$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer (raw, json) Hash identifier: UFSpnKi5CA1bziL22tdvr5iqIpi2NmRXhXHkEbys2JU= Subject key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3069E8FDF5AD1A9B79EBDEA6BA24FCEB16EFD8C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft caRepository: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Dec 2023 14:04:49 +0000 Certificate not after: Fri 29 Nov 2024 14:09:49 +0000 Subordinate resources: IP: 103.39.72.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:69:e8:fd:f5:ad:1a:9b:79:eb:de:a6:ba:24:fc:eb:16:ef:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 1 14:04:49 2023 GMT Not After : Nov 29 14:09:49 2024 GMT Subject: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:19:b8:66:09:e0:b3:b6:6d:99:96:2b:9b: 69:ab:d6:4e:7b:05:6d:df:b0:a2:e4:92:aa:06:14: 1b:21:29:ea:3c:fe:de:df:56:d9:d5:a4:0d:ba:b6: 78:4c:e8:b4:74:4d:88:26:45:e6:41:e8:57:17:75: 1f:3f:b6:06:5a:f6:ec:2d:7e:00:47:e5:90:03:64: 18:eb:29:04:0e:52:97:03:66:04:ca:ce:66:c3:b4: d1:1d:8b:65:a7:7b:97:5b:15:66:4f:8d:76:7b:03: 71:5a:bd:6e:4e:d8:b3:bf:a4:61:ef:f7:ce:46:87: f6:86:df:a9:d7:0e:18:75:c4:68:82:32:90:6f:74: 7d:da:e3:58:5e:3d:b0:bb:99:1b:e5:5f:d8:64:b7: 39:93:fe:be:e7:46:9e:28:f5:28:8d:9b:a5:a2:55: b0:d9:95:cf:b2:da:a4:a5:43:9d:66:f8:9c:d6:64: ed:d5:16:d6:93:d1:83:39:9a:e0:cb:d7:54:a4:dc: e2:4a:f6:4d:cd:d6:33:8c:c0:3a:eb:b8:39:9a:b9: aa:d3:fb:b4:82:13:52:5b:53:2d:35:bb:c0:49:04: b9:81:78:b7:03:f5:d6:aa:80:08:2c:8c:e3:91:ac: 33:fd:92:6b:7a:98:61:7b:8c:4b:80:ac:2a:d4:33: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:bc:d0:4a:9a:de:9d:b1:23:0f:67:2f:27:bd:11:de:d8:67: aa:a1:9c:bd:88:2b:ca:7e:3c:1a:cd:91:e7:45:7b:80:74:35: 20:86:e8:d5:89:ac:65:ee:7f:f2:cf:6b:6f:c4:3f:97:14:7d: 3e:1c:af:d1:22:3c:83:a7:24:e6:53:1d:c6:aa:0b:c8:ac:10: 85:0f:02:90:5c:4f:d9:d0:32:01:21:84:47:2d:e2:38:a8:ad: aa:d0:5c:db:a7:3d:1f:e9:0d:76:c4:e8:f2:72:d8:f6:de:b8: 5e:75:02:1b:0b:fd:31:96:7d:ed:ca:ce:83:3d:9e:3a:26:d6: 7e:fa:1b:3e:3a:d9:25:e0:b3:35:f2:e8:1e:9b:d1:6a:bc:32: f8:3f:94:4b:42:d1:87:54:d4:71:cc:4f:25:b8:52:21:b5:d5: ee:1d:0f:f3:68:72:5c:8c:50:c6:ca:66:9f:cb:d0:20:9e:c2: 36:d9:c5:a1:0a:5c:be:cf:a9:74:e6:6b:e0:13:65:9b:b2:05: 16:ec:43:04:27:e4:38:e9:c6:3b:85:ad:86:bb:ec:ec:16:b9: d3:f0:be:d3:d7:b5:5c:02:7d:41:30:dc:36:82:b6:5b:18:eb: b3:1d:92:88:7c:59:91:12:4f:74:cb:26:dd:32:b4:25:95:9e: bf:56:47:ae -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMGno/fWtGpt5696muiT86xbv2MAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwMTE0MDQ0OVoX DTI0MTEyOTE0MDk0OVowMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5 RjQzMTJDRDNEQkI0OTNCNUQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlpGbhmCeCztm2ZliubaavWTnsFbd+wouSSqgYUGyEp6jz+3t9W2dWkDbq2 eEzotHRNiCZF5kHoVxd1Hz+2Blr27C1+AEflkANkGOspBA5SlwNmBMrOZsO00R2L Zad7l1sVZk+NdnsDcVq9bk7Ys7+kYe/3zkaH9obfqdcOGHXEaIIykG90fdrjWF49 sLuZG+Vf2GS3OZP+vudGnij1KI2bpaJVsNmVz7LapKVDnWb4nNZk7dUW1pPRgzma 4MvXVKTc4kr2Tc3WM4zAOuu4OZq5qtP7tIITUltTLTW7wEkEuYF4twP11qqACCyM 45GsM/2Sa3qYYXuMS4CsKtQzf3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNblSvbEN4aImbmfQxLNPbtJO10pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwYzczYWY1 LWEyYzAtNDI0ZC04NjJlLTExMmM1OGI3MjcwZS8wL0Q2RTU0QUY2QzQzNzg2ODg5 OUI5OUY0MzEyQ0QzREJCNDkzQjVEMjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0gwDQYJKoZIhvcNAQELBQADggEBAFu80Eqa3p2xIw9nLye9Ed7YZ6qhnL2I K8p+PBrNkedFe4B0NSCG6NWJrGXuf/LPa2/EP5cUfT4cr9EiPIOnJOZTHcaqC8is EIUPApBcT9nQMgEhhEct4jiorarQXNunPR/pDXbE6PJy2PbeuF51AhsL/TGWfe3K zoM9njom1n76Gz462SXgszXy6B6b0Wq8Mvg/lEtC0YdU1HHMTyW4UiG11e4dD/No clyMUMbKZp/L0CCewjbZxaEKXL7PqXTma+ATZZuyBRbsQwQn5DjpxjuFrYa77OwW udPwvtPXtVwCfUEw3DaCtlsY67Mdkoh8WZEST3TLJt0ytCWVnr9WR64= -----END CERTIFICATE-----Generated at Wed May 8 17:45:25 2024 by rpki-client on console-ams.rpki-client.org