$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer File: F503463BC571123F80B94A358280E0D0F9750C09.cer (raw, json) Hash identifier: Z5dMs81EkytXNx1H85Tiv369/VMPtmWObpr38hQ3UME= Subject key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 413D0976917533918B817E327AA8991101619B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft caRepository: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 27 Apr 2024 19:11:19 +0000 Certificate not after: Sat 26 Apr 2025 19:16:19 +0000 Subordinate resources: IP: 103.169.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3d:09:76:91:75:33:91:8b:81:7e:32:7a:a8:99:11:01:61:9b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 27 19:11:19 2024 GMT Not After : Apr 26 19:16:19 2025 GMT Subject: CN=F503463BC571123F80B94A358280E0D0F9750C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:57:ef:f8:21:0b:92:2e:f8:40:c6:e4:28: 8e:37:87:71:e1:85:b7:e2:80:cc:05:96:e3:fc:51: bc:e5:43:84:9c:fc:0a:12:ae:2f:fa:0f:05:bc:c8: 81:77:5e:44:47:a5:ca:4a:9b:ed:3a:8d:e7:e7:34: 55:d5:cf:b4:55:ed:1d:4d:49:bd:a1:46:c1:97:0a: e3:14:15:a6:6c:ce:72:ca:49:b6:61:49:49:68:f5: 3c:a3:7a:3e:6e:63:3d:69:27:6d:d2:72:2c:ac:1f: 44:57:f1:23:af:e2:13:55:43:6f:13:88:78:85:8c: 01:d3:bb:83:e6:65:c9:ef:5d:23:31:b0:09:66:08: 1c:6f:f3:d0:0d:1d:e3:08:f8:fc:1f:64:d7:86:9e: b0:b9:0f:8d:62:5f:67:7d:e8:9c:80:c4:6d:d2:3a: 8f:cc:15:81:9e:19:1e:46:48:5a:2e:93:ef:f0:90: 64:a5:5b:bc:49:7f:68:c7:8f:19:55:ec:13:3e:43: ee:60:ae:59:ef:9c:34:47:9d:fc:53:d0:04:27:59: 1c:61:76:ce:e8:d4:03:ea:b5:5e:f0:7e:94:63:76: 3d:c7:a8:35:6c:84:bd:dc:f3:8e:2a:3d:e2:64:92: 04:05:1c:7e:40:94:1a:dc:4e:d9:fe:4b:85:64:9e: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.186.0/23 Signature Algorithm: sha256WithRSAEncryption 55:78:bf:3d:bb:6b:30:fa:11:26:f8:b2:b0:f1:43:26:7a:6c: 7d:5c:78:10:d6:e4:32:2b:8f:4c:10:34:ac:c4:fd:eb:a3:95: 84:9a:3b:bd:04:69:e5:e9:a0:20:c6:e7:31:de:e1:f4:2d:a7: 56:55:03:da:c1:07:93:38:22:7c:26:2e:05:7c:66:0d:b8:c6: 1d:99:95:d8:bf:df:5b:b2:33:ce:cd:c4:6e:98:bf:2f:32:b2: 7c:0f:dc:df:e7:07:b7:25:cf:7e:41:73:35:7f:53:e4:b7:a7: 70:ad:62:7b:2e:bb:d2:8e:c3:77:a3:1b:db:34:2c:70:12:e6: 1b:e9:2d:a6:9b:0a:7b:db:83:32:2d:8c:23:99:60:b6:98:fb: c1:5a:ea:7b:98:18:4e:a9:93:e3:a5:b6:84:16:2e:19:39:8a: e4:f8:ea:bb:62:95:10:8d:2a:cc:5a:f7:24:4f:56:9d:09:4c: 5d:69:07:84:c9:a9:f9:79:b5:19:db:25:18:be:6e:f1:e3:29: a0:eb:0a:d2:f2:c9:0a:3c:61:6d:1c:2f:6e:4f:a1:3e:de:0b: 11:99:ab:47:ac:60:7e:46:5c:2f:c4:aa:37:e6:70:ff:51:d6: 64:79:c3:63:ce:4d:e3:32:8a:ec:16:65:75:0e:8e:57:1e:62: 0a:c8:01:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQT0JdpF1M5GLgX4yeqiZEQFhm5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNzE5MTExOVoX DTI1MDQyNjE5MTYxOVowMzExMC8GA1UEAxMoRjUwMzQ2M0JDNTcxMTIzRjgwQjk0 QTM1ODI4MEUwRDBGOTc1MEMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKe/V+/4IQuSLvhAxuQojjeHceGFt+KAzAWW4/xRvOVDhJz8ChKuL/oPBbzI gXdeREelykqb7TqN5+c0VdXPtFXtHU1JvaFGwZcK4xQVpmzOcspJtmFJSWj1PKN6 Pm5jPWknbdJyLKwfRFfxI6/iE1VDbxOIeIWMAdO7g+Zlye9dIzGwCWYIHG/z0A0d 4wj4/B9k14aesLkPjWJfZ33onIDEbdI6j8wVgZ4ZHkZIWi6T7/CQZKVbvEl/aMeP GVXsEz5D7mCuWe+cNEed/FPQBCdZHGF2zujUA+q1XvB+lGN2PceoNWyEvdzzjio9 4mSSBAUcfkCUGtxO2f5LhWSeH7cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPUDRjvFcRI/gLlKNYKA4ND5dQwJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYmNkOWE3ZC1kZTM1LTQ3ZTgtOTIyOC0xMmRmYjBiOGVhYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiY2Q5YTdk LWRlMzUtNDdlOC05MjI4LTEyZGZiMGI4ZWFjOC8wL0Y1MDM0NjNCQzU3MTEyM0Y4 MEI5NEEzNTgyODBFMEQwRjk3NTBDMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqbowDQYJKoZIhvcNAQELBQADggEBAFV4vz27azD6ESb4srDxQyZ6bH1ceBDW 5DIrj0wQNKzE/eujlYSaO70EaeXpoCDG5zHe4fQtp1ZVA9rBB5M4InwmLgV8Zg24 xh2Zldi/31uyM87NxG6Yvy8ysnwP3N/nB7clz35BczV/U+S3p3CtYnsuu9KOw3ej G9s0LHAS5hvpLaabCnvbgzItjCOZYLaY+8Fa6nuYGE6pk+OltoQWLhk5iuT46rti lRCNKsxa9yRPVp0JTF1pB4TJqfl5tRnbJRi+bvHjKaDrCtLyyQo8YW0cL25PoT7e CxGZq0esYH5GXC/EqjfmcP9R1mR5w2POTeMyiuwWZXUOjlceYgrIASI= -----END CERTIFICATE-----Generated at Wed May 8 15:00:01 2024 by rpki-client on console-ams.rpki-client.org