$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer (raw, json) Hash identifier: ggEkacTQux0/3zyGScHGDQWAO2Yyjl7yjDZQB8vYLNY= Subject key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A80E7A5C70B2D28186DC6A6D6365AB0ABCB5D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft caRepository: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 May 2024 10:27:36 +0000 Certificate not after: Thu 08 May 2025 10:32:36 +0000 Subordinate resources: IP: 103.170.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:80:e7:a5:c7:0b:2d:28:18:6d:c6:a6:d6:36:5a:b0:ab:cb:5d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 9 10:27:36 2024 GMT Not After : May 8 10:32:36 2025 GMT Subject: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:2c:22:2b:de:95:9c:75:65:39:6a:ae:30: c1:f5:a8:2b:33:ed:96:6f:7e:5f:89:84:45:81:67: 30:1c:e1:db:ef:2f:9e:9c:fd:94:0d:03:d8:fd:99: d1:e9:29:63:b6:84:e1:48:19:5f:f4:ce:17:4a:87: 5c:e0:62:0a:c3:1b:3f:14:d3:22:89:31:d5:29:16: d3:3e:13:1c:f5:bd:6d:6f:3c:76:5e:0e:ca:75:7f: 92:51:3e:df:19:59:72:96:b2:a3:d2:88:83:7e:ad: e5:e0:f3:6d:c6:d2:f8:5f:a8:7c:64:bf:29:d3:0b: d8:97:76:ff:5d:04:87:5a:24:cb:49:62:eb:6f:b2: 3b:c3:cb:35:b5:27:d0:5b:ee:b8:db:2a:10:e2:a6: 54:05:dc:f2:8c:3b:aa:26:a0:40:ae:94:3e:1d:2d: cb:4a:1b:fc:01:96:0b:d5:01:11:31:55:52:1e:18: c2:ee:45:51:8f:cf:60:03:4c:30:f6:af:bb:aa:80: a4:b5:34:50:99:39:e6:45:ce:9e:ce:a5:20:17:f1: 72:4e:a7:c3:79:b5:60:7b:be:a4:a7:8c:24:21:10: eb:3b:54:24:c5:61:09:b6:80:04:43:b7:b7:c3:0f: dc:0a:1e:14:8b:ef:29:e5:d4:d2:e3:a0:ec:bc:ff: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.236.0/23 Signature Algorithm: sha256WithRSAEncryption 21:66:1e:66:9c:12:fe:05:94:be:6f:3f:f9:08:15:46:95:28: 71:81:37:48:e1:3d:eb:c8:fc:d9:82:b1:b7:17:99:bd:8e:a0: 53:82:63:d1:3a:8a:9a:35:da:43:86:7a:b3:62:20:86:52:1c: af:fa:3f:ca:df:18:a2:6f:17:c8:55:b2:5c:c0:71:a1:fc:d1: 94:ae:b7:26:4f:06:f7:9d:41:f3:1a:43:11:08:19:f8:27:93: bc:0c:fe:d7:d5:25:96:b6:52:57:61:06:1e:cf:70:7f:5c:cb: 28:1e:eb:1a:ea:9b:6b:ac:ec:1d:0f:31:7b:c3:16:b2:c4:19: 31:f3:b3:b0:13:ed:85:15:58:13:49:89:ef:cc:bb:c4:20:a2: c2:ee:25:b9:a9:6b:78:6d:91:d2:c6:f6:dd:c3:d5:7b:e5:7c: 2d:44:5b:26:0a:f0:6d:51:92:dd:16:e2:d9:2a:03:3a:d3:f7: d4:f2:33:80:77:7d:c3:b7:2c:0a:86:5f:80:9c:0d:5e:80:1c: a4:d6:22:38:9e:1e:dc:9b:49:b3:ea:89:21:1c:c9:ee:b8:73: 13:89:36:37:70:5d:0a:02:34:d3:7a:80:b4:9c:fc:58:73:89: e0:2a:90:4c:c7:2e:fd:4e:ca:86:83:3d:f5:d7:c8:2b:49:6a: 1f:2a:0e:56 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOoDnpccLLSgYbcam1jZasKvLXWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwOTEwMjczNloX DTI1MDUwODEwMzIzNlowMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThF NThEMkVDMTJFNkUwNjU4OEEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBhLCIr3pWcdWU5aq4wwfWoKzPtlm9+X4mERYFnMBzh2+8vnpz9lA0D2P2Z 0ekpY7aE4UgZX/TOF0qHXOBiCsMbPxTTIokx1SkW0z4THPW9bW88dl4OynV/klE+ 3xlZcpayo9KIg36t5eDzbcbS+F+ofGS/KdML2Jd2/10Eh1oky0li62+yO8PLNbUn 0FvuuNsqEOKmVAXc8ow7qiagQK6UPh0ty0ob/AGWC9UBETFVUh4Ywu5FUY/PYANM MPavu6qApLU0UJk55kXOns6lIBfxck6nw3m1YHu+pKeMJCEQ6ztUJMVhCbaABEO3 t8MP3AoeFIvvKeXU0uOg7Lz/zDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8Cqbh8xfgaIujljS7BLm4GWIoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZmE0MjY1 LWJiNTgtNDZlMi04MzA5LTNhZDM5ODFhMzUxNi8wLzlGMDJBOUI4N0NDNUY4MUEy MkU4RTU4RDJFQzEyRTZFMDY1ODhBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnquwwDQYJKoZIhvcNAQELBQADggEBACFmHmacEv4FlL5vP/kIFUaVKHGBN0jh PevI/NmCsbcXmb2OoFOCY9E6ipo12kOGerNiIIZSHK/6P8rfGKJvF8hVslzAcaH8 0ZSutyZPBvedQfMaQxEIGfgnk7wM/tfVJZa2UldhBh7PcH9cyyge6xrqm2us7B0P MXvDFrLEGTHzs7AT7YUVWBNJie/Mu8QgosLuJbmpa3htkdLG9t3D1XvlfC1EWyYK 8G1Rkt0W4tkqAzrT99TyM4B3fcO3LAqGX4CcDV6AHKTWIjieHtybSbPqiSEcye64 cxOJNjdwXQoCNNN6gLSc/FhzieAqkEzHLv1OyoaDPfXXyCtJah8qDlY= -----END CERTIFICATE-----Generated at Fri May 10 08:46:45 2024 by rpki-client on console-fra.rpki-client.org