$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer (raw, json) Hash identifier: zgToVdEcxAmaIehYfgyovKX8yZxKXGRUptams0o11Z8= Subject key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68F318C3027DB5F255D14F6FDEBA712E74346377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft caRepository: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Jul 2024 23:58:51 +0000 Certificate not after: Thu 03 Jul 2025 00:03:51 +0000 Subordinate resources: IP: 103.226.48.0/22 IP: 2400:a680::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:18:c3:02:7d:b5:f2:55:d1:4f:6f:de:ba:71:2e:74:34:63:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 23:58:51 2024 GMT Not After : Jul 3 00:03:51 2025 GMT Subject: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:6e:4f:90:4a:27:f9:ea:2c:b6:48:cb:f7: 0c:69:5a:59:2b:02:ff:de:48:b4:e0:85:6e:49:2f: 9c:82:9d:0c:d9:6d:8b:6f:bb:28:3c:4c:6a:7b:d4: e1:df:dc:a8:fd:38:8a:e2:52:ef:8e:62:0c:4a:39: b9:ec:55:64:28:3c:cd:a4:f4:c7:19:a3:10:05:1e: 5c:50:5d:a1:52:4b:e7:44:ba:6f:86:c8:2e:4f:51: 96:2b:6b:90:21:02:16:01:38:b2:bc:4e:67:0d:02: b6:74:87:06:c1:86:96:3b:18:27:1a:36:91:b3:59: 36:a4:09:1f:3d:f5:67:51:e9:84:f1:fb:ec:07:3e: fb:c7:b0:66:00:ee:f1:7c:9c:26:ec:0c:cf:a3:3f: 46:1e:21:c4:fc:89:2e:95:f6:e7:53:db:b5:b8:f8: bf:bc:25:dc:2f:a6:0a:89:3b:9c:08:3c:67:3d:63: d0:c3:9f:3f:89:37:02:67:66:28:d4:6a:c0:6a:10: f6:9b:2a:4c:e5:64:3a:54:f9:66:d6:e2:11:8c:2d: 12:c6:a1:ee:f7:a8:37:81:90:2b:5b:eb:a1:07:04: 1d:2f:df:26:2c:ef:f6:02:61:54:3f:71:ce:37:c1: 4c:12:99:ce:4a:ec:55:dd:26:c5:27:e2:1e:73:59: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.48.0/22 IPv6: 2400:a680::/32 Signature Algorithm: sha256WithRSAEncryption 6c:5a:72:95:06:ec:fc:9b:ad:8c:19:bc:88:f3:8d:3b:19:11: 25:87:8c:a8:10:c9:9c:a7:fd:8b:f5:26:be:12:52:f0:65:ce: 4b:cf:4c:65:53:79:72:3d:88:dc:18:23:b5:fe:09:73:7a:0c: 7f:ea:19:a7:8a:51:c9:7b:ee:45:d6:1e:b9:bc:7c:3e:16:63: db:d1:27:5e:ab:25:0e:a8:b9:05:e4:6b:b9:1b:e4:3c:46:35: f9:fd:05:0f:f0:73:27:e1:73:a2:f3:f3:9d:3a:f1:bc:c1:f7: 82:bf:fa:38:65:e8:a9:b8:ec:c4:36:5f:dd:24:8a:68:b5:0a: ce:15:00:1c:98:4e:ac:57:2e:8a:0c:8a:ec:28:82:a1:e9:c7: f4:ea:af:9c:24:00:09:56:42:c1:d1:00:12:61:cc:05:4c:3a: 72:e2:2d:f7:fe:69:be:2e:7b:06:75:20:76:7f:2d:b3:95:76: 19:98:07:0c:ee:68:9b:a7:fe:dd:38:4b:59:94:52:f9:60:03: 75:9c:fc:ff:0b:44:98:42:e8:51:34:18:54:01:f5:59:23:7e: 1d:24:0f:bd:d1:47:e8:dc:da:01:a6:9b:1e:29:45:29:ed:bd: 4b:53:97:e4:09:90:9c:c1:f7:bc:2e:10:bc:31:92:ff:f6:d8: e6:d0:a6:c6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaPMYwwJ9tfJV0U9v3rpxLnQ0Y3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMzIzNTg1MVoX DTI1MDcwMzAwMDM1MVowMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2 ODkyNjEyRTBCRUQzRkZGQjUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxebk+QSif56iy2SMv3DGlaWSsC/95ItOCFbkkvnIKdDNlti2+7KDxManvU 4d/cqP04iuJS745iDEo5uexVZCg8zaT0xxmjEAUeXFBdoVJL50S6b4bILk9Rlitr kCECFgE4srxOZw0CtnSHBsGGljsYJxo2kbNZNqQJHz31Z1HphPH77Ac++8ewZgDu 8XycJuwMz6M/Rh4hxPyJLpX251Pbtbj4v7wl3C+mCok7nAg8Zz1j0MOfP4k3Amdm KNRqwGoQ9psqTOVkOlT5ZtbiEYwtEsah7veoN4GQK1vroQcEHS/fJizv9gJhVD9x zjfBTBKZzkrsVd0mxSfiHnNZuckCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL4qntyMVW1N14RokmEuC+0//7UrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MGNlNzMz LTc3ZjQtNGUxZC1iNWVjLTYxZWRlNGRhMDc0ZC8wL0JFMkE5RURDOEM1NTZENERE Nzg0Njg5MjYxMkUwQkVEM0ZGRkI1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn4jAwDQQCAAIwBwMFACQApoAwDQYJKoZIhvcNAQELBQADggEBAGxacpUG7Pyb rYwZvIjzjTsZESWHjKgQyZyn/Yv1Jr4SUvBlzkvPTGVTeXI9iNwYI7X+CXN6DH/q GaeKUcl77kXWHrm8fD4WY9vRJ16rJQ6ouQXka7kb5DxGNfn9BQ/wcyfhc6Lz8506 8bzB94K/+jhl6Km47MQ2X90kimi1Cs4VAByYTqxXLooMiuwogqHpx/Tqr5wkAAlW QsHRABJhzAVMOnLiLff+ab4uewZ1IHZ/LbOVdhmYBwzuaJun/t04S1mUUvlgA3Wc /P8LRJhC6FE0GFQB9Vkjfh0kD73RR+jc2gGmmx4pRSntvUtTl+QJkJzB97wuELwx kv/22ObQpsY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org