$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer File: F61D0A85B56D8F824658A8287BE8D4F659680324.cer (raw, json) Hash identifier: ynjt8zE8b7DJBvcmAHu0KlwZTUW7+Ln8H2XGdXRJljo= Subject key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14246EE826CE3229379C33DBF65B6D556828212D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft caRepository: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Feb 2024 09:40:35 +0000 Certificate not after: Tue 25 Feb 2025 09:45:35 +0000 Subordinate resources: IP: 103.186.96.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:24:6e:e8:26:ce:32:29:37:9c:33:db:f6:5b:6d:55:68:28:21:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 27 09:40:35 2024 GMT Not After : Feb 25 09:45:35 2025 GMT Subject: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:7d:53:1e:5a:cd:9e:6f:20:c1:e0:72:fc: 69:56:12:7a:f8:ef:e2:5c:4d:28:e3:9d:60:69:df: 64:20:74:a6:56:e5:cc:ff:d8:39:f3:ef:33:51:b8: e3:6d:90:9e:d9:03:a6:e1:d2:bc:9e:9c:2d:6c:5f: cd:ee:85:4e:0e:89:0e:04:9c:d0:97:d5:23:f2:47: 13:b7:16:01:7c:6a:62:af:9a:9b:cd:13:9c:b4:b9: 0a:2e:9f:58:92:c1:85:aa:e4:cb:2b:fe:ee:f0:98: 20:cb:84:87:30:ed:db:9c:15:cf:d2:b3:b2:0a:8b: 07:93:bb:8e:32:33:35:c6:f4:65:6e:36:cb:6b:ed: 9f:12:97:19:9b:3d:31:69:fd:e8:5a:88:ec:d5:a7: c8:63:d5:5f:ab:b2:df:1d:82:55:d9:7d:9d:72:e1: f5:0f:2a:41:b4:a4:71:77:d1:1c:df:c9:9c:41:2a: c9:10:cc:75:59:38:f0:10:6a:d8:8a:75:91:0a:53: 7c:2e:76:d4:0d:dd:fb:5c:5d:36:fc:11:ba:26:dc: 26:9e:22:e9:13:87:4d:14:6c:95:91:fe:a6:cf:c4: 59:25:74:48:00:42:5c:f6:9a:15:af:a6:b4:97:c7: 30:f9:18:0a:1b:a3:e3:4e:a8:1b:5b:2f:a4:26:4a: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.96.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:75:26:6b:fe:d1:a9:aa:49:d1:0d:2b:bb:3b:b9:b3:ea:f4: 57:59:e0:6b:3e:7d:4c:0e:46:94:32:03:3d:3d:c8:84:fa:c8: 2c:f2:93:01:11:93:d4:0c:2b:be:88:7a:b4:ef:65:60:bc:09: fe:84:0c:c5:a6:87:74:2b:ff:b0:65:19:17:23:3f:2e:fe:27: 65:fe:57:9d:e6:73:6f:4f:76:7f:70:04:eb:43:17:2a:a6:65: 43:c8:b1:c9:1b:40:1d:ee:8f:d1:b6:29:9f:8d:dd:29:a3:08: 0b:d5:5a:24:c4:3a:fc:90:bb:21:24:e4:1c:2d:3f:ae:77:c8: 35:ab:53:1d:33:54:ed:d5:b3:f1:36:96:b2:fb:8a:5d:47:a3: bd:10:f2:c4:7f:02:86:9f:65:53:ea:cf:7e:82:1b:30:04:cf: 91:6d:21:74:e6:2e:41:b6:12:b8:76:29:bf:ea:24:0b:1d:dc: ec:00:86:0c:2e:06:50:86:e0:2f:11:07:6c:32:98:0d:4a:17: bd:d5:ed:1c:42:dc:56:dc:8a:34:7e:db:5f:e8:a5:09:2f:c0: 7b:0e:97:4f:5b:60:64:b4:f5:97:c8:95:d4:b2:16:2d:85:8f: 52:18:39:aa:04:9f:aa:40:96:68:be:7f:7a:ed:dc:68:3f:41: 5e:8c:30:0b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFCRu6CbOMik3nDPb9lttVWgoIS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyNzA5NDAzNVoX DTI1MDIyNTA5NDUzNVowMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThB ODI4N0JFOEQ0RjY1OTY4MDMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL29fVMeWs2ebyDB4HL8aVYSevjv4lxNKOOdYGnfZCB0plblzP/YOfPvM1G4 422QntkDpuHSvJ6cLWxfze6FTg6JDgSc0JfVI/JHE7cWAXxqYq+am80TnLS5Ci6f WJLBharkyyv+7vCYIMuEhzDt25wVz9KzsgqLB5O7jjIzNcb0ZW42y2vtnxKXGZs9 MWn96FqI7NWnyGPVX6uy3x2CVdl9nXLh9Q8qQbSkcXfRHN/JnEEqyRDMdVk48BBq 2Ip1kQpTfC521A3d+1xdNvwRuibcJp4i6ROHTRRslZH+ps/EWSV0SABCXPaaFa+m tJfHMPkYChuj406oG1svpCZKeB0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPYdCoW1bY+CRlioKHvo1PZZaAMkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MWU5ZGUy LWE0ZWMtNDdhMi05YmI4LTEwODIxZGRhNjdmMy8wL0Y2MUQwQTg1QjU2RDhGODI0 NjU4QTgyODdCRThENEY2NTk2ODAzMjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnumAwDQYJKoZIhvcNAQELBQADggEBAFp1Jmv+0amqSdENK7s7ubPq9FdZ4Gs+ fUwORpQyAz09yIT6yCzykwERk9QMK76IerTvZWC8Cf6EDMWmh3Qr/7BlGRcjPy7+ J2X+V53mc29Pdn9wBOtDFyqmZUPIsckbQB3uj9G2KZ+N3SmjCAvVWiTEOvyQuyEk 5BwtP653yDWrUx0zVO3Vs/E2lrL7il1Ho70Q8sR/AoafZVPqz36CGzAEz5FtIXTm LkG2Erh2Kb/qJAsd3OwAhgwuBlCG4C8RB2wymA1KF73V7RxC3FbcijR+21/opQkv wHsOl09bYGS09ZfIldSyFi2Fj1IYOaoEn6pAlmi+f3rt3Gg/QV6MMAs= -----END CERTIFICATE-----Generated at Wed May 8 09:50:45 2024 by rpki-client on console-fra.rpki-client.org