$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer (raw, json) Hash identifier: axebwp+d7Ht4M5UccmtWXgM6INzCFMxTv8IS7hK3cQI= Subject key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 186CB7E8982333633F019A6DA24BC3FD5E1F0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft caRepository: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:29:34 +0000 Certificate not after: Mon 29 Jul 2024 04:34:34 +0000 Subordinate resources: IP: 27.111.32.0/19 IP: 43.229.204.0/22 IP: 103.245.180.0/22 IP: 119.235.16.0/20 IP: 202.129.184.0/21 IP: 2403:2e00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6c:b7:e8:98:23:33:63:3f:01:9a:6d:a2:4b:c3:fd:5e:1f:07:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:29:34 2023 GMT Not After : Jul 29 04:34:34 2024 GMT Subject: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:1e:b0:16:31:2a:24:3f:c4:ed:5f:62:58: ff:9a:31:22:73:3a:ff:56:26:7a:ff:d5:e6:5c:e9: 0d:65:e4:cf:54:59:79:fc:7a:57:29:94:02:41:ad: 8d:ce:ee:a6:a1:da:e4:2c:5b:d5:ce:bd:ee:dd:88: b1:94:f1:bc:02:80:a3:c4:f7:09:13:7e:c5:93:7b: 8c:9f:c9:4e:48:aa:17:c3:67:f1:08:28:f0:79:0f: ad:ef:13:12:c1:f2:17:b4:78:97:f8:42:fc:24:8d: 0d:ef:e6:ff:7a:53:50:6e:96:1f:81:b9:ad:33:e0: 7b:02:2c:3a:f4:f3:1e:14:71:f2:4a:5c:82:31:df: 30:93:38:63:5a:0a:9d:42:76:ed:54:fc:59:48:af: d8:98:4f:3f:e5:e5:6a:df:38:cb:1d:fe:c9:22:6e: 3f:14:55:98:70:cd:6a:cc:53:33:34:80:35:25:fa: ac:86:6b:07:c4:2f:c2:29:86:0e:a2:71:5e:58:77: 64:ba:f9:3f:d1:4c:73:93:f9:ba:24:0b:f0:4c:8c: cd:fb:5d:86:2a:a6:5f:2d:90:b7:b5:2d:a0:18:1a: f8:4f:1f:7d:bd:9a:72:ad:50:02:2a:79:1b:84:c2: 37:c7:9f:b4:95:4f:e5:fb:db:5c:da:8c:6f:12:6c: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.32.0/19 43.229.204.0/22 103.245.180.0/22 119.235.16.0/20 202.129.184.0/21 IPv6: 2403:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 2b:04:12:25:96:11:ef:5e:c9:fe:30:ba:5a:90:d4:3d:f4:bd: 6a:1c:cf:3e:e1:99:26:dd:22:32:ee:18:98:d6:a7:07:46:0d: 81:a5:bb:c6:4b:f3:05:0d:75:25:84:9a:b6:2b:79:12:1e:55: 2a:3a:43:0d:62:f8:60:57:aa:26:23:da:25:a3:de:59:cb:c3: b0:b6:a9:1e:df:f6:79:1f:dd:74:4c:eb:3a:aa:6f:dc:f8:c2: 14:78:37:83:1a:07:bf:e4:d2:c6:8d:07:d3:6d:4c:9f:e7:ac: 39:b5:0f:0a:da:20:2c:60:e8:dd:21:af:d3:a6:e8:7e:08:a1: ec:f5:ef:17:e7:da:45:b0:69:f7:48:2c:f7:69:df:04:41:51: 0b:92:de:94:c1:5f:31:c2:6c:a1:6b:69:d8:48:86:87:da:a9: a6:c0:91:f7:40:3c:58:f6:90:b3:8a:61:c7:6d:64:07:53:73: a3:d6:bc:46:14:a7:71:d0:bf:a4:46:c4:72:63:1f:79:06:1f: a1:56:bf:34:5b:e9:10:97:fc:24:f9:5f:ae:08:f8:1e:37:d9: 2b:4d:91:3d:df:5a:73:20:af:f5:b5:cd:c1:04:ab:71:57:ac: 82:8b:78:7e:de:31:d2:e2:d1:cf:ae:f0:f1:5b:b3:fa:bd:f4: fe:8a:51:9d -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUGGy36JgjM2M/AZptokvD/V4fByIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0MjkzNFoX DTI0MDcyOTA0MzQzNFowMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIx RUZDMjlENDVGMEFFQ0M3RkU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP+HrAWMSokP8TtX2JY/5oxInM6/1Ymev/V5lzpDWXkz1RZefx6VymUAkGt jc7upqHa5Cxb1c697t2IsZTxvAKAo8T3CRN+xZN7jJ/JTkiqF8Nn8Qgo8HkPre8T EsHyF7R4l/hC/CSNDe/m/3pTUG6WH4G5rTPgewIsOvTzHhRx8kpcgjHfMJM4Y1oK nUJ27VT8WUiv2JhPP+Xlat84yx3+ySJuPxRVmHDNasxTMzSANSX6rIZrB8QvwimG DqJxXlh3ZLr5P9FMc5P5uiQL8EyMzftdhiqmXy2Qt7UtoBga+E8ffb2acq1QAip5 G4TCN8eftJVP5fvbXNqMbxJs5WECAwEAAaOCAt8wggLbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKKpCQOdB8n46Ie/CnUXwrsx/6WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3 LWExNzEtNGQ5ZS1hOTM1LTQwNjkwMmIxZTEzYi8wLzQyOEFBNDI0MEU3NDFGMjdF M0EyMUVGQzI5RDQ1RjBBRUNDN0ZFOTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4D BAUbbyADBAIr5cwDBAJn9bQDBAR36xADBAPKgbgwDQQCAAIwBwMFACQDLgAwDQYJ KoZIhvcNAQELBQADggEBACsEEiWWEe9eyf4wulqQ1D30vWoczz7hmSbdIjLuGJjW pwdGDYGlu8ZL8wUNdSWEmrYreRIeVSo6Qw1i+GBXqiYj2iWj3lnLw7C2qR7f9nkf 3XRM6zqqb9z4whR4N4MaB7/k0saNB9NtTJ/nrDm1DwraICxg6N0hr9Om6H4Ioez1 7xfn2kWwafdILPdp3wRBUQuS3pTBXzHCbKFradhIhofaqabAkfdAPFj2kLOKYcdt ZAdTc6PWvEYUp3HQv6RGxHJjH3kGH6FWvzRb6RCX/CT5X64I+B432StNkT3fWnMg r/W1zcEEq3FXrIKLeH7eMdLi0c+u8PFbs/q99P6KUZ0= -----END CERTIFICATE-----Generated at Fri May 3 03:08:26 2024 by rpki-client on console-ams.rpki-client.org