$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer (raw, json) Hash identifier: bYqCxAH9pzgHB70exiZXopErJnG0PiRnOnT3Y01z4cY= Subject key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48F722133DA6A58BEC1B9E31BAA9CF401C339AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft caRepository: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 05:36:39 +0000 Certificate not after: Tue 01 Jul 2025 05:41:39 +0000 Subordinate resources: IP: 103.151.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:22:13:3d:a6:a5:8b:ec:1b:9e:31:ba:a9:cf:40:1c:33:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 05:36:39 2024 GMT Not After : Jul 1 05:41:39 2025 GMT Subject: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:d9:6c:df:5d:a6:e3:25:de:57:9d:3b:8b: 63:3d:fd:53:57:96:8b:bc:c0:19:76:e4:87:9f:b7: d9:c4:ae:b0:3f:50:58:a1:0b:a1:56:43:15:9c:7b: 28:dd:af:d1:69:0e:af:ce:b4:ad:4a:6a:0f:f5:79: 87:64:13:01:b4:0e:6b:df:a6:80:2f:7a:68:ce:ab: 31:bf:d8:52:03:e0:43:f1:70:a5:55:6f:71:95:0c: a7:3f:ae:f4:0d:a4:b3:b5:91:8e:e1:18:6a:d8:85: 3d:39:4e:50:5f:21:ca:c7:c9:2f:a8:1d:6c:e2:13: d2:1b:74:18:1b:20:86:d3:58:df:68:b4:3b:37:28: 21:1f:33:41:2c:c2:dd:4d:47:70:2b:c6:ca:09:40: 0a:e6:4a:75:35:03:46:e5:a1:ed:af:cd:48:3e:a7: a0:4e:30:92:53:f9:90:9d:de:a8:4a:19:09:45:f4: 88:c3:00:b5:a8:f6:84:ba:8e:6c:17:55:d7:30:33: f5:e5:f3:a4:d5:ac:f9:b3:08:a3:1d:f9:e5:4d:41: 72:ee:23:0d:a1:3c:37:f6:db:7c:64:2f:51:0d:6f: 58:9d:f4:9d:52:65:b5:1d:21:19:45:16:3b:4a:8c: e0:d0:61:ab:73:27:50:a2:3f:00:92:8c:9b:aa:e0: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:3f:61:8b:d6:6c:a5:01:1d:9f:46:25:e4:23:1e:03:5c:a6: 18:14:d5:b8:51:23:3b:68:b9:23:85:e9:5f:64:ad:24:60:70: 4a:56:4c:da:52:48:1c:c2:2a:d2:ed:24:f5:5d:0a:11:94:76: 40:67:3d:69:a1:5e:86:6b:d8:22:eb:00:73:6c:ba:39:d2:54: f8:5e:1c:e6:91:1b:b9:a7:41:1e:61:2f:be:f7:f7:f8:2c:d7: e9:3f:a6:b1:fc:33:30:5b:6f:a9:cd:70:0f:dd:e9:a0:fd:4f: 0f:b8:f5:c8:28:ec:88:98:d6:46:4e:41:5d:92:0c:9b:e5:cd: 38:e7:94:7b:37:b1:3d:5f:97:61:a2:97:8a:c6:9f:68:54:03: cb:ae:7b:e5:dc:5f:bc:6e:41:0f:3d:aa:b8:f7:1b:99:77:25: 75:17:9c:fa:22:ee:bb:ec:50:42:6f:63:00:c1:c8:1c:58:56: 8f:5f:ff:08:d3:ca:19:01:5b:67:99:a3:b6:64:c2:53:50:eb: 27:02:95:ae:7d:a3:8c:25:d7:a0:82:a2:6c:86:52:50:14:6c: 5a:9d:45:69:a3:74:fc:45:7b:b7:e2:bf:fe:43:0f:65:8f:d3: c0:90:c4:88:81:dd:37:a9:db:f7:42:2c:d7:ad:a6:4f:4a:72: 04:fe:ad:28 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSPciEz2mpYvsG54xuqnPQBwzmtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjA1MzYzOVoX DTI1MDcwMTA1NDEzOVowMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZD NTI1RUE5ODIzRkY5MDJBRjk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6C2WzfXabjJd5XnTuLYz39U1eWi7zAGXbkh5+32cSusD9QWKELoVZDFZx7 KN2v0WkOr860rUpqD/V5h2QTAbQOa9+mgC96aM6rMb/YUgPgQ/FwpVVvcZUMpz+u 9A2ks7WRjuEYatiFPTlOUF8hysfJL6gdbOIT0ht0GBsghtNY32i0OzcoIR8zQSzC 3U1HcCvGyglACuZKdTUDRuWh7a/NSD6noE4wklP5kJ3eqEoZCUX0iMMAtaj2hLqO bBdV1zAz9eXzpNWs+bMIox355U1Bcu4jDaE8N/bbfGQvUQ1vWJ30nVJltR0hGUUW O0qM4NBhq3MnUKI/AJKMm6rggNECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL6zs1uhw9rKWcbFJeqYI/+QKvmYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwY2I1Yzli LWYzODMtNGU4MS04MTJjLTBlMjI3YWQ0NmIxYi8wL0JFQjNCMzVCQTFDM0RBQ0E1 OUM2QzUyNUVBOTgyM0ZGOTAyQUY5OTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnlxYwDQYJKoZIhvcNAQELBQADggEBAEs/YYvWbKUBHZ9GJeQjHgNcphgU1bhR IztouSOF6V9krSRgcEpWTNpSSBzCKtLtJPVdChGUdkBnPWmhXoZr2CLrAHNsujnS VPheHOaRG7mnQR5hL7739/gs1+k/prH8MzBbb6nNcA/d6aD9Tw+49cgo7IiY1kZO QV2SDJvlzTjnlHs3sT1fl2Gil4rGn2hUA8uue+XcX7xuQQ89qrj3G5l3JXUXnPoi 7rvsUEJvYwDByBxYVo9f/wjTyhkBW2eZo7ZkwlNQ6ycCla59o4wl16CComyGUlAU bFqdRWmjdPxFe7fiv/5DD2WP08CQxIiB3Tep2/dCLNetpk9KcgT+rSg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:32 2024 by rpki-client on console-ams.rpki-client.org