$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer File: 47C87696529FAF404AF0E8681AAFA8F224187D59.cer (raw, json) Hash identifier: YnbgmZC5gIeoJfFSy9ve3sUsh3o08Ayks/K3gIPkF4o= Subject key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CE3C50532E3E013ACDDCA085B8DD001C76B5DD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 Sep 2023 11:25:16 +0000 Certificate not after: Sun 01 Sep 2024 11:30:16 +0000 Subordinate resources: IP: 103.136.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e3:c5:05:32:e3:e0:13:ac:dd:ca:08:5b:8d:d0:01:c7:6b:5d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 11:25:16 2023 GMT Not After : Sep 1 11:30:16 2024 GMT Subject: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:54:9b:31:94:94:e2:8f:a9:d4:de:e6:2c: 1e:28:c4:b3:2b:4a:89:d6:f5:98:52:4f:24:fb:b1: a7:9a:6a:ad:5c:66:86:b7:de:7f:d6:b4:f3:a0:85: e8:5d:ac:c4:48:5b:a8:8c:f9:b5:62:b8:3b:b8:06: 85:25:da:4a:1b:f5:52:b0:74:ce:7a:e9:5c:37:5c: 82:14:d4:e8:e4:82:33:c5:f5:10:3e:a6:75:fc:24: 1b:15:a0:8c:b7:86:09:9c:0b:d4:9a:64:62:e8:2f: 60:79:f6:f7:39:f9:7b:3d:5c:9f:81:d3:d4:bf:5c: 3d:3a:12:eb:8b:38:6a:34:e4:4a:9e:bf:b4:9b:f7: ec:c7:34:2a:bb:3c:90:de:54:ab:45:2d:18:42:ff: 99:98:f6:40:63:03:a9:fd:42:7d:81:f7:99:3f:18: cd:a3:e1:5b:ba:3e:26:96:9b:ac:51:e4:42:91:c1: 7a:9b:4c:ad:a3:93:6d:db:4a:5a:13:80:e9:e3:ab: 84:82:eb:96:0e:a2:27:09:2f:e8:26:41:57:24:9c: 81:6f:4f:f6:52:c3:66:e7:02:86:ba:db:9f:cd:07: bb:8d:e6:76:83:31:f3:e7:bd:b1:41:e1:79:e6:aa: 48:6a:99:2d:a1:0f:63:71:ae:f3:3a:3b:1a:0a:27: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.170.0/23 Signature Algorithm: sha256WithRSAEncryption 45:c2:2b:77:98:42:a6:77:34:a9:c6:37:7f:40:59:97:6b:ff: 2d:4c:d8:9f:65:2b:5b:6c:09:b6:06:66:6c:22:e8:fb:a9:d7: b1:62:6c:df:35:e7:63:12:37:7b:aa:39:65:4b:9f:1a:bc:f5: fb:bd:de:43:80:8e:c2:bb:bb:00:85:e8:33:97:6f:8a:f2:25: 07:2a:08:4b:bf:07:4a:b3:1b:60:d5:2c:9f:e1:31:32:16:01: 67:59:62:da:35:91:e7:48:b4:1b:57:25:fd:40:a7:f6:d4:45: 5b:64:83:8c:3a:12:d5:70:0f:d9:ef:41:35:a6:41:5f:36:58: 97:62:22:0a:90:c4:a4:6e:72:f5:a5:18:54:08:30:ea:bc:82: 31:ec:cc:58:e5:37:44:52:f4:53:7d:49:ea:97:3b:9a:8a:f5: f7:af:41:00:07:3d:a0:8c:f4:83:21:01:2e:09:b8:08:39:4b: fc:44:82:f3:27:ac:4d:b5:8b:2d:dd:f0:3a:95:1a:0d:f0:fa: 19:17:4f:66:9b:ef:1a:b5:4a:07:a1:04:00:54:d2:44:cc:a5: 2a:57:0d:2e:c7:81:ec:b0:50:a4:5e:f6:ca:b3:f9:c4:3d:27: 11:1b:c8:3f:11:77:ef:26:08:4a:31:41:59:15:63:c3:f5:ee: 88:4f:14:1c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULOPFBTLj4BOs3coIW43QAcdrXdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwMzExMjUxNloX DTI0MDkwMTExMzAxNlowMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBF ODY4MUFBRkE4RjIyNDE4N0Q1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALklVJsxlJTij6nU3uYsHijEsytKidb1mFJPJPuxp5pqrVxmhrfef9a086CF 6F2sxEhbqIz5tWK4O7gGhSXaShv1UrB0znrpXDdcghTU6OSCM8X1ED6mdfwkGxWg jLeGCZwL1JpkYugvYHn29zn5ez1cn4HT1L9cPToS64s4ajTkSp6/tJv37Mc0Krs8 kN5Uq0UtGEL/mZj2QGMDqf1CfYH3mT8YzaPhW7o+JpabrFHkQpHBeptMraOTbdtK WhOA6eOrhILrlg6iJwkv6CZBVyScgW9P9lLDZucChrrbn80Hu43mdoMx8+e9sUHh eeaqSGqZLaEPY3Gu8zo7GgonyLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEfIdpZSn69ASvDoaBqvqPIkGH1ZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNjFmMDRk LTE4ZTctNDJmZi1hZTgyLWQ1NjU1NGY5MjY0Yy8wLzQ3Qzg3Njk2NTI5RkFGNDA0 QUYwRTg2ODFBQUZBOEYyMjQxODdENTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFniKowDQYJKoZIhvcNAQELBQADggEBAEXCK3eYQqZ3NKnGN39AWZdr/y1M2J9l K1tsCbYGZmwi6Pup17FibN8152MSN3uqOWVLnxq89fu93kOAjsK7uwCF6DOXb4ry JQcqCEu/B0qzG2DVLJ/hMTIWAWdZYto1kedItBtXJf1Ap/bURVtkg4w6EtVwD9nv QTWmQV82WJdiIgqQxKRucvWlGFQIMOq8gjHszFjlN0RS9FN9SeqXO5qK9fevQQAH PaCM9IMhAS4JuAg5S/xEgvMnrE21iy3d8DqVGg3w+hkXT2ab7xq1SgehBABU0kTM pSpXDS7HgeywUKRe9sqz+cQ9JxEbyD8Rd+8mCEoxQVkVY8P17ohPFBw= -----END CERTIFICATE-----Generated at Thu May 2 22:27:19 2024 by rpki-client on console-ams.rpki-client.org