$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer (raw, json) Hash identifier: rggc2cRyG4vs+RNFEi3oxoCCdKZU+lD2QLqsVB2AOvI= Subject key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1FA812BDE274962F783F4139A6F75F4B19EBD500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft caRepository: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Nov 2024 14:34:18 +0000 Certificate not after: Fri 31 Oct 2025 14:39:18 +0000 Subordinate resources: IP: 103.39.72.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a8:12:bd:e2:74:96:2f:78:3f:41:39:a6:f7:5f:4b:19:eb:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 14:34:18 2024 GMT Not After : Oct 31 14:39:18 2025 GMT Subject: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:19:b8:66:09:e0:b3:b6:6d:99:96:2b:9b: 69:ab:d6:4e:7b:05:6d:df:b0:a2:e4:92:aa:06:14: 1b:21:29:ea:3c:fe:de:df:56:d9:d5:a4:0d:ba:b6: 78:4c:e8:b4:74:4d:88:26:45:e6:41:e8:57:17:75: 1f:3f:b6:06:5a:f6:ec:2d:7e:00:47:e5:90:03:64: 18:eb:29:04:0e:52:97:03:66:04:ca:ce:66:c3:b4: d1:1d:8b:65:a7:7b:97:5b:15:66:4f:8d:76:7b:03: 71:5a:bd:6e:4e:d8:b3:bf:a4:61:ef:f7:ce:46:87: f6:86:df:a9:d7:0e:18:75:c4:68:82:32:90:6f:74: 7d:da:e3:58:5e:3d:b0:bb:99:1b:e5:5f:d8:64:b7: 39:93:fe:be:e7:46:9e:28:f5:28:8d:9b:a5:a2:55: b0:d9:95:cf:b2:da:a4:a5:43:9d:66:f8:9c:d6:64: ed:d5:16:d6:93:d1:83:39:9a:e0:cb:d7:54:a4:dc: e2:4a:f6:4d:cd:d6:33:8c:c0:3a:eb:b8:39:9a:b9: aa:d3:fb:b4:82:13:52:5b:53:2d:35:bb:c0:49:04: b9:81:78:b7:03:f5:d6:aa:80:08:2c:8c:e3:91:ac: 33:fd:92:6b:7a:98:61:7b:8c:4b:80:ac:2a:d4:33: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:a0:b6:11:1c:ca:56:17:b7:b7:e6:1e:27:24:65:eb:4f:30: 3e:61:e3:e7:3a:f1:6c:57:0b:ca:c3:ea:b7:a9:2f:b7:86:1d: 2f:f3:54:8d:93:0a:0a:21:a0:7b:dc:22:6c:e4:df:33:5c:3b: 14:44:c4:a7:7c:00:36:30:58:1d:2c:08:af:e6:f3:20:f4:03: 91:4f:ab:c8:d9:87:51:f5:ca:16:12:4e:2d:7c:90:91:2e:bc: 91:06:5b:7e:ad:a3:d0:62:c6:ba:6a:1e:f0:10:18:26:9e:dd: 58:da:2d:a4:ef:ea:f2:df:7b:75:65:c3:69:5e:5c:70:db:bc: 8d:bc:19:eb:3d:a2:54:25:8f:ee:ef:5d:6c:7b:75:d0:81:d2: 7b:d9:80:59:0f:1b:0c:44:cb:18:c7:09:9f:98:b6:39:a2:d5: 06:b5:4b:de:53:f0:c0:d1:a4:76:df:3b:dc:dc:4c:da:b4:b4: 5b:a1:b5:cc:1d:de:f9:f3:18:41:14:fc:38:8f:42:40:86:bf: eb:78:3c:07:4e:31:5e:5c:85:5a:ad:d3:a0:39:c1:c5:0f:c6: f6:fd:ab:57:ca:ee:e0:b7:63:2f:60:d7:62:da:8d:84:e2:2a: 0c:9a:e0:a7:23:79:59:08:48:46:07:46:69:78:f5:a2:ab:35: 36:c0:77:4f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUH6gSveJ0li94P0E5pvdfSxnr1QAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwMTE0MzQxOFoX DTI1MTAzMTE0MzkxOFowMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5 RjQzMTJDRDNEQkI0OTNCNUQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlpGbhmCeCztm2ZliubaavWTnsFbd+wouSSqgYUGyEp6jz+3t9W2dWkDbq2 eEzotHRNiCZF5kHoVxd1Hz+2Blr27C1+AEflkANkGOspBA5SlwNmBMrOZsO00R2L Zad7l1sVZk+NdnsDcVq9bk7Ys7+kYe/3zkaH9obfqdcOGHXEaIIykG90fdrjWF49 sLuZG+Vf2GS3OZP+vudGnij1KI2bpaJVsNmVz7LapKVDnWb4nNZk7dUW1pPRgzma 4MvXVKTc4kr2Tc3WM4zAOuu4OZq5qtP7tIITUltTLTW7wEkEuYF4twP11qqACCyM 45GsM/2Sa3qYYXuMS4CsKtQzf3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNblSvbEN4aImbmfQxLNPbtJO10pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwYzczYWY1 LWEyYzAtNDI0ZC04NjJlLTExMmM1OGI3MjcwZS8wL0Q2RTU0QUY2QzQzNzg2ODg5 OUI5OUY0MzEyQ0QzREJCNDkzQjVEMjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0gwDQYJKoZIhvcNAQELBQADggEBAEygthEcylYXt7fmHickZetPMD5h4+c6 8WxXC8rD6repL7eGHS/zVI2TCgohoHvcImzk3zNcOxRExKd8ADYwWB0sCK/m8yD0 A5FPq8jZh1H1yhYSTi18kJEuvJEGW36to9BixrpqHvAQGCae3VjaLaTv6vLfe3Vl w2leXHDbvI28Ges9olQlj+7vXWx7ddCB0nvZgFkPGwxEyxjHCZ+Ytjmi1Qa1S95T 8MDRpHbfO9zcTNq0tFuhtcwd3vnzGEEU/DiPQkCGv+t4PAdOMV5chVqt06A5wcUP xvb9q1fK7uC3Yy9g12LajYTiKgya4KcjeVkISEYHRml49aKrNTbAd08= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org