$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer (raw, json) Hash identifier: nNR5qvzeaHD9JEvx2sVGwwjfjUFU2pA9FUVb/hWLqjA= Subject key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 373E83946254CB5B687A3F11965C855A7E38B68E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft caRepository: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Oct 2023 01:44:41 +0000 Certificate not after: Mon 14 Oct 2024 01:49:41 +0000 Subordinate resources: IP: 103.239.41.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3e:83:94:62:54:cb:5b:68:7a:3f:11:96:5c:85:5a:7e:38:b6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 16 01:44:41 2023 GMT Not After : Oct 14 01:49:41 2024 GMT Subject: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:d9:19:ac:a5:63:63:1f:93:5f:63:8f:fb: 66:18:2f:78:ce:77:9c:43:08:30:84:00:fc:fb:f7: d3:2d:d2:80:b3:c1:cb:1f:ef:1c:d9:b3:80:dd:09: 67:b5:52:cc:96:ea:b3:38:b7:7f:ac:e9:25:66:4d: 8a:4d:ed:db:76:14:be:28:90:57:09:36:c7:d9:e8: 69:0f:ca:d2:cf:09:20:92:68:d3:63:68:5c:3b:59: 6e:eb:c8:a7:a2:44:aa:3e:7d:c3:a8:2c:d4:83:4c: b4:72:ac:0f:b7:9f:83:6a:5d:32:12:06:1c:43:07: 59:f6:35:34:4a:13:28:4e:b1:d2:12:1a:16:6f:44: 38:6f:2c:51:ea:a1:d3:59:64:6f:7c:47:cb:b8:98: 37:68:06:b2:4c:89:a3:6a:96:bf:56:80:94:0c:b1: 00:6a:82:ee:e2:e7:79:fe:b7:69:1b:fc:e4:c4:0c: 74:67:4d:a4:ad:a6:fc:4b:84:f2:5e:51:a0:45:9e: 2c:46:bc:df:11:95:13:b4:9b:2e:a1:74:c8:d1:a5: a5:f3:bf:e9:c4:7c:30:e2:37:10:48:ef:ca:00:0a: da:87:89:42:0a:93:a6:c3:26:42:8e:5d:32:2c:05: 10:35:b4:7a:61:3d:c6:84:d3:b2:9d:3b:b2:7c:5f: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.41.0/24 Signature Algorithm: sha256WithRSAEncryption 26:1c:95:4a:25:86:ee:59:d0:98:91:b3:9f:22:8a:be:b2:59: 1d:99:89:28:55:ce:09:36:75:09:5f:ad:6d:9c:30:98:75:3f: 03:14:4e:68:6c:4c:bb:e1:59:3a:08:54:75:98:f7:86:6e:25: 13:32:0a:19:3d:2f:d8:e8:10:a1:43:dc:c3:61:96:ab:e4:8b: 16:5b:92:0f:4d:53:3b:19:00:d7:5d:9c:8e:c8:20:4f:af:6d: e9:7d:b4:f0:29:3b:18:ae:a6:a9:04:b3:86:13:14:5c:98:60: 3e:dd:3f:16:d9:08:c1:c8:a1:01:e8:bf:96:f4:3b:1b:29:1d: b5:59:06:a0:03:a2:06:65:49:4a:1e:cb:e5:88:b8:9f:de:2b: 0f:0c:c2:90:b4:bd:19:65:61:b7:f9:fc:fe:f3:4e:58:cc:0b: 23:aa:75:8d:0d:09:bd:fd:55:db:6e:82:5d:80:e1:d4:04:c1: 75:8b:97:0e:a6:70:26:e3:48:9d:27:02:6f:9d:15:db:72:2c: 75:d3:2e:80:c0:78:05:76:8b:29:36:ba:a9:fa:30:c3:e7:8f: 55:f4:65:84:4b:02:a9:05:82:1e:91:c8:f0:6a:98:12:de:4c: d7:47:ef:23:9a:94:34:b4:83:68:5a:d9:6d:fd:c7:42:bb:42: cf:f0:c0:f2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNz6DlGJUy1toej8RllyFWn44to4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNjAxNDQ0MVoX DTI0MTAxNDAxNDk0MVowMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5 MzY5RURERDg3MERBRTgwRDY2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNj2RmspWNjH5NfY4/7ZhgveM53nEMIMIQA/Pv30y3SgLPByx/vHNmzgN0J Z7VSzJbqszi3f6zpJWZNik3t23YUviiQVwk2x9noaQ/K0s8JIJJo02NoXDtZbuvI p6JEqj59w6gs1INMtHKsD7efg2pdMhIGHEMHWfY1NEoTKE6x0hIaFm9EOG8sUeqh 01lkb3xHy7iYN2gGskyJo2qWv1aAlAyxAGqC7uLnef63aRv85MQMdGdNpK2m/EuE 8l5RoEWeLEa83xGVE7SbLqF0yNGlpfO/6cR8MOI3EEjvygAK2oeJQgqTpsMmQo5d MiwFEDW0emE9xoTTsp07snxfxc0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAN6Hkf7HM47bmqTae3dhw2ugNZlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0YmZjNWMz LWMzOWMtNDVlZC1hZTg3LTM4NGE2ZGNiNzkzOC8wLzAzN0ExRTQ3RkIxQ0NFM0I2 RTZBOTM2OUVEREQ4NzBEQUU4MEQ2NjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn7ykwDQYJKoZIhvcNAQELBQADggEBACYclUolhu5Z0JiRs58iir6yWR2ZiShV zgk2dQlfrW2cMJh1PwMUTmhsTLvhWToIVHWY94ZuJRMyChk9L9joEKFD3MNhlqvk ixZbkg9NUzsZANddnI7IIE+vbel9tPApOxiupqkEs4YTFFyYYD7dPxbZCMHIoQHo v5b0OxspHbVZBqADogZlSUoey+WIuJ/eKw8MwpC0vRllYbf5/P7zTljMCyOqdY0N Cb39Vdtugl2A4dQEwXWLlw6mcCbjSJ0nAm+dFdtyLHXTLoDAeAV2iyk2uqn6MMPn j1X0ZYRLAqkFgh6RyPBqmBLeTNdH7yOalDS0g2ha2W39x0K7Qs/wwPI= -----END CERTIFICATE-----Generated at Wed May 8 04:37:45 2024 by rpki-client on console-fra.rpki-client.org