$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer (raw, json) Hash identifier: mfErB2An3CROxQPOBlDIyzz2Grp2C0/7wGtxA+0S0VY= Subject key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EAF7D2CBC6DA4DA3F041E3536DE7988126B3B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Feb 2024 01:02:23 +0000 Certificate not after: Mon 17 Feb 2025 01:07:23 +0000 Subordinate resources: IP: 103.162.220.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:7d:2c:bc:6d:a4:da:3f:04:1e:35:36:de:79:88:12:6b:3b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 19 01:02:23 2024 GMT Not After : Feb 17 01:07:23 2025 GMT Subject: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:0d:44:25:77:ac:74:04:eb:87:b7:ef:af: a4:c1:b5:fe:6c:51:4b:91:81:cd:b9:ad:6d:dd:f2: 88:1e:e7:76:01:c9:e4:e6:55:a3:10:8c:29:b0:f5: 6e:6b:7b:a1:23:0b:5a:c4:48:b6:18:41:e1:25:e1: 41:b0:f8:5d:6c:a4:8a:89:dc:47:7e:4a:4f:f4:b1: 5d:cf:5e:36:98:c2:d5:6a:1a:21:8d:1f:9d:0a:ff: 48:02:bb:67:12:c5:ce:5a:bd:ae:55:9d:f7:87:78: d8:f5:aa:62:22:ca:67:6a:a2:e7:b4:e3:9f:45:57: c0:81:22:90:fa:b8:ee:09:ae:f0:e2:63:ae:67:ed: e3:31:17:6e:50:b2:8b:6d:c2:56:dc:91:13:e6:db: a1:9c:b9:ac:93:34:60:4b:48:2f:5f:4e:93:cf:12: e3:e1:93:b9:a2:a2:fd:52:97:56:7c:b3:cf:cf:cc: 1b:f4:b0:e2:ba:16:9b:db:76:2e:cb:26:b6:fc:8e: 18:34:ae:7f:54:2a:07:73:3b:99:a4:ae:03:1d:3f: b2:0b:fe:fe:e4:04:b7:0f:a5:a2:46:71:27:ff:8b: ee:cc:a6:41:af:56:6a:50:86:36:94:29:b2:82:c7: 49:98:fb:56:5c:89:53:12:50:33:fe:b3:43:e9:08: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.220.0/23 Signature Algorithm: sha256WithRSAEncryption 99:ca:be:b7:c9:ae:77:3f:63:0f:c1:4f:7d:1b:2f:16:1e:91: c7:ab:50:15:c3:32:26:90:b3:60:8c:72:4a:e4:c7:5b:35:7e: cf:4f:cc:7b:9f:04:12:a0:eb:4b:87:f6:1f:82:55:b1:6c:ae: cd:60:dc:d9:ab:f3:4d:e7:13:0c:11:21:ef:18:cd:eb:67:5b: ee:d8:57:06:8c:7f:57:64:8e:8f:10:e6:8c:27:1e:e1:81:18: 7c:cd:bc:e6:0b:3e:f8:da:df:eb:61:23:30:9f:fe:20:fd:b6: 5a:de:49:85:64:c2:9e:53:09:d9:aa:59:a3:b2:d0:61:31:88: 76:c5:94:f4:e4:d0:2c:ca:f0:cd:d7:29:08:28:ba:10:45:ef: 5e:ba:af:16:08:74:be:39:73:3f:77:e2:be:7b:7f:1e:d8:6a: 17:44:ec:c1:43:d8:ef:aa:d9:0d:ae:d6:5a:82:99:44:9c:fb: cd:e4:65:67:c8:3d:ef:f7:c6:7a:62:d5:21:f1:af:5a:4d:0c: ec:47:20:27:ba:22:3c:e0:40:d5:a9:46:ea:cc:65:03:52:fb: 79:d7:5e:6a:d6:0f:bb:bf:5e:9e:34:77:41:71:81:5a:5a:6c: 52:bd:a5:85:11:c4:9e:68:68:5b:23:1e:6c:94:a0:97:a9:76: b8:71:4d:26 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHq99LLxtpNo/BB41Nt55iBJrOykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxOTAxMDIyM1oX DTI1MDIxNzAxMDcyM1owMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlB QTcwNjM2RUM3OUQxNzhBQ0UxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPHDUQld6x0BOuHt++vpMG1/mxRS5GBzbmtbd3yiB7ndgHJ5OZVoxCMKbD1 bmt7oSMLWsRIthhB4SXhQbD4XWykioncR35KT/SxXc9eNpjC1WoaIY0fnQr/SAK7 ZxLFzlq9rlWd94d42PWqYiLKZ2qi57Tjn0VXwIEikPq47gmu8OJjrmft4zEXblCy i23CVtyRE+bboZy5rJM0YEtIL19Ok88S4+GTuaKi/VKXVnyzz8/MG/Sw4roWm9t2 LssmtvyOGDSuf1QqB3M7maSuAx0/sgv+/uQEtw+lokZxJ/+L7symQa9WalCGNpQp soLHSZj7VlyJUxJQM/6zQ+kIlY8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAML5VcobTpP5umqcGNux50Xis4fMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1OGM4Zjlm LTQyMTMtNGEyYS04NWMzLWIyNGIwZDBiNTEwNy8wLzAzMEJFNTU3Mjg2RDNBNEZF NkU5QUE3MDYzNkVDNzlEMTc4QUNFMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnotwwDQYJKoZIhvcNAQELBQADggEBAJnKvrfJrnc/Yw/BT30bLxYekcerUBXD MiaQs2CMckrkx1s1fs9PzHufBBKg60uH9h+CVbFsrs1g3Nmr803nEwwRIe8Yzetn W+7YVwaMf1dkjo8Q5ownHuGBGHzNvOYLPvja3+thIzCf/iD9tlreSYVkwp5TCdmq WaOy0GExiHbFlPTk0CzK8M3XKQgouhBF7166rxYIdL45cz934r57fx7YahdE7MFD 2O+q2Q2u1lqCmUSc+83kZWfIPe/3xnpi1SHxr1pNDOxHICe6IjzgQNWpRurMZQNS +3nXXmrWD7u/Xp40d0FxgVpabFK9pYURxJ5oaFsjHmyUoJepdrhxTSY= -----END CERTIFICATE-----Generated at Wed May 8 21:02:08 2024 by rpki-client on console-fra.rpki-client.org