$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer (raw, json) Hash identifier: gbDX3XPpqmsJvXz6w3T2oBSdswaw9fnEsUA4lmGIo9Y= Subject key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E7FD5B2C807700F060EF32A5D1B99D74E679C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft caRepository: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:10:19 +0000 Certificate not after: Sun 28 Jul 2024 23:15:19 +0000 Subordinate resources: IP: 45.116.156.0/22 IP: 103.54.92.0/22 IP: 103.104.132.0/22 IP: 2407:df00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7f:d5:b2:c8:07:70:0f:06:0e:f3:2a:5d:1b:99:d7:4e:67:9c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 23:10:19 2023 GMT Not After : Jul 28 23:15:19 2024 GMT Subject: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:5b:74:2d:a9:16:be:a7:da:e5:58:48:10: 19:f8:37:bc:12:d9:01:f5:ef:ee:ed:b1:d2:2b:d5: ad:54:02:34:bc:67:1c:be:f6:f2:62:9e:b8:6e:5b: 0c:b4:ad:2d:77:ef:d6:26:73:91:43:9d:16:7b:e0: 37:6b:41:21:4c:09:85:b0:34:bc:4d:b3:d0:fc:e2: 63:8f:a2:e8:59:27:7c:b5:15:36:1a:dc:75:0d:31: ed:81:63:02:12:03:58:7f:fe:84:11:e2:e1:a3:2f: f0:26:2a:72:0a:0a:3f:f2:5a:7f:df:3d:f2:77:e0: ba:18:7d:b7:90:1b:8b:b6:ab:9d:b0:46:a3:59:be: f2:b9:8b:ce:40:ef:84:be:30:1b:88:91:1f:8a:0d: 50:4a:9a:3b:13:e4:28:8c:34:a6:c5:6f:cd:33:9d: 34:72:e7:f9:6d:23:4b:30:44:50:66:8f:48:32:f3: c3:67:f5:33:45:35:18:0b:e5:96:6b:b7:7e:db:70: f9:56:9e:53:bf:8a:b6:a0:d7:fa:a6:79:41:f7:6a: 1c:a2:b1:62:c5:20:03:f6:cb:7f:b1:fd:0d:fa:80: f3:89:ce:35:54:df:8d:72:99:36:bb:bd:c7:79:cc: 6c:ec:69:6c:2e:7c:02:4e:cb:95:79:db:9e:85:b3: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/22 103.54.92.0/22 103.104.132.0/22 IPv6: 2407:df00::/32 Signature Algorithm: sha256WithRSAEncryption 93:f2:cd:05:a0:df:f0:82:2b:70:90:cf:73:5d:4b:ca:eb:f1: ce:1a:8d:67:f7:0e:8c:f1:fc:b8:f3:b3:a3:1e:b4:f6:89:77: 1d:75:b8:94:b6:19:b5:4c:b8:ca:af:09:c7:6a:47:67:e0:57: 65:f0:15:f5:7b:f9:2c:a6:6e:6a:22:84:67:93:77:87:c0:98: ce:ab:8c:ea:6d:82:83:5c:6f:de:db:09:2c:89:d4:d9:ae:5a: 8a:ef:c9:ae:d9:0c:59:15:7d:cd:d9:dd:32:29:5e:08:f6:3a: 66:22:68:55:3c:c8:ef:c9:fa:6a:d5:13:38:92:8f:da:8f:21: fe:02:07:b2:5d:a2:cd:68:df:aa:b0:18:da:1b:c4:3c:8b:7b: 8f:d3:94:83:a5:b7:63:4f:c9:65:e1:e2:23:37:e5:c6:ee:6d: e2:5a:37:74:ba:b9:38:d1:d7:0f:5f:2f:46:8e:88:57:db:3a: 06:ac:41:9d:17:b3:a5:43:3d:6d:aa:26:16:2e:8f:5d:76:7f: 60:9f:c0:43:07:40:89:2b:47:6c:db:26:ed:c3:d9:39:3b:38: 09:d9:fa:0d:c4:53:6b:0d:1f:29:f1:f0:28:62:80:92:41:b6: 0a:b1:d0:34:38:d2:ad:bf:ee:83:33:1a:ec:76:9d:c1:ae:09: a1:92:eb:00 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIULn/VssgHcA8GDvMqXRuZ105nnGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIzMTAxOVoX DTI0MDcyODIzMTUxOVowMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdD OTc3RjI2NkIyQkU3NEM4MUFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORbW3QtqRa+p9rlWEgQGfg3vBLZAfXv7u2x0ivVrVQCNLxnHL728mKeuG5b DLStLXfv1iZzkUOdFnvgN2tBIUwJhbA0vE2z0PziY4+i6FknfLUVNhrcdQ0x7YFj AhIDWH/+hBHi4aMv8CYqcgoKP/Jaf9898nfguhh9t5Abi7arnbBGo1m+8rmLzkDv hL4wG4iRH4oNUEqaOxPkKIw0psVvzTOdNHLn+W0jSzBEUGaPSDLzw2f1M0U1GAvl lmu3fttw+VaeU7+KtqDX+qZ5QfdqHKKxYsUgA/bLf7H9DfqA84nONVTfjXKZNru9 x3nMbOxpbC58Ak7LlXnbnoWzPL0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCKflhiuPwZn7BfJd/Jmsr50yBq3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFm LTZkYTktNDAwZC04YjE0LTk5MmFhZTYzNzQ2Yy8wLzIyOUY5NjE4QUUzRjA2NjdF QzE3Qzk3N0YyNjZCMkJFNzRDODFBQjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAItdJwDBAJnNlwDBAJnaIQwDQQCAAIwBwMFACQH3wAwDQYJKoZIhvcNAQELBQAD ggEBAJPyzQWg3/CCK3CQz3NdS8rr8c4ajWf3Dozx/Ljzs6MetPaJdx11uJS2GbVM uMqvCcdqR2fgV2XwFfV7+SymbmoihGeTd4fAmM6rjOptgoNcb97bCSyJ1NmuWorv ya7ZDFkVfc3Z3TIpXgj2OmYiaFU8yO/J+mrVEziSj9qPIf4CB7Jdos1o36qwGNob xDyLe4/TlIOlt2NPyWXh4iM35cbubeJaN3S6uTjR1w9fL0aOiFfbOgasQZ0Xs6VD PW2qJhYuj112f2CfwEMHQIkrR2zbJu3D2Tk7OAnZ+g3EU2sNHynx8ChigJJBtgqx 0DQ40q2/7oMzGux2ncGuCaGS6wA= -----END CERTIFICATE-----Generated at Fri May 3 03:08:25 2024 by rpki-client on console-ams.rpki-client.org