$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer (raw, json) Hash identifier: myfBlFt9/ZaxLByVWRiAEMAJsbFuCpZOpGeufRKNiAk= Subject key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55F34B1F26A37A325C7B54916F40E0B1C533B743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft caRepository: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Jun 2023 05:41:37 +0000 Certificate not after: Wed 19 Jun 2024 05:46:37 +0000 Subordinate resources: IP: 103.144.146.0/23 IP: 2001:df1:c680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f3:4b:1f:26:a3:7a:32:5c:7b:54:91:6f:40:e0:b1:c5:33:b7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 05:41:37 2023 GMT Not After : Jun 19 05:46:37 2024 GMT Subject: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:bb:76:64:35:a3:4d:bc:10:ac:0c:ba:f0: da:15:dc:ce:7a:25:0f:28:a1:33:0a:66:10:44:e8: db:b1:59:c8:ad:95:41:09:49:b8:55:66:0e:8c:f1: 5b:11:b2:22:07:87:15:18:36:5e:77:1e:a6:98:b8: bc:9a:c6:24:51:2c:78:2a:b0:68:f6:c1:68:97:c5: e0:42:02:a6:92:a2:d2:dc:7b:f7:45:a8:8b:44:d3: 73:01:89:ef:59:e1:17:e6:27:15:57:bd:2b:b2:ad: e0:a1:17:70:8d:a6:10:f2:d9:28:ad:56:d4:56:bd: cd:dc:ee:bb:12:50:bc:c2:e0:76:93:96:48:33:ce: 07:ee:c7:06:f9:54:ab:41:9b:27:4c:43:40:d0:1c: 0c:20:8d:db:04:b9:5f:da:7f:7c:c5:0b:b9:96:c0: 88:1b:94:b4:fe:dc:d4:15:c1:e6:6f:78:5b:99:d6: 41:ec:96:90:1e:18:39:76:89:ca:fb:3f:cc:63:0a: a0:41:96:6e:56:1b:d4:b7:44:1c:2e:bc:f4:7c:92: 88:e2:20:07:cc:0f:94:0c:37:85:26:03:e0:52:34: 3d:7c:72:2b:d0:10:02:71:7d:de:56:84:07:a3:bc: 00:36:4f:30:07:7b:24:69:03:c6:37:16:6f:58:93: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 5f:87:d9:4e:7a:8c:1c:e7:03:83:5d:eb:ee:52:61:08:b4:18: 0d:06:05:ac:9e:f2:ed:41:cf:40:ab:34:cb:d9:7c:dc:86:3f: 44:4f:41:b2:1e:32:c8:e7:f4:3d:e6:cb:fa:a4:54:ab:ee:f9: e1:60:24:64:a8:bd:d3:e1:bb:01:c3:d4:a3:a7:a6:65:65:83: 09:8a:cd:29:10:9a:90:5e:de:49:a6:64:1a:1a:2b:04:c3:c4: 86:1a:8e:be:46:86:49:46:87:2c:92:5f:9f:11:2d:b2:7a:ad: e8:64:ac:78:a0:53:31:40:d6:0a:86:29:eb:c2:4d:c6:31:ff: b3:7b:80:ba:64:36:64:a5:26:d4:ec:31:42:85:c9:a8:a4:e6: 9d:c6:bc:ec:9c:93:84:4c:1c:26:98:ed:ae:8f:0e:06:80:27: 23:e8:8d:10:1d:b0:46:ea:38:49:c5:96:7d:da:dc:ee:4d:e2: dd:42:99:02:ba:2c:85:42:74:7f:38:1a:fe:c4:32:10:68:96: 4d:22:31:a8:6f:37:c2:f6:96:5d:f1:6a:da:68:fc:c5:d7:72: af:95:70:7b:9e:ee:0a:32:94:ae:a8:76:46:38:67:78:68:4e: 12:45:87:88:26:d3:1f:ea:66:5f:c3:54:c1:ce:42:7f:d1:8f: 71:49:e3:f6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUVfNLHyajejJce1SRb0DgscUzt0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMTA1NDEzN1oX DTI0MDYxOTA1NDYzN1owMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5 QzRBQTJCQzZGNUUyNjg4OTQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqVu3ZkNaNNvBCsDLrw2hXcznolDyihMwpmEETo27FZyK2VQQlJuFVmDozx WxGyIgeHFRg2Xnceppi4vJrGJFEseCqwaPbBaJfF4EICppKi0tx790Woi0TTcwGJ 71nhF+YnFVe9K7Kt4KEXcI2mEPLZKK1W1Fa9zdzuuxJQvMLgdpOWSDPOB+7HBvlU q0GbJ0xDQNAcDCCN2wS5X9p/fMULuZbAiBuUtP7c1BXB5m94W5nWQeyWkB4YOXaJ yvs/zGMKoEGWblYb1LdEHC689HySiOIgB8wPlAw3hSYD4FI0PXxyK9AQAnF93laE B6O8ADZPMAd7JGkDxjcWb1iTz7cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM3+Ez933FYgE5GcSqK8b14miJRrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1YmY4OWM3 LTUwNzEtNGMxMi04YzNjLTkyYWViNmRjM2JiYy8wL0NERkUxMzNGNzdEQzU2MjAx MzkxOUM0QUEyQkM2RjVFMjY4ODk0NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkJIwDwQCAAIwCQMHACABDfHGgDANBgkqhkiG9w0BAQsFAAOCAQEAX4fZTnqM HOcDg13r7lJhCLQYDQYFrJ7y7UHPQKs0y9l83IY/RE9Bsh4yyOf0PebL+qRUq+75 4WAkZKi90+G7AcPUo6emZWWDCYrNKRCakF7eSaZkGhorBMPEhhqOvkaGSUaHLJJf nxEtsnqt6GSseKBTMUDWCoYp68JNxjH/s3uAumQ2ZKUm1OwxQoXJqKTmnca87JyT hEwcJpjtro8OBoAnI+iNEB2wRuo4ScWWfdrc7k3i3UKZAroshUJ0fzga/sQyEGiW TSIxqG83wvaWXfFq2mj8xddyr5Vwe57uCjKUrqh2RjhneGhOEkWHiCbTH+pmX8NU wc5Cf9GPcUnj9g== -----END CERTIFICATE-----Generated at Thu May 9 00:37:10 2024 by rpki-client on console-fra.rpki-client.org