$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer File: F137C794398E5F88909A244EC978EA476CCF76CC.cer (raw, json) Hash identifier: z8iqRx1Zmot6NgJdAOqcH5VzjuwM9pngepC9EHIRUSU= Subject key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38FEA90650B1E56DD1FC36E053F0188954420E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft caRepository: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 Nov 2023 06:07:07 +0000 Certificate not after: Fri 22 Nov 2024 06:12:07 +0000 Subordinate resources: IP: 103.55.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fe:a9:06:50:b1:e5:6d:d1:fc:36:e0:53:f0:18:89:54:42:0e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 06:07:07 2023 GMT Not After : Nov 22 06:12:07 2024 GMT Subject: CN=F137C794398E5F88909A244EC978EA476CCF76CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:8b:08:21:09:f4:7c:9d:1e:96:6d:1b:7a: c4:69:3c:63:1f:0c:7e:4e:9e:fe:f4:b6:a0:92:f5: d8:38:98:6c:68:94:41:6e:42:dd:ed:7b:0f:f6:f5: 8e:f8:ad:72:f1:83:15:09:5f:c3:77:f0:d3:05:fd: 28:16:b6:95:65:f1:f4:63:fd:d9:a8:1d:fe:14:8a: c0:32:ae:47:fd:54:ab:38:aa:9d:3b:83:5f:d1:99: 9e:b2:75:38:31:95:10:c9:fd:b7:da:d5:dd:85:3d: 1a:07:9d:93:0f:64:18:72:31:6e:c2:bd:cd:e5:18: 76:df:60:40:86:e7:8e:44:92:82:c1:35:b3:08:e9: 60:95:46:c2:75:80:e7:ae:f4:05:f7:d3:4b:53:cf: 2e:7d:cc:47:d5:cb:87:68:f4:0a:06:1a:c7:8b:86: 36:50:0d:08:b8:dc:99:99:16:5f:60:5c:29:9f:19: 9c:cf:fc:1d:5e:52:b7:1e:2c:eb:68:6e:55:df:91: 4f:d7:e7:dc:57:8f:ba:6e:f9:63:d9:c7:d0:67:77: 45:c6:a3:e4:82:a7:e0:4b:ee:97:e1:2a:ff:5e:d8: 36:c3:f6:3b:e1:1c:68:4a:5e:d8:09:e5:26:29:38: 63:b2:85:da:53:19:9d:36:59:a8:6c:89:85:a0:9f: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.224.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:e4:69:52:65:02:38:71:7f:2a:27:c7:76:64:50:41:d5:f8: b0:b6:ff:f6:ba:45:e0:96:f6:18:42:ad:b8:71:5e:17:09:b3: 2a:4a:4a:a3:3d:1c:f9:f7:ba:3b:d7:6e:37:67:9e:2c:ca:9a: 51:62:5f:0d:03:01:6d:ba:a0:90:c2:7b:59:7d:a7:62:72:9b: 2a:55:ef:11:68:e9:88:e1:7e:1f:1b:6a:4f:e2:72:17:7b:40: 6d:48:fc:63:d5:1e:56:aa:2b:54:d0:9f:31:7f:4a:28:9e:15: d4:db:33:53:54:a7:36:0f:ca:81:5e:3c:0f:50:bd:50:64:15: 16:a2:de:bf:46:b7:98:ab:df:df:60:77:a1:60:15:97:d3:bd: ce:88:7c:c9:b1:d4:12:03:a3:b3:d2:00:2d:66:c8:8b:e4:2d: d0:93:ab:2d:2d:9c:51:af:15:18:b6:92:5b:d7:e9:9d:23:b3: 48:ee:87:3a:42:85:bd:d3:47:f2:f0:fe:96:db:3d:33:a6:66: 8b:3f:f0:a3:9a:e9:f0:70:13:73:ba:63:9a:a6:20:8e:50:22: 38:5e:34:7e:e2:a4:b5:1e:87:9c:fd:bb:9d:68:bc:92:e7:5d: 04:62:36:f6:68:c1:00:52:b9:53:fc:3e:bb:4f:9d:e3:f1:46: a0:c5:d8:48 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOP6pBlCx5W3R/DbgU/AYiVRCDkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyNDA2MDcwN1oX DTI0MTEyMjA2MTIwN1owMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEy NDRFQzk3OEVBNDc2Q0NGNzZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzuiwghCfR8nR6WbRt6xGk8Yx8Mfk6e/vS2oJL12DiYbGiUQW5C3e17D/b1 jvitcvGDFQlfw3fw0wX9KBa2lWXx9GP92agd/hSKwDKuR/1UqziqnTuDX9GZnrJ1 ODGVEMn9t9rV3YU9Ggedkw9kGHIxbsK9zeUYdt9gQIbnjkSSgsE1swjpYJVGwnWA 5670BffTS1PPLn3MR9XLh2j0CgYax4uGNlANCLjcmZkWX2BcKZ8ZnM/8HV5Stx4s 62huVd+RT9fn3FePum75Y9nH0Gd3Rcaj5IKn4Evul+Eq/17YNsP2O+EcaEpe2Anl Jik4Y7KF2lMZnTZZqGyJhaCfaGsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPE3x5Q5jl+IkJokTsl46kdsz3bMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZjJjNzMz LWQ2N2YtNDgxMy1iOGY3LTA1OGQ5NWEwOTU4Ny8wL0YxMzdDNzk0Mzk4RTVGODg5 MDlBMjQ0RUM5NzhFQTQ3NkNDRjc2Q0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnN+AwDQYJKoZIhvcNAQELBQADggEBAEzkaVJlAjhxfyonx3ZkUEHV+LC2//a6 ReCW9hhCrbhxXhcJsypKSqM9HPn3ujvXbjdnnizKmlFiXw0DAW26oJDCe1l9p2Jy mypV7xFo6Yjhfh8bak/ichd7QG1I/GPVHlaqK1TQnzF/SiieFdTbM1NUpzYPyoFe PA9QvVBkFRai3r9Gt5ir399gd6FgFZfTvc6IfMmx1BIDo7PSAC1myIvkLdCTqy0t nFGvFRi2klvX6Z0js0juhzpChb3TR/Lw/pbbPTOmZos/8KOa6fBwE3O6Y5qmII5Q IjheNH7ipLUeh5z9u51ovJLnXQRiNvZowQBSuVP8PrtPnePxRqDF2Eg= -----END CERTIFICATE-----Generated at Wed May 8 07:45:31 2024 by rpki-client on console-ams.rpki-client.org