$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer (raw, json) Hash identifier: ySbZJMyZgG0yZHP9IMzTtwDXwb0uaM+JbNq5/24N0N4= Subject key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7BF31C6EE7FE61DB1006497D5881D89F5ACE3B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 14:03:45 +0000 Certificate not after: Fri 04 Apr 2025 14:08:45 +0000 Subordinate resources: IP: 103.132.40.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f3:1c:6e:e7:fe:61:db:10:06:49:7d:58:81:d8:9f:5a:ce:3b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 5 14:03:45 2024 GMT Not After : Apr 4 14:08:45 2025 GMT Subject: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:55:fa:3f:59:ef:6b:f4:58:19:7d:aa:00: 84:00:1f:bc:29:64:fc:82:4c:a8:43:5e:3c:70:fc: 6f:ee:5e:72:c8:52:fc:06:3e:f5:36:d4:fa:95:be: f7:52:f7:c3:a0:0e:8f:06:af:94:c4:b9:58:14:e1: 15:12:f8:8f:88:33:91:21:53:b3:fe:a4:41:2e:c2: 4c:b3:d0:98:0b:df:cb:08:0f:57:d8:05:6e:86:b3: 65:e5:4e:96:db:15:f0:92:1a:4d:be:99:d1:01:1f: 89:3f:cb:a7:a1:5e:b6:08:42:6c:23:20:64:e2:41: 9c:db:67:78:90:9b:b6:50:bc:0a:d5:62:78:88:54: f0:f2:d3:9b:11:94:f2:19:89:db:5e:b8:ca:d0:88: 1f:f7:62:52:f7:c8:50:c8:2b:b5:b6:f1:c2:d9:d8: 05:12:04:66:66:da:c5:5e:80:b8:26:be:8b:2a:e1: 93:5c:0d:ff:f5:e9:e0:b8:13:08:1b:b3:4e:f8:8b: a6:f4:04:2c:d7:fc:95:80:e6:d5:e1:11:39:9c:aa: 1c:8b:50:da:52:78:9d:09:e5:e9:6b:1a:b0:4d:3d: 42:dc:f9:29:fd:a1:1b:1f:b7:63:c6:20:cd:22:dd: 0b:5e:8d:7f:14:71:18:b6:4b:12:1e:87:3f:9a:b9: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.40.0/23 Signature Algorithm: sha256WithRSAEncryption 96:ad:bb:fd:52:64:09:83:f7:d0:dd:28:b8:ca:cd:da:2f:c9: a3:14:8a:f0:c3:3c:4e:32:45:1a:6b:c3:a7:ce:f4:5c:53:2f: 77:d8:de:b8:d4:db:41:98:48:49:5f:e1:38:81:ab:9a:e4:46: 14:cc:99:81:f8:a4:d5:e4:98:d2:9e:1c:77:33:fe:21:dc:2f: c8:f9:5b:fb:84:d1:0a:8a:db:0a:d9:af:90:a8:0d:16:1a:a2: 48:a8:8b:3b:5f:8d:fb:e1:f0:80:72:0f:c3:83:4e:3f:be:5f: 40:f9:e6:ee:f9:2a:41:64:27:63:75:54:b8:b2:6b:1d:a5:67: 61:1d:4b:cf:58:d7:5c:36:13:15:a4:5a:6d:bd:18:71:12:92: 1b:23:c6:4c:66:a2:83:4a:e5:45:6e:a1:dd:0e:c5:d7:ba:10: 79:7c:95:f7:64:18:0c:49:e0:1e:d6:30:3b:9d:0d:9a:f4:e5: 54:34:63:e6:eb:45:67:82:17:52:ba:cb:9c:af:e2:f0:ea:74: 30:04:17:55:17:f6:c8:a7:f6:c9:2c:cf:84:65:29:d6:30:5d: f0:4d:aa:76:77:25:08:33:bd:1b:fd:9d:d8:92:e5:9e:f1:0f: b1:c1:26:15:2b:18:b4:a9:26:6c:37:c4:1d:3d:48:f9:89:9c: ac:9d:27:9a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUe/Mcbuf+YdsQBkl9WIHYn1rOO0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNTE0MDM0NVoX DTI1MDQwNDE0MDg0NVowMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDEx QjdEMkYyQjlFMjJEMkYwRUI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEZVfo/We9r9FgZfaoAhAAfvClk/IJMqENePHD8b+5ecshS/AY+9TbU+pW+ 91L3w6AOjwavlMS5WBThFRL4j4gzkSFTs/6kQS7CTLPQmAvfywgPV9gFboazZeVO ltsV8JIaTb6Z0QEfiT/Lp6FetghCbCMgZOJBnNtneJCbtlC8CtVieIhU8PLTmxGU 8hmJ2164ytCIH/diUvfIUMgrtbbxwtnYBRIEZmbaxV6AuCa+iyrhk1wN//Xp4LgT CBuzTviLpvQELNf8lYDm1eEROZyqHItQ2lJ4nQnl6WsasE09Qtz5Kf2hGx+3Y8Yg zSLdC16NfxRxGLZLEh6HP5q5FkkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuWYnMxU8AuTEEbfS8rniLS8OuFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkZjJmZmRh LTA1ZDEtNDA4NS1hMTM1LTAzOTg3YTA3ZjM5ZS8wL0NCOTY2MjczMzE1M0MwMkU0 QzQxMUI3RDJGMkI5RTIyRDJGMEVCODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnhCgwDQYJKoZIhvcNAQELBQADggEBAJatu/1SZAmD99DdKLjKzdovyaMUivDD PE4yRRprw6fO9FxTL3fY3rjU20GYSElf4TiBq5rkRhTMmYH4pNXkmNKeHHcz/iHc L8j5W/uE0QqK2wrZr5CoDRYaokioiztfjfvh8IByD8ODTj++X0D55u75KkFkJ2N1 VLiyax2lZ2EdS89Y11w2ExWkWm29GHESkhsjxkxmooNK5UVuod0Oxde6EHl8lfdk GAxJ4B7WMDudDZr05VQ0Y+brRWeCF1K6y5yv4vDqdDAEF1UX9sin9sksz4RlKdYw XfBNqnZ3JQgzvRv9ndiS5Z7xD7HBJhUrGLSpJmw3xB09SPmJnKydJ5o= -----END CERTIFICATE-----Generated at Wed May 8 09:50:43 2024 by rpki-client on console-fra.rpki-client.org