$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer (raw, json) Hash identifier: Lc88Wy+oYjiOIdGhS6F/neGyrbJeKopkDq80hhln4Es= Subject key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1819B666E177417A6F6BE7BE3295FF21A2C5CEF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft caRepository: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:50:22 +0000 Certificate not after: Sun 28 Jul 2024 23:55:22 +0000 Subordinate resources: IP: 103.76.200.0/22 IP: 2001:df5:9600::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:19:b6:66:e1:77:41:7a:6f:6b:e7:be:32:95:ff:21:a2:c5:ce:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 23:50:22 2023 GMT Not After : Jul 28 23:55:22 2024 GMT Subject: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:9f:16:98:9b:b0:c7:34:18:76:bf:de:3c: 2c:e7:a4:b5:51:a7:d1:49:b9:76:9b:2c:cc:91:d5: cb:23:3e:2d:d5:16:d9:cd:55:50:21:08:4d:a5:a4: 12:1d:43:54:ad:62:e1:a9:a0:1b:60:f6:30:df:7c: 2d:ef:e9:cc:f1:83:8b:08:e5:3c:b6:ec:7b:38:5b: 29:33:04:e8:bb:5a:d8:44:fc:1d:55:6b:c0:65:23: 23:5f:5c:11:76:9a:93:99:86:75:00:6a:c2:20:63: fc:db:e1:54:25:cd:4c:62:eb:6b:18:6a:18:7e:8b: 80:29:d7:5b:a1:57:08:fb:d5:9d:3c:91:85:08:1b: b8:4a:15:3a:08:ef:c3:15:63:c6:7a:8b:bd:49:9c: 4e:a6:2f:2c:95:92:67:10:46:4b:fd:5a:08:c2:55: a4:86:31:77:e3:23:a4:a8:c6:69:ee:21:91:9c:61: 25:54:18:b3:8c:e8:0d:08:c8:c2:0c:fe:6a:b4:64: 33:54:d3:bb:15:4e:dc:31:c4:89:2f:d5:1c:29:30: 42:73:f8:1e:72:ef:40:80:d2:65:1a:46:f6:07:e7: 5d:bb:59:01:e3:61:6f:a5:58:52:51:33:28:94:69: 79:9a:b1:35:22:47:d5:65:6a:b4:03:6f:31:22:77: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.200.0/22 IPv6: 2001:df5:9600::/48 Signature Algorithm: sha256WithRSAEncryption 58:af:a5:70:a4:d3:7d:23:b0:e0:27:38:4b:4e:81:ff:52:2c: f0:e2:73:f8:58:b6:88:f8:35:07:f2:32:0b:2b:3a:50:6b:7e: 4d:dc:56:29:6b:ff:58:61:d5:ff:6f:39:6b:22:ec:67:b0:ea: e6:73:0f:37:94:62:f0:f1:fa:5d:06:90:d4:9f:8b:01:a3:ea: 8a:20:7f:ce:55:22:1d:05:ae:01:1d:92:3d:dd:c6:ba:77:6d: ca:c1:c7:bc:52:be:f7:4b:0c:ab:42:24:b3:3c:10:f1:f5:40: 0e:50:72:11:c4:54:50:c1:61:95:8a:a2:a5:ff:00:c7:b8:c9: 80:ee:17:fe:87:01:c5:79:1c:f6:4e:8a:d7:75:da:0c:df:3d: ca:4f:4c:a3:e3:02:0b:66:37:3b:26:31:ea:4a:b9:39:ae:c0: 70:7d:9c:0a:5f:d2:b9:c2:c7:2b:54:30:db:11:1c:b6:7f:c0: a7:f8:ee:50:ac:bd:2e:bf:aa:78:fc:eb:38:a6:6e:e5:63:e7: 89:ed:d4:f8:ee:c7:6f:e2:ce:db:fa:cd:9f:fb:dd:23:70:b5: dd:68:50:10:45:0f:a4:50:28:65:93:9d:48:b2:53:ca:ff:a5: 80:9d:5a:b4:e1:a3:5f:99:ed:80:b0:cf:7a:1d:d0:b8:cc:c1: 17:14:fe:02 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGBm2ZuF3QXpva+e+MpX/IaLFzvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIzNTAyMloX DTI0MDcyODIzNTUyMlowMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFF RjRDMjM4RENBOUE2MUExNjE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2inxaYm7DHNBh2v948LOektVGn0Um5dpsszJHVyyM+LdUW2c1VUCEITaWk Eh1DVK1i4amgG2D2MN98Le/pzPGDiwjlPLbsezhbKTME6Lta2ET8HVVrwGUjI19c EXaak5mGdQBqwiBj/NvhVCXNTGLraxhqGH6LgCnXW6FXCPvVnTyRhQgbuEoVOgjv wxVjxnqLvUmcTqYvLJWSZxBGS/1aCMJVpIYxd+MjpKjGae4hkZxhJVQYs4zoDQjI wgz+arRkM1TTuxVO3DHEiS/VHCkwQnP4HnLvQIDSZRpG9gfnXbtZAeNhb6VYUlEz KJRpeZqxNSJH1WVqtANvMSJ3wSECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA/tooj3J13qRprvTCONypphoWFcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMzcwZTZm LWYwYzctNGY0MC04YmE0LWEwMWU1ZDBjNzRlNC8wLzBGRURBMjg4RjcyNzVERUE0 NjlBRUY0QzIzOERDQTlBNjFBMTYxNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnTMgwDwQCAAIwCQMHACABDfWWADANBgkqhkiG9w0BAQsFAAOCAQEAWK+lcKTT fSOw4Cc4S06B/1Is8OJz+Fi2iPg1B/IyCys6UGt+TdxWKWv/WGHV/285ayLsZ7Dq 5nMPN5Ri8PH6XQaQ1J+LAaPqiiB/zlUiHQWuAR2SPd3GundtysHHvFK+90sMq0Ik szwQ8fVADlByEcRUUMFhlYqipf8Ax7jJgO4X/ocBxXkc9k6K13XaDN89yk9Mo+MC C2Y3OyYx6kq5Oa7AcH2cCl/SucLHK1Qw2xEctn/Ap/juUKy9Lr+qePzrOKZu5WPn ie3U+O7Hb+LO2/rNn/vdI3C13WhQEEUPpFAoZZOdSLJTyv+lgJ1atOGjX5ntgLDP eh3QuMzBFxT+Ag== -----END CERTIFICATE-----Generated at Thu May 2 20:02:08 2024 by rpki-client on console-ams.rpki-client.org