$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer (raw, json) Hash identifier: LDH2A45AQoHLU7GyeDEVWTE2wQ8TGIQ/8CahL044O1c= Subject key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 252DE36332C263E7388278482858EDAAA0ACC857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft caRepository: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Apr 2024 17:47:57 +0000 Certificate not after: Fri 25 Apr 2025 17:52:57 +0000 Subordinate resources: IP: 103.166.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2d:e3:63:32:c2:63:e7:38:82:78:48:28:58:ed:aa:a0:ac:c8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 17:47:57 2024 GMT Not After : Apr 25 17:52:57 2025 GMT Subject: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:98:cd:15:96:de:e3:0c:9a:20:c8:61:88: 08:ef:22:10:3b:1c:5a:17:3f:ff:3f:59:92:be:e9: 24:d9:2d:d1:b0:0c:8a:69:b1:a5:18:5b:f4:5f:61: 77:ff:87:a1:bd:5f:5e:2f:aa:3c:6a:ee:1c:af:7e: 3f:56:dd:19:e8:ec:d5:92:43:02:ee:a9:6d:f0:d3: a4:7e:59:93:d9:e9:41:85:04:c5:60:b6:3c:81:8f: ff:b6:3c:0f:44:2b:bc:ef:94:de:87:0f:92:c0:bf: 1f:14:ba:0c:34:63:6a:93:58:d4:b9:d8:3a:e1:40: 62:ee:d0:4c:a5:96:bb:a1:56:b5:5d:bf:f7:d5:e4: 3c:21:3c:65:c4:6f:55:81:6b:c7:24:b2:90:24:48: 6d:61:57:3f:c5:49:2d:60:9f:71:2d:70:89:3d:fe: b4:d6:7a:aa:af:c1:27:06:bf:98:ed:d3:7c:91:fe: d4:43:09:cc:37:1b:60:7b:8d:b3:93:86:03:ea:fa: 68:2a:94:02:f5:ee:ed:6e:53:e6:b3:56:62:14:33: a0:9c:d7:d7:9b:d2:9f:d2:c0:e7:63:2f:3a:63:de: 9d:b3:14:75:57:77:69:a3:f5:1e:2a:c3:37:d2:3e: 56:83:83:79:85:04:f9:0b:37:48:d9:94:97:37:5a: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.66.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:55:f3:76:58:80:68:02:6b:7e:53:48:4d:49:25:6e:01:72: dd:d1:b6:01:82:57:a5:4f:72:3f:24:ea:51:4e:3b:5b:08:ed: 8b:0c:d6:81:e8:eb:66:d5:49:df:fb:32:c1:3d:8a:bf:d3:26: eb:d0:03:3c:bd:0e:ff:07:77:1e:42:5e:11:04:52:fb:e1:f0: 79:60:98:1f:59:91:09:e7:d3:99:60:78:e8:06:74:1f:96:17: 0b:46:a3:3c:a4:f5:6f:6f:73:aa:14:ef:63:d9:4d:7f:b6:ce: 92:3d:d8:54:80:62:73:7b:ae:eb:5d:c1:4f:01:2d:5c:d8:71: f7:c8:2e:d9:86:80:9b:38:c8:c9:53:53:57:35:b9:44:55:7a: a2:be:bb:a7:40:f0:5d:bb:f5:5f:65:02:cf:d3:26:53:53:c2: 81:da:bd:56:e2:b7:d2:f6:28:3d:cf:29:fa:1c:9c:30:1f:0a: 7a:ae:2f:27:2b:ba:c4:e6:ac:89:c6:e3:64:a7:9c:82:ae:7e: c9:a9:d0:95:dc:7f:39:b0:69:53:ca:00:f2:a2:46:9c:77:fc: 37:f3:44:5b:5d:bf:58:83:9f:9c:a9:95:12:50:6f:1c:dc:4c: 2f:52:5d:e0:fd:c3:5b:22:a6:0d:4b:7b:a4:d6:f5:9d:64:07: 76:77:eb:64 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJS3jYzLCY+c4gnhIKFjtqqCsyFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNjE3NDc1N1oX DTI1MDQyNTE3NTI1N1owMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1 OEU0REEzOUJEREQ5NzE0MjZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwnmM0Vlt7jDJogyGGICO8iEDscWhc//z9Zkr7pJNkt0bAMimmxpRhb9F9h d/+Hob1fXi+qPGruHK9+P1bdGejs1ZJDAu6pbfDTpH5Zk9npQYUExWC2PIGP/7Y8 D0QrvO+U3ocPksC/HxS6DDRjapNY1LnYOuFAYu7QTKWWu6FWtV2/99XkPCE8ZcRv VYFrxySykCRIbWFXP8VJLWCfcS1wiT3+tNZ6qq/BJwa/mO3TfJH+1EMJzDcbYHuN s5OGA+r6aCqUAvXu7W5T5rNWYhQzoJzX15vSn9LA52MvOmPenbMUdVd3aaP1HirD N9I+VoODeYUE+Qs3SNmUlzdaphECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAPvQUnF2wesNI5Y5No5vd2XFCb+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1N2U1YjBl LTU5NjQtNDYzZi04MDQxLTMzN2Y4MDU1NjQzYy8wLzAzRUY0MTQ5QzVEQjA3QUMz NDhFNThFNERBMzlCREREOTcxNDI2RkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpkIwDQYJKoZIhvcNAQELBQADggEBAGtV83ZYgGgCa35TSE1JJW4Bct3RtgGC V6VPcj8k6lFOO1sI7YsM1oHo62bVSd/7MsE9ir/TJuvQAzy9Dv8Hdx5CXhEEUvvh 8HlgmB9ZkQnn05lgeOgGdB+WFwtGozyk9W9vc6oU72PZTX+2zpI92FSAYnN7rutd wU8BLVzYcffILtmGgJs4yMlTU1c1uURVeqK+u6dA8F279V9lAs/TJlNTwoHavVbi t9L2KD3PKfocnDAfCnquLycrusTmrInG42SnnIKufsmp0JXcfzmwaVPKAPKiRpx3 /DfzRFtdv1iDn5yplRJQbxzcTC9SXeD9w1sipg1Le6TW9Z1kB3Z362Q= -----END CERTIFICATE-----Generated at Wed May 8 18:12:02 2024 by rpki-client on console-fra.rpki-client.org