$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer (raw, json) Hash identifier: Od+9X7EAq8GBBiipdR+EqixN33RtTo0hMk5D/CuVfOk= Subject key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38FE98EB851CCB30515A2F9777D4C6C7EC267F72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:56:24 +0000 Certificate not after: Mon 29 Jul 2024 03:01:24 +0000 Subordinate resources: IP: 103.143.170.0/23 IP: 2001:df1:8d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fe:98:eb:85:1c:cb:30:51:5a:2f:97:77:d4:c6:c7:ec:26:7f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:56:24 2023 GMT Not After : Jul 29 03:01:24 2024 GMT Subject: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:5c:c2:ea:5f:79:49:be:d9:64:97:c0:3c: fa:57:cf:30:63:f7:b6:74:15:20:e1:90:01:eb:f6: 17:6e:a6:cc:69:8e:ec:fb:ce:0b:2a:b5:41:9b:4f: 9f:95:84:f2:e9:a9:73:1e:15:70:ad:0f:61:72:4f: 26:3b:e1:42:ee:96:bc:75:23:ab:e1:3e:8e:1a:96: b5:2e:10:02:5a:94:ee:bd:af:ab:2e:32:d7:d4:f0: fa:aa:13:7e:b1:19:2a:3f:f3:5b:aa:04:ac:98:21: 75:00:52:0d:d6:bf:c4:55:3b:81:37:b5:44:5b:49: e3:32:39:0c:69:fc:2c:1d:4f:66:bd:26:e5:28:64: a2:67:79:0b:0e:f5:79:d1:9c:dd:2a:55:c3:c0:c1: 55:d2:d8:a4:2f:96:07:13:01:fe:ef:78:3c:ea:73: 37:ab:1d:af:1c:3d:18:e7:aa:1c:ce:23:82:e7:ba: 66:bd:f4:9b:ba:40:08:71:04:0d:a7:b1:61:4b:ba: 21:ca:56:5e:f0:75:00:ba:00:ce:ea:ef:ff:5a:86: e4:f9:d8:78:b3:ec:67:a7:67:66:a7:c3:45:14:93: 37:65:c6:75:fa:5a:c6:50:14:9c:52:df:fc:18:47: 57:18:57:77:4d:7d:48:da:23:19:75:d7:e2:b2:97: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 IPv6: 2001:df1:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 24:0e:f3:31:75:c9:b6:ec:da:da:1d:5e:fe:3c:97:84:34:d7: 0e:0c:be:07:a9:ec:ee:74:06:3d:db:66:7a:17:49:64:d5:7a: bc:a9:a7:ca:da:49:55:d5:bd:97:c7:2b:d7:e5:ed:3a:2b:ea: 00:98:f0:0e:9a:b8:c6:d8:5b:d4:29:d7:7a:5d:1b:b4:a0:18: 76:13:24:36:7e:6c:d8:bd:7f:64:d4:71:ce:41:60:d6:33:e0: 23:e8:e2:a0:82:03:d2:b4:92:c6:2d:b0:b5:ef:58:6e:75:d5: 36:09:72:fb:31:16:bf:ce:c2:e8:f8:ec:1d:9a:51:a1:bf:22: ba:61:1b:65:79:0d:00:73:8c:6e:02:2a:04:5b:73:89:33:cd: 8b:31:f6:3a:28:f9:7b:c1:08:75:4c:79:fe:52:14:24:8c:58: cc:68:e5:aa:f2:8a:56:82:23:0c:a4:3e:eb:30:88:2b:1c:7b: 71:67:45:93:4c:85:da:cb:18:31:33:8c:ee:fc:18:1c:8e:e6: c7:87:b5:41:80:a1:7f:dc:09:9d:c1:d4:8e:5e:c0:29:38:08: 51:d3:39:85:98:b3:90:f9:d6:af:d7:d4:0f:30:8e:64:5b:c2: 7d:87:e4:ea:44:09:67:91:22:2a:cb:fc:18:2b:e8:4f:a8:ae: a9:ce:d1:56 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUOP6Y64UcyzBRWi+Xd9TGx+wmf3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyNTYyNFoX DTI0MDcyOTAzMDEyNFowMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3 QjU0RENEMjQ2ODQyNkU4QkE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzpXMLqX3lJvtlkl8A8+lfPMGP3tnQVIOGQAev2F26mzGmO7PvOCyq1QZtP n5WE8umpcx4VcK0PYXJPJjvhQu6WvHUjq+E+jhqWtS4QAlqU7r2vqy4y19Tw+qoT frEZKj/zW6oErJghdQBSDda/xFU7gTe1RFtJ4zI5DGn8LB1PZr0m5Shkomd5Cw71 edGc3SpVw8DBVdLYpC+WBxMB/u94POpzN6sdrxw9GOeqHM4jgue6Zr30m7pACHEE DaexYUu6IcpWXvB1ALoAzurv/1qG5PnYeLPsZ6dnZqfDRRSTN2XGdfpaxlAUnFLf /BhHVxhXd019SNojGXXX4rKXt/cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPVDYq0raxkct9N7VNzSRoQm6LqYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjMGIzOWUy LTY4N2ItNDYxNC04MDlmLTczNjcyZWEyMTJjZi8wL0Y1NDM2MkFEMkI2QjE5MUNC N0QzN0I1NERDRDI0Njg0MjZFOEJBOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnj6owDwQCAAIwCQMHACABDfGNgDANBgkqhkiG9w0BAQsFAAOCAQEAJA7zMXXJ tuza2h1e/jyXhDTXDgy+B6ns7nQGPdtmehdJZNV6vKmnytpJVdW9l8cr1+XtOivq AJjwDpq4xthb1CnXel0btKAYdhMkNn5s2L1/ZNRxzkFg1jPgI+jioIID0rSSxi2w te9YbnXVNgly+zEWv87C6PjsHZpRob8iumEbZXkNAHOMbgIqBFtziTPNizH2Oij5 e8EIdUx5/lIUJIxYzGjlqvKKVoIjDKQ+6zCIKxx7cWdFk0yF2ssYMTOM7vwYHI7m x4e1QYChf9wJncHUjl7AKTgIUdM5hZizkPnWr9fUDzCOZFvCfYfk6kQJZ5EiKsv8 GCvoT6iuqc7RVg== -----END CERTIFICATE-----Generated at Wed May 8 04:38:03 2024 by rpki-client on console-fra.rpki-client.org