$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer File: D2EF21DBD545255BED30EEC34623F204A3E12D23.cer (raw, json) Hash identifier: rNa2UQDF0yd8QdnXBiFhy9oPOZB3kNi2hH0rDXkEmGw= Subject key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 053E8EA78AEDEADD4D0D443ACF3B8B864290BFD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft caRepository: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 13:22:19 +0000 Certificate not after: Mon 30 Jun 2025 13:27:19 +0000 Subordinate resources: IP: 103.104.204.0/22 IP: 2402:1a40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3e:8e:a7:8a:ed:ea:dd:4d:0d:44:3a:cf:3b:8b:86:42:90:bf:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 13:22:19 2024 GMT Not After : Jun 30 13:27:19 2025 GMT Subject: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:64:9b:60:00:92:a4:33:76:ca:93:ca:b9: b6:e5:e8:25:92:68:4f:2e:79:b3:dc:be:a1:f1:3a: 00:fa:dd:f3:0c:64:c8:e9:8a:9b:19:ff:26:e3:ef: 9b:07:96:b0:3a:ff:52:6b:b5:98:c9:b0:5e:c9:d5: 79:72:b9:95:24:b8:38:9d:02:ea:c3:c4:a8:68:46: 39:bc:09:0a:01:41:85:5e:a2:62:5a:96:c6:4f:b0: 44:6f:e8:eb:07:24:ff:20:56:15:eb:eb:03:96:70: 65:f1:0f:af:39:8e:2b:fb:b4:21:06:84:89:84:70: 84:5d:e0:47:1b:1d:e0:c6:e1:79:f5:46:79:5e:0a: 58:eb:e8:30:e5:af:68:05:23:87:c2:1e:41:e4:57: 88:24:12:61:d9:ff:ba:db:1c:0c:f2:49:a4:71:8d: 3f:f4:46:40:5c:bd:c4:dc:52:41:1a:7a:17:ff:9c: 8d:e6:6f:4e:d5:2d:31:1c:f9:75:0f:38:7c:a1:c3: da:01:49:eb:c3:47:ed:5c:52:cc:c2:b3:b7:4f:33: a3:5a:cf:63:5e:07:3c:24:48:5a:85:22:58:25:57: 9e:fa:2c:4c:0c:ba:55:ce:02:a2:bb:7d:44:8a:d3: 96:0f:eb:44:37:70:e6:82:de:97:af:67:6c:81:e9: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.204.0/22 IPv6: 2402:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 06:38:03:01:cd:76:c0:41:7c:14:d2:a2:82:78:7a:9f:2e:19: 76:ea:bc:de:e0:a1:0e:2f:8a:03:8f:02:2f:2a:12:a2:02:11: 2e:74:5b:c6:be:8e:21:c4:41:65:12:92:cd:0d:04:ba:b8:d6: 1b:4c:c9:f4:58:d2:5b:19:8c:2b:b7:c5:ee:2a:0f:e8:a2:5e: c3:9f:fb:64:83:1a:6e:9e:f4:9a:77:ab:8c:36:e7:92:76:94: 3b:9a:ea:54:70:f0:d2:f8:8c:30:19:cb:ca:5a:26:5f:20:cd: 6c:e3:37:04:78:1f:3c:d4:a7:0b:4c:81:5e:1a:12:88:2c:6f: 38:1a:b8:15:5c:9d:90:0c:9c:83:45:c6:43:96:1b:ac:57:64: 95:db:57:bb:71:c8:47:82:7c:4f:d7:43:7d:43:b5:48:eb:ce: f3:38:e6:c9:29:d4:11:8e:34:51:f3:42:57:b9:74:27:c8:46: e4:38:87:07:f5:a7:aa:24:5a:29:68:bb:34:7b:e0:8a:85:3c: 1e:df:80:eb:2c:01:e8:15:43:44:35:45:00:77:69:fc:39:cc: 61:a2:e8:12:c8:a0:26:20:9b:0d:a6:41:58:80:dd:93:e5:ff: 25:bf:90:f6:0c:ab:4a:36:b7:31:ad:d2:2c:f9:61:c2:5b:f3: 7d:4b:64:7c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUBT6Op4rt6t1NDUQ6zzuLhkKQv9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTEzMjIxOVoX DTI1MDYzMDEzMjcxOVowMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBF RUMzNDYyM0YyMDRBM0UxMkQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANulZJtgAJKkM3bKk8q5tuXoJZJoTy55s9y+ofE6APrd8wxkyOmKmxn/JuPv mweWsDr/Umu1mMmwXsnVeXK5lSS4OJ0C6sPEqGhGObwJCgFBhV6iYlqWxk+wRG/o 6wck/yBWFevrA5ZwZfEPrzmOK/u0IQaEiYRwhF3gRxsd4MbhefVGeV4KWOvoMOWv aAUjh8IeQeRXiCQSYdn/utscDPJJpHGNP/RGQFy9xNxSQRp6F/+cjeZvTtUtMRz5 dQ84fKHD2gFJ68NH7VxSzMKzt08zo1rPY14HPCRIWoUiWCVXnvosTAy6Vc4Cort9 RIrTlg/rRDdw5oLel69nbIHpnd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNLvIdvVRSVb7TDuw0Yj8gSj4S0jMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIx LTE4NDEtNDc2ZC1iNDZiLWI0NGI5Y2I5NjhiMC8wL0QyRUYyMURCRDU0NTI1NUJF RDMwRUVDMzQ2MjNGMjA0QTNFMTJEMjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnaMwwDQQCAAIwBwMFACQCGkAwDQYJKoZIhvcNAQELBQADggEBAAY4AwHNdsBB fBTSooJ4ep8uGXbqvN7goQ4vigOPAi8qEqICES50W8a+jiHEQWUSks0NBLq41htM yfRY0lsZjCu3xe4qD+iiXsOf+2SDGm6e9Jp3q4w255J2lDua6lRw8NL4jDAZy8pa Jl8gzWzjNwR4HzzUpwtMgV4aEogsbzgauBVcnZAMnINFxkOWG6xXZJXbV7txyEeC fE/XQ31DtUjrzvM45skp1BGONFHzQle5dCfIRuQ4hwf1p6okWilouzR74IqFPB7f gOssAegVQ0Q1RQB3afw5zGGi6BLIoCYgmw2mQViA3ZPl/yW/kPYMq0o2tzGt0iz5 YcJb831LZHw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org