$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer File: 027DBEC91021154263BB0CF1565833705023D987.cer (raw, json) Hash identifier: Nf9Zt5PaKFLtOLeKyibd6AyokHQ1A0xY/UJAHxbkwuc= Subject key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48A77529AC8D38AA888F50B22A1BF5F21B392E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft caRepository: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Mar 2024 23:17:45 +0000 Certificate not after: Mon 17 Mar 2025 23:22:45 +0000 Subordinate resources: IP: 202.160.139.0/24 IP: 2403:e380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a7:75:29:ac:8d:38:aa:88:8f:50:b2:2a:1b:f5:f2:1b:39:2e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 18 23:17:45 2024 GMT Not After : Mar 17 23:22:45 2025 GMT Subject: CN=027DBEC91021154263BB0CF1565833705023D987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:4d:f1:7c:03:34:83:4c:63:14:b4:1a:0c: fb:fc:d1:a4:49:72:df:88:8b:ac:66:60:0e:e2:e2: 57:20:0f:e2:87:97:db:e8:ff:95:89:c0:ba:45:29: 5f:33:f8:91:73:74:e2:55:41:77:8a:aa:66:59:de: 8e:dc:ee:f3:17:69:29:de:ad:7f:4e:1a:ea:b3:c9: 99:6e:3d:ca:6e:9b:22:6a:b3:7d:50:f1:f4:db:62: 13:bb:89:dc:1f:a6:a0:ee:c5:59:e0:47:48:6d:ad: 66:c3:b7:52:52:e1:dd:80:e2:8d:be:f4:05:22:4a: 45:95:a1:0f:85:ed:fc:ff:4f:21:7d:03:98:15:ae: 4f:43:80:84:a9:32:d0:13:5d:79:c7:23:72:d0:c0: ff:fd:75:0a:f8:c0:32:b8:e7:ad:ac:cd:0c:45:33: 80:63:b5:2c:b0:4f:1f:92:2b:70:34:57:1d:54:7a: 4a:21:34:14:6b:f6:f6:1e:8e:9f:ae:39:78:0b:8f: 7d:8d:0e:e7:6a:ee:30:79:f2:6c:73:99:c9:a5:1c: 75:d8:bf:75:b2:9e:42:72:0d:45:ad:4a:7e:6b:d8: 3c:15:20:00:07:b9:f5:d2:d6:c2:ad:cc:90:06:00: 2f:ef:cc:72:e0:1d:cb:a5:5a:de:48:35:54:2b:93: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.139.0/24 IPv6: 2403:e380::/32 Signature Algorithm: sha256WithRSAEncryption 1c:ed:27:54:75:fe:6b:b8:c2:97:b5:5b:9b:0b:82:c5:63:db: e0:0c:2e:37:9a:e2:b1:c9:01:9a:c5:ee:bb:be:e4:4e:57:70: b7:96:76:67:77:c1:f1:5b:de:75:d1:02:07:85:df:68:d5:3b: 95:84:58:0d:6d:99:62:29:48:6e:18:55:a4:73:8b:7b:3f:fb: 71:ac:43:aa:aa:e9:73:9f:26:22:33:6e:7a:50:25:2a:22:31: 4d:2d:22:e9:31:05:1d:87:29:05:43:d8:ee:c1:7a:29:0a:f3: d5:9d:e7:9a:9c:9f:29:da:9c:29:54:5f:34:42:27:e1:ea:85: eb:19:f2:11:2a:a9:bd:e4:03:f6:10:8b:f7:f6:86:2b:d4:c1: 7c:9e:70:ae:be:21:88:f0:7e:74:97:ff:4b:75:ff:81:f6:b1: 7f:27:0b:bc:3a:54:50:ce:c9:ba:e6:d1:8a:4a:e7:c0:f6:8e: 77:4c:b2:c5:5b:7e:35:ba:85:c2:95:e9:ec:48:8b:d7:ca:ea: e1:d3:17:e6:90:a0:9c:65:10:8a:dc:8d:69:59:6f:33:fa:d2: f3:6e:0f:34:ea:b0:43:8b:72:64:06:a2:95:9c:33:81:2d:1b: 60:31:af:74:7a:a8:85:4c:a3:e9:5b:8e:dc:7f:5c:ad:66:0b: fe:0f:e5:34 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSKd1KayNOKqIj1CyKhv18hs5LikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxODIzMTc0NVoX DTI1MDMxNzIzMjI0NVowMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIw Q0YxNTY1ODMzNzA1MDIzRDk4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqETfF8AzSDTGMUtBoM+/zRpEly34iLrGZgDuLiVyAP4oeX2+j/lYnAukUp XzP4kXN04lVBd4qqZlnejtzu8xdpKd6tf04a6rPJmW49ym6bImqzfVDx9NtiE7uJ 3B+moO7FWeBHSG2tZsO3UlLh3YDijb70BSJKRZWhD4Xt/P9PIX0DmBWuT0OAhKky 0BNdeccjctDA//11CvjAMrjnrazNDEUzgGO1LLBPH5IrcDRXHVR6SiE0FGv29h6O n645eAuPfY0O52ruMHnybHOZyaUcddi/dbKeQnINRa1KfmvYPBUgAAe59dLWwq3M kAYAL+/McuAdy6Va3kg1VCuTveMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAJ9vskQIRVCY7sM8VZYM3BQI9mHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRh LWJmNTUtNDA0OC04NDVkLTIwNjc1ZmI1ZjJhNC8wLzAyN0RCRUM5MTAyMTE1NDI2 M0JCMENGMTU2NTgzMzcwNTAyM0Q5ODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BADKoIswDQQCAAIwBwMFACQD44AwDQYJKoZIhvcNAQELBQADggEBABztJ1R1/mu4 wpe1W5sLgsVj2+AMLjea4rHJAZrF7ru+5E5XcLeWdmd3wfFb3nXRAgeF32jVO5WE WA1tmWIpSG4YVaRzi3s/+3GsQ6qq6XOfJiIzbnpQJSoiMU0tIukxBR2HKQVD2O7B eikK89Wd55qcnynanClUXzRCJ+HqhesZ8hEqqb3kA/YQi/f2hivUwXyecK6+IYjw fnSX/0t1/4H2sX8nC7w6VFDOybrm0YpK58D2jndMssVbfjW6hcKV6exIi9fK6uHT F+aQoJxlEIrcjWlZbzP60vNuDzTqsEOLcmQGopWcM4EtG2Axr3R6qIVMo+lbjtx/ XK1mC/4P5TQ= -----END CERTIFICATE-----Generated at Wed May 8 10:06:44 2024 by rpki-client on console-ams.rpki-client.org