$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer (raw, json) Hash identifier: JcATsHL3ugVEpfGfWC8sqS7LVXlkcy3t2ACO0QUjR9U= Subject key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 312E2BA16B647E9D43BD87A6F6836E8A6A10FB90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft caRepository: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:53:36 +0000 Certificate not after: Mon 29 Jul 2024 09:58:36 +0000 Subordinate resources: IP: 103.107.248.0/22 IP: 117.74.120.0/21 IP: 2402:600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2e:2b:a1:6b:64:7e:9d:43:bd:87:a6:f6:83:6e:8a:6a:10:fb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:53:36 2023 GMT Not After : Jul 29 09:58:36 2024 GMT Subject: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:06:55:c9:06:54:1a:38:76:34:49:ae:e4: 58:bc:3f:87:4f:59:37:ce:7f:fe:52:29:df:c2:d8: b3:70:65:92:14:4c:07:7a:54:0a:df:93:4c:ff:49: 45:6d:af:55:55:e5:f9:09:df:30:4c:a2:c6:1c:bf: c4:d1:d7:71:21:ed:dc:bd:8b:71:a4:75:ce:6d:87: e4:66:23:9e:86:70:26:cb:63:13:a8:8f:aa:6f:3f: 56:b6:63:6c:81:85:4c:6e:89:65:87:02:f8:0e:0c: 93:3c:c0:c0:2f:3f:05:7e:57:5b:6e:51:5e:cd:15: 88:61:c0:bb:20:22:e8:6f:2c:7d:20:f9:73:bc:54: 06:71:85:fb:d9:34:aa:f3:72:c7:88:1a:11:51:94: 59:71:95:a8:65:64:d5:54:c1:14:37:00:15:0e:c6: 8d:0c:c2:20:e3:72:95:ce:2e:2f:5a:69:05:90:46: da:f6:3b:9f:83:f0:6d:6f:24:b2:50:4d:b2:04:67: 7b:d3:50:b5:c3:73:3e:a2:ba:48:03:05:c2:1d:09: 22:77:86:14:a4:fb:e6:4d:b8:ad:60:cf:91:bd:31: 58:0d:37:4f:29:51:57:a8:0b:fb:2a:4d:18:d9:31: 2c:35:e5:36:35:c0:63:53:d5:85:4a:e2:ed:71:b8: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.248.0/22 117.74.120.0/21 IPv6: 2402:600::/32 Signature Algorithm: sha256WithRSAEncryption 87:04:d8:3e:26:bf:3d:f9:19:8f:95:07:94:a7:21:c4:9c:99: 5a:19:4c:65:9c:63:a5:f0:94:fc:67:c1:48:9b:5f:93:a3:3c: 62:8d:7b:b9:dc:95:cf:bc:7d:da:02:9a:22:b6:1c:34:ed:bf: ec:48:a0:67:6a:33:da:d6:f8:96:dd:b7:29:0e:36:db:0f:d0: 39:39:89:76:77:1e:ec:b9:1b:6a:e5:99:bc:ea:b9:41:4f:42: 5d:db:07:14:c9:a2:e4:02:52:e5:18:a5:90:11:63:5e:85:36: bc:e8:66:0e:16:7f:c4:23:53:63:4b:26:13:6f:a9:16:b1:fa: fc:6d:44:43:2f:55:7b:61:6e:a3:dd:2b:76:fd:e4:1f:d3:0c: 33:92:4a:8f:59:9a:48:01:6a:09:75:78:ec:26:4f:75:e7:55: 35:e4:db:f5:b7:4d:65:a0:2a:07:ae:99:23:99:d8:e6:b7:1f: a7:d9:f4:0a:2f:7f:19:31:ba:a6:3d:de:40:b9:c6:38:f3:01: d0:ef:4c:d1:eb:f2:c6:dc:dd:6d:42:3f:8f:b3:81:33:ea:f2: 32:83:11:be:4c:0e:1d:4c:b9:4e:cb:8a:6a:e9:32:37:be:26: 63:6b:b4:44:de:64:11:01:27:72:6b:ea:41:2a:23:7b:f3:2e: 98:51:ae:88 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUMS4roWtkfp1DvYem9oNuimoQ+5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5NTMzNloX DTI0MDcyOTA5NTgzNlowMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFC RjNCREYyMEQ4MkEyRERGRDhGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdrBlXJBlQaOHY0Sa7kWLw/h09ZN85//lIp38LYs3BlkhRMB3pUCt+TTP9J RW2vVVXl+QnfMEyixhy/xNHXcSHt3L2LcaR1zm2H5GYjnoZwJstjE6iPqm8/VrZj bIGFTG6JZYcC+A4MkzzAwC8/BX5XW25RXs0ViGHAuyAi6G8sfSD5c7xUBnGF+9k0 qvNyx4gaEVGUWXGVqGVk1VTBFDcAFQ7GjQzCIONylc4uL1ppBZBG2vY7n4PwbW8k slBNsgRne9NQtcNzPqK6SAMFwh0JIneGFKT75k24rWDPkb0xWA03TylRV6gL+ypN GNkxLDXlNjXAY1PVhUri7XG4zCsCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNdstRIj64sEeG/O98g2Cot39jzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5 LTM1MzctNGJjNy04NjEzLThlOTgxNjI5ZTRjYS8wLzkzNURCMkQ0NDg4RkFFMkMx MUUxQkYzQkRGMjBEODJBMkRERkQ4RjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJna/gDBAN1SngwDQQCAAIwBwMFACQCBgAwDQYJKoZIhvcNAQELBQADggEBAIcE 2D4mvz35GY+VB5SnIcScmVoZTGWcY6XwlPxnwUibX5OjPGKNe7nclc+8fdoCmiK2 HDTtv+xIoGdqM9rW+JbdtykONtsP0Dk5iXZ3Huy5G2rlmbzquUFPQl3bBxTJouQC UuUYpZARY16FNrzoZg4Wf8QjU2NLJhNvqRax+vxtREMvVXthbqPdK3b95B/TDDOS So9ZmkgBagl1eOwmT3XnVTXk2/W3TWWgKgeumSOZ2Oa3H6fZ9AovfxkxuqY93kC5 xjjzAdDvTNHr8sbc3W1CP4+zgTPq8jKDEb5MDh1MuU7LimrpMje+JmNrtETeZBEB J3Jr6kEqI3vzLphRrog= -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:18 2024 by rpki-client on console-ams.rpki-client.org