$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer File: 639473CD2054A78B39F9AC7A83232462F00E71AA.cer (raw, json) Hash identifier: l+YR2cFCXXTZCqPyKkRW1g1yPzeb3vEqUdmvMN7l4GE= Subject key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62F760F8C36FFA7A372C90B15DA7D5FA188FF309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 22:49:22 +0000 Certificate not after: Sun 28 Jul 2024 22:54:22 +0000 Subordinate resources: IP: 103.228.244.0/22 IP: 116.206.212.0/22 IP: 2400:d680::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f7:60:f8:c3:6f:fa:7a:37:2c:90:b1:5d:a7:d5:fa:18:8f:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 22:49:22 2023 GMT Not After : Jul 28 22:54:22 2024 GMT Subject: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:55:17:db:cf:91:22:8f:1f:a3:de:84:4c: ba:7d:7b:73:2f:15:8e:aa:dd:e1:b8:8b:c7:49:3b: ec:33:1f:bb:69:c0:96:23:d1:e5:a9:da:f0:20:8d: af:83:9a:2c:da:8f:e3:1e:10:56:6e:8d:f9:50:fa: 92:68:b8:c5:d6:2d:eb:31:66:95:dd:4f:db:8a:e9: b7:e3:a6:61:ab:c7:19:fb:a7:12:2a:42:a7:e1:54: 5e:08:9c:13:5d:cd:30:77:fe:df:66:d9:8c:b1:03: 87:84:7d:d5:a3:bf:39:69:50:43:8d:4e:ac:3f:72: a3:92:21:97:4c:e9:91:ed:14:fe:77:40:9a:b5:3c: e2:dd:56:f6:c8:0f:b8:49:e8:22:46:cc:32:34:b0: 85:d6:69:00:9d:56:f0:a2:09:a5:27:e8:37:15:f1: 68:db:7f:5c:35:66:5b:2b:5a:48:5b:78:42:20:8a: 2a:3a:a5:fc:6d:ec:e7:4c:b0:93:e0:02:19:bd:b0: 0f:f6:f4:7d:07:56:d9:ea:f5:33:6f:78:64:11:73: 7a:b8:cb:19:db:39:d0:33:e2:3c:d1:6f:52:a9:fd: 4a:11:58:55:df:99:26:44:d3:3a:8b:30:c2:de:50: ec:13:74:77:e3:aa:5a:c4:bc:18:5b:8f:43:8e:1a: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.244.0/22 116.206.212.0/22 IPv6: 2400:d680::/32 Signature Algorithm: sha256WithRSAEncryption 35:0c:88:2e:b4:a0:76:c4:7e:5b:3f:4c:31:4d:83:6b:3f:10: 47:58:56:e7:e3:0a:b2:b5:c5:c5:34:1a:cb:a3:fd:96:31:e4: 57:1d:5b:b0:7d:07:64:eb:5b:9e:35:a0:a4:b7:f5:06:ea:bd: 9f:28:3c:a1:ae:85:ec:ec:4f:32:85:5e:aa:df:42:9d:de:ce: 86:bd:9e:9a:06:d0:cc:64:27:7e:3d:79:6e:e6:db:2e:03:5f: fe:c5:c4:ac:63:bc:35:44:33:01:6f:3d:51:4a:1b:6c:31:fd: b1:8f:e6:33:56:50:1e:69:39:a9:c4:54:80:a7:44:51:22:d9: e1:39:59:9e:9b:bb:ca:d5:5d:96:70:25:3a:46:d8:58:d2:6c: 04:6f:cd:bb:ce:fc:0c:7e:85:c6:bf:9d:25:ef:0d:7f:a1:9f: f9:e5:7d:11:37:83:5d:a2:f9:f7:79:02:3e:0e:53:16:48:b1: e3:bf:5c:c3:cd:0f:4b:ce:32:8e:84:b9:ed:b8:99:14:f2:75: 67:71:97:47:23:f7:49:a9:73:9c:1c:e6:2c:fd:8d:87:4c:32: c9:98:4e:f8:5f:06:61:e3:3c:05:15:ea:c4:ec:b1:88:0a:7d: b4:a6:2b:ec:4c:64:6d:36:d0:55:30:b4:d1:81:9c:f1:81:15: cc:c1:64:83 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUYvdg+MNv+no3LJCxXafV+hiP8wkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIyNDkyMloX DTI0MDcyODIyNTQyMlowMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlB QzdBODMyMzI0NjJGMDBFNzFBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANesVRfbz5Eijx+j3oRMun17cy8Vjqrd4biLx0k77DMfu2nAliPR5ana8CCN r4OaLNqP4x4QVm6N+VD6kmi4xdYt6zFmld1P24rpt+OmYavHGfunEipCp+FUXgic E13NMHf+32bZjLEDh4R91aO/OWlQQ41OrD9yo5Ihl0zpke0U/ndAmrU84t1W9sgP uEnoIkbMMjSwhdZpAJ1W8KIJpSfoNxXxaNt/XDVmWytaSFt4QiCKKjql/G3s50yw k+ACGb2wD/b0fQdW2er1M294ZBFzerjLGds50DPiPNFvUqn9ShFYVd+ZJkTTOosw wt5Q7BN0d+OqWsS8GFuPQ44aSosCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGOUc80gVKeLOfmseoMjJGLwDnGqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTVi LTJmY2UtNDdkYS04MDQ3LTY4ZDJiZDYzYzljMy8wLzYzOTQ3M0NEMjA1NEE3OEIz OUY5QUM3QTgzMjMyNDYyRjAwRTcxQUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJn5PQDBAJ0ztQwDQQCAAIwBwMFACQA1oAwDQYJKoZIhvcNAQELBQADggEBADUM iC60oHbEfls/TDFNg2s/EEdYVufjCrK1xcU0Gsuj/ZYx5FcdW7B9B2TrW541oKS3 9QbqvZ8oPKGuhezsTzKFXqrfQp3ezoa9npoG0MxkJ349eW7m2y4DX/7FxKxjvDVE MwFvPVFKG2wx/bGP5jNWUB5pOanEVICnRFEi2eE5WZ6bu8rVXZZwJTpG2FjSbARv zbvO/Ax+hca/nSXvDX+hn/nlfRE3g12i+fd5Aj4OUxZIseO/XMPND0vOMo6Eue24 mRTydWdxl0cj90mpc5wc5iz9jYdMMsmYTvhfBmHjPAUV6sTssYgKfbSmK+xMZG02 0FUwtNGBnPGBFczBZIM= -----END CERTIFICATE-----Generated at Fri Apr 26 00:39:36 2024 by rpki-client on console-fra.rpki-client.org