 1c:b4:de:d0:b2:e4:9a:08:ca:5d:64:c7:05:9a:3b: 4c:28:0b:d3:17:fd:b5:0b:d8:6e:e6:de:78:c8:f1: 7c:2e:4c:9e:68:9d:0b:f3:3a:29:b2:c5:5c:27:a9: 20:9c:b8:7f:b4:fb:65:13:f4:d0:71:b1:58:ca:2c: 80:0b:4e:40:d4:ba:ec:74:f3:6c:1f:87:2b:d0:bf: 01:7b:41:51:cf:ee:0c:81:f6:a6:eb:bb:65:db:3a: 8d:66:bd:96:98:e4:43:01:d9:77:54:a2:22:85:ea: 1d:b1:1e:52:51:43:37:14:6a:4f:49:55:5c:f3:62: f1:2d:cb:ca:e7:0d:c5:ee:d1:c5:81:ef:51:81:79: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.22.0/24 IPv6: 2001:df3:4f80::/48 Signature Algorithm: sha256WithRSAEncryption 55:f0:70:e7:3c:d2:dc:bf:c0:a5:0e:9a:6d:73:f1:f7:77:93: d2:be:38:ba:8e:a6:53:08:3a:9a:ec:83:2c:5a:a5:50:dd:e2: ae:55:81:09:7a:91:61:33:04:6b:8c:29:b4:75:e3:60:4c:f8: 97:4f:ee:43:93:2b:65:62:f0:c2:06:f1:ca:3b:d3:ca:dc:07: 7a:f1:fc:04:82:97:1c:3c:50:77:67:4f:23:92:19:07:3c:89: e8:5f:b8:11:7c:ca:5e:00:28:21:e7:c9:8e:35:7b:6d:b7:62: 08:fb:4d:4a:12:20:a7:0b:fb:60:88:a3:71:9b:ff:0f:f0:81: 6b:32:74:9d:9c:f3:1c:3f:d6:8c:b8:da:aa:07:92:79:e9:7c: a1:f6:ab:db:c0:37:38:60:df:16:e0:87:fe:b7:cf:e7:42:27: ab:b0:e2:89:99:d6:a8:01:fd:a0:2c:33:39:b8:d5:f7:5b:7d: 56:89:48:cd:f9:db:a1:1e:33:16:0c:41:12:bb:d5:21:78:09: a9:28:93:33:e2:73:fe:3b:f6:ab:26:3a:a3:e8:e6:0a:f8:c7: f2:bb:fb:80:16:cf:cd:8d:c6:0e:4e:cb:4b:9a:e8:89:e0:2c: 09:ff:6d:67:80:b3:55:a8:d3:f4:4f:c9:d2:43:0d:39:a2:aa: 58:30:0f:80 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUDTZHCrOL+BcF0t5Vv9yZ+Df4VFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxNjA4NDMxN1oX DTI1MDcxNTA4NDgxN1owMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUw MkY0Q0JFNzE5RTdEOTcyQzZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQU8lKr6h0+ugt96EEOKKSqAP59mITs3pazX/6AJWa6lfeRkf0zf+sTm3VB WjiCAd3KWTSpDpntQaUAwE6jS7/Hga3GpDgMeOO/hoh/bGd2KZS6uP/CH0LHVWd8 43djK4AAfw4/Bgf1P/+po4Oe9UofjR7VevOfHLTe0LLkmgjKXWTHBZo7TCgL0xf9 tQvYbubeeMjxfC5MnmidC/M6KbLFXCepIJy4f7T7ZRP00HGxWMosgAtOQNS67HTz bB+HK9C/AXtBUc/uDIH2puu7Zds6jWa9lpjkQwHZd1SiIoXqHbEeUlFDNxRqT0lV XPNi8S3LyucNxe7RxYHvUYF5y/ECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLkR008ugBQNY64C9MvnGefZcsb2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2YTg0ZGU1 LTYxZDEtNDYxOC05ZmI0LTQzZjYzMWExMjg5YS8wL0I5MTFEMzRGMkU4MDE0MEQ2 M0FFMDJGNENCRTcxOUU3RDk3MkM2RjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnlhYwDwQCAAIwCQMHACABDfNPgDANBgkqhkiG9w0BAQsFAAOCAQEAVfBw5zzS 3L/ApQ6abXPx93eT0r44uo6mUwg6muyDLFqlUN3irlWBCXqRYTMEa4wptHXjYEz4 l0/uQ5MrZWLwwgbxyjvTytwHevH8BIKXHDxQd2dPI5IZBzyJ6F+4EXzKXgAoIefJ jjV7bbdiCPtNShIgpwv7YIijcZv/D/CBazJ0nZzzHD/WjLjaqgeSeel8ofar28A3 OGDfFuCH/rfP50Inq7DiiZnWqAH9oCwzObjV91t9VolIzfnboR4zFgxBErvVIXgJ qSiTM+Jz/jv2qyY6o+jmCvjH8rv7gBbPzY3GDk7LS5roieAsCf9tZ4CzVajT9E/J 0kMNOaKqWDAPgA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org