$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer (raw, json) Hash identifier: T9BxdYqFgudH/DWPFghRBZxBFUyjBVtK4D8c4raV/Ys= Subject key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 541FB7191F723AFF4C6723D2C6A32A75CD4B803E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft caRepository: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 20 Nov 2023 15:37:41 +0000 Certificate not after: Mon 18 Nov 2024 15:42:41 +0000 Subordinate resources: IP: 103.43.26.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1f:b7:19:1f:72:3a:ff:4c:67:23:d2:c6:a3:2a:75:cd:4b:80:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 15:37:41 2023 GMT Not After : Nov 18 15:42:41 2024 GMT Subject: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:09:6f:ab:73:a0:b5:b9:b6:1b:b3:e6:2e:41: e1:a3:d2:b5:7b:46:cd:5d:0b:e4:86:5d:ef:4e:ab: 0f:28:4d:7d:d1:a9:ba:69:4d:3c:de:7b:d9:f3:3b: 90:11:c4:a8:3f:8b:f6:48:d0:d7:a5:c8:79:02:c9: 6a:f9:78:08:cc:7b:8f:09:2e:7b:f1:15:33:f9:c6: 4c:64:1d:f4:f9:d1:44:bb:dd:b6:f4:d3:e0:34:a6: 9b:30:23:ae:54:90:20:c5:8b:c5:29:1e:33:29:c6: dc:5b:49:28:63:3a:80:da:b0:a7:b4:26:47:6d:c2: 51:16:94:a3:22:ce:39:1f:6c:61:97:4f:29:02:c7: 54:d0:1a:3b:33:6c:92:90:9b:e6:d9:0c:a1:43:15: 07:cb:f2:72:f4:79:38:30:96:7d:a2:9d:53:f3:0b: bc:fd:48:ba:8c:40:70:21:4e:51:31:64:7f:b4:60: ef:18:f8:a5:1d:ec:51:a3:8b:51:55:ce:88:c3:1d: 81:ce:29:01:ea:5c:25:50:4c:19:7d:19:fb:4d:61: 90:12:98:6d:86:e7:5c:44:0c:4e:75:31:cd:9f:a2: f3:c4:20:42:cd:e4:8f:cc:ae:5f:a1:c9:82:dc:ff: 36:5f:7b:26:0b:44:0a:75:53:70:cc:33:b7:22:ae: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.26.0/23 Signature Algorithm: sha256WithRSAEncryption 31:c0:32:fc:e7:fc:1b:c2:c0:36:c6:85:b0:4c:78:c2:39:cd: c5:b6:ff:a4:63:c0:84:35:9e:b5:8b:22:c5:5f:42:11:82:8d: 3c:c4:b8:9c:b3:ef:83:a4:f1:a1:90:6c:35:2d:64:3f:1e:07: 06:a6:39:f8:fa:25:18:ce:2b:0c:1a:a0:d3:6b:d8:06:e6:05: a3:51:f8:a6:00:e9:28:0c:fa:e5:2a:85:00:0c:12:ff:3d:73: 09:77:4b:2d:92:7c:a8:54:9d:98:45:d5:fb:20:c0:c3:a6:ff: 82:b5:85:1a:32:37:40:fe:4c:34:12:4d:ea:0b:0f:41:b0:fa: 88:ca:08:1a:a8:ac:34:7a:c6:87:16:45:13:7b:ec:d6:fc:f4: af:e6:76:eb:57:f8:fe:78:c5:ad:10:59:bb:81:cc:1a:4e:c3: 5f:c7:3b:ff:ec:89:9b:7c:02:be:3c:43:e0:f0:0e:23:83:a2: c3:e9:48:f4:ca:cf:c3:76:4d:98:ba:9d:1a:56:39:b2:74:53: 83:9d:b8:1e:28:25:28:0d:aa:4d:2b:4d:1a:05:9b:8b:61:fa: 76:d1:a7:e6:49:fb:3d:08:42:5e:7c:e8:7a:53:fa:88:bf:4a: 21:67:45:3c:46:c5:fe:99:e5:a0:4b:ae:6b:7a:ac:58:98:14: a8:23:a0:75 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVB+3GR9yOv9MZyPSxqMqdc1LgD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMDE1Mzc0MVoX DTI0MTExODE1NDI0MVowMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBD RThGMTJBQTQwMDg5ODI5QkI2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMJb6tzoLW5thuz5i5B4aPStXtGzV0L5IZd706rDyhNfdGpumlNPN572fM7 kBHEqD+L9kjQ16XIeQLJavl4CMx7jwkue/EVM/nGTGQd9PnRRLvdtvTT4DSmmzAj rlSQIMWLxSkeMynG3FtJKGM6gNqwp7QmR23CURaUoyLOOR9sYZdPKQLHVNAaOzNs kpCb5tkMoUMVB8vycvR5ODCWfaKdU/MLvP1IuoxAcCFOUTFkf7Rg7xj4pR3sUaOL UVXOiMMdgc4pAepcJVBMGX0Z+01hkBKYbYbnXEQMTnUxzZ+i88QgQs3kj8yuX6HJ gtz/Nl97JgtECnVTcMwztyKui4sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL7jarg1Gv6A8bDOjxKqQAiYKbtvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjRiNGI1 LTc4MTMtNDZjZC05ZGI0LWEzY2Q1ODVlMGVkNC8wL0JFRTM2QUI4MzUxQUZFODBG MUIwQ0U4RjEyQUE0MDA4OTgyOUJCNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnKxowDQYJKoZIhvcNAQELBQADggEBADHAMvzn/BvCwDbGhbBMeMI5zcW2/6Rj wIQ1nrWLIsVfQhGCjTzEuJyz74Ok8aGQbDUtZD8eBwamOfj6JRjOKwwaoNNr2Abm BaNR+KYA6SgM+uUqhQAMEv89cwl3Sy2SfKhUnZhF1fsgwMOm/4K1hRoyN0D+TDQS TeoLD0Gw+ojKCBqorDR6xocWRRN77Nb89K/mdutX+P54xa0QWbuBzBpOw1/HO//s iZt8Ar48Q+DwDiODosPpSPTKz8N2TZi6nRpWObJ0U4OduB4oJSgNqk0rTRoFm4th +nbRp+ZJ+z0IQl586HpT+oi/SiFnRTxGxf6Z5aBLrmt6rFiYFKgjoHU= -----END CERTIFICATE-----Generated at Wed May 8 21:02:27 2024 by rpki-client on console-fra.rpki-client.org