$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer (raw, json) Hash identifier: Gn4kTDZ3jRdIDvF1XmH5+aVTZythjaSjOkLGRQgmkGg= Subject key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F81AFA97A8F53B880C47FAA63E9A6C7939F9ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft caRepository: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 21 Oct 2024 17:56:52 +0000 Certificate not after: Mon 20 Oct 2025 18:01:52 +0000 Subordinate resources: IP: 103.43.26.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:81:af:a9:7a:8f:53:b8:80:c4:7f:aa:63:e9:a6:c7:93:9f:9a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 21 17:56:52 2024 GMT Not After : Oct 20 18:01:52 2025 GMT Subject: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:09:6f:ab:73:a0:b5:b9:b6:1b:b3:e6:2e:41: e1:a3:d2:b5:7b:46:cd:5d:0b:e4:86:5d:ef:4e:ab: 0f:28:4d:7d:d1:a9:ba:69:4d:3c:de:7b:d9:f3:3b: 90:11:c4:a8:3f:8b:f6:48:d0:d7:a5:c8:79:02:c9: 6a:f9:78:08:cc:7b:8f:09:2e:7b:f1:15:33:f9:c6: 4c:64:1d:f4:f9:d1:44:bb:dd:b6:f4:d3:e0:34:a6: 9b:30:23:ae:54:90:20:c5:8b:c5:29:1e:33:29:c6: dc:5b:49:28:63:3a:80:da:b0:a7:b4:26:47:6d:c2: 51:16:94:a3:22:ce:39:1f:6c:61:97:4f:29:02:c7: 54:d0:1a:3b:33:6c:92:90:9b:e6:d9:0c:a1:43:15: 07:cb:f2:72:f4:79:38:30:96:7d:a2:9d:53:f3:0b: bc:fd:48:ba:8c:40:70:21:4e:51:31:64:7f:b4:60: ef:18:f8:a5:1d:ec:51:a3:8b:51:55:ce:88:c3:1d: 81:ce:29:01:ea:5c:25:50:4c:19:7d:19:fb:4d:61: 90:12:98:6d:86:e7:5c:44:0c:4e:75:31:cd:9f:a2: f3:c4:20:42:cd:e4:8f:cc:ae:5f:a1:c9:82:dc:ff: 36:5f:7b:26:0b:44:0a:75:53:70:cc:33:b7:22:ae: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.26.0/23 Signature Algorithm: sha256WithRSAEncryption 86:f4:3c:2c:32:04:40:9c:76:3c:6c:e7:b1:53:fb:a3:cb:53: 45:c8:1a:03:93:d5:9d:fb:2a:38:c2:42:19:d8:75:c5:ad:2d: 22:8e:f5:9d:c2:63:4b:ec:68:4c:b2:e9:0b:36:3e:52:e8:dc: bc:93:57:a1:0b:a0:96:e3:7f:84:59:48:98:65:19:02:3c:b8: 5f:cc:fd:b8:24:50:92:64:ee:62:2d:83:f4:95:bf:92:6b:12: 9b:43:95:bb:fe:da:0a:a0:b1:ed:46:66:22:1f:5f:9a:a7:96: 57:c6:70:8f:8c:24:b4:a2:1d:de:b4:87:4f:5d:5b:6a:0c:64: 24:3c:5a:f4:f6:d0:55:87:4b:f6:dc:eb:c1:dd:a2:93:33:ff: bd:36:c2:44:0c:60:fb:de:35:c2:4f:dc:85:e6:de:3e:89:df: 37:ff:cd:c9:23:31:4f:2c:e8:8e:a5:be:00:a8:7d:06:80:98: fb:e7:38:2e:60:b6:95:25:d9:b0:52:e2:01:8d:5d:6b:cf:21: 0b:47:93:4f:a7:22:6a:bd:7e:d7:98:9b:ac:a9:a4:e2:3d:9e: 19:3f:8e:6b:96:30:b3:15:42:2a:d0:85:b6:0b:b4:95:72:8b: ce:f0:a2:b0:45:89:70:d9:c0:86:19:79:dc:2b:b6:d7:e8:3c: b3:a3:5c:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUT4GvqXqPU7iAxH+qY+mmx5Ofmt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMTE3NTY1MloX DTI1MTAyMDE4MDE1MlowMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBD RThGMTJBQTQwMDg5ODI5QkI2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMJb6tzoLW5thuz5i5B4aPStXtGzV0L5IZd706rDyhNfdGpumlNPN572fM7 kBHEqD+L9kjQ16XIeQLJavl4CMx7jwkue/EVM/nGTGQd9PnRRLvdtvTT4DSmmzAj rlSQIMWLxSkeMynG3FtJKGM6gNqwp7QmR23CURaUoyLOOR9sYZdPKQLHVNAaOzNs kpCb5tkMoUMVB8vycvR5ODCWfaKdU/MLvP1IuoxAcCFOUTFkf7Rg7xj4pR3sUaOL UVXOiMMdgc4pAepcJVBMGX0Z+01hkBKYbYbnXEQMTnUxzZ+i88QgQs3kj8yuX6HJ gtz/Nl97JgtECnVTcMwztyKui4sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL7jarg1Gv6A8bDOjxKqQAiYKbtvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjRiNGI1 LTc4MTMtNDZjZC05ZGI0LWEzY2Q1ODVlMGVkNC8wL0JFRTM2QUI4MzUxQUZFODBG MUIwQ0U4RjEyQUE0MDA4OTgyOUJCNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnKxowDQYJKoZIhvcNAQELBQADggEBAIb0PCwyBECcdjxs57FT+6PLU0XIGgOT 1Z37KjjCQhnYdcWtLSKO9Z3CY0vsaEyy6Qs2PlLo3LyTV6ELoJbjf4RZSJhlGQI8 uF/M/bgkUJJk7mItg/SVv5JrEptDlbv+2gqgse1GZiIfX5qnllfGcI+MJLSiHd60 h09dW2oMZCQ8WvT20FWHS/bc68HdopMz/702wkQMYPveNcJP3IXm3j6J3zf/zckj MU8s6I6lvgCofQaAmPvnOC5gtpUl2bBS4gGNXWvPIQtHk0+nImq9fteYm6yppOI9 nhk/jmuWMLMVQirQhbYLtJVyi87worBFiXDZwIYZedwrttfoPLOjXGM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:57 2025 by rpki-client