$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer (raw, json) Hash identifier: 3zjfIn/hfMD47rVDXvARtRwkWAnqhQvxsSro6Sy1fcM= Subject key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56C4A01B6028F39392DBA951F99FADE4A666FAA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:25:47 +0000 Certificate not after: Mon 29 Jul 2024 03:30:47 +0000 Subordinate resources: IP: 103.130.182.0/23 IP: 2001:df6:e700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c4:a0:1b:60:28:f3:93:92:db:a9:51:f9:9f:ad:e4:a6:66:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:25:47 2023 GMT Not After : Jul 29 03:30:47 2024 GMT Subject: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:52:b4:d5:c8:84:24:05:97:23:68:3b:b7: 47:3e:f7:28:ff:ea:3d:cb:a2:93:7b:78:b9:96:0f: 7c:e5:3c:5d:ca:8d:6f:c0:95:13:b5:8c:22:b9:fd: 42:b4:9e:06:51:17:b3:d2:22:9b:5f:0d:78:2f:fc: d6:6e:d8:d7:0d:4c:7a:22:89:f0:30:80:c7:26:3a: 27:40:58:2d:c0:0d:af:d5:10:77:d8:38:73:a8:52: dd:78:86:38:bb:73:1c:70:ae:20:ba:48:d1:64:cf: 46:0e:c2:95:c9:c7:11:f9:f6:8b:e4:b1:36:8c:4e: f1:b9:ec:90:7b:77:fd:8c:6c:c3:df:a4:6e:39:9e: 15:fa:c0:1f:75:68:71:1c:46:45:0b:1e:44:b4:75: f0:b2:a6:f3:20:53:bf:e1:e1:0d:e4:f7:a5:78:6c: 4e:cb:57:44:bb:2c:be:3c:62:a7:f9:a2:3a:6c:c2: 45:04:10:5c:3a:e4:13:2b:1c:ee:df:9f:ce:34:51: 96:a6:33:9d:7f:d1:d8:09:93:84:43:2b:29:6b:cc: 6a:a0:f0:44:8e:2e:97:80:b7:6e:ee:88:af:22:64: b2:94:f2:fb:b4:87:2b:c2:ec:06:17:03:d5:d1:f8: f3:6a:4d:61:31:10:1a:b9:b7:f7:47:22:c6:43:b5: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.182.0/23 IPv6: 2001:df6:e700::/48 Signature Algorithm: sha256WithRSAEncryption 10:a0:ec:aa:cf:2a:f1:e1:e4:a2:8c:ba:c2:a1:9e:3a:bf:2d: fc:1b:eb:40:9e:0d:20:d0:f8:90:79:3e:e6:a7:85:02:65:7a: 86:74:59:24:91:9e:bf:fd:4f:11:14:a9:6f:ea:7a:72:10:8c: b3:7e:a5:d9:89:aa:16:ae:99:a9:2a:6e:dd:22:22:24:eb:eb: fa:b3:19:4f:52:b7:63:e1:72:cb:da:6e:c6:65:e7:73:e4:09: 6e:9d:ea:ab:00:3c:4f:7a:49:5e:d1:d3:af:5d:98:90:34:6a: 7d:bc:1b:ad:d7:5b:6f:f0:0e:9a:88:8c:7d:ea:2f:9a:a6:6b: b4:5a:d8:a2:06:79:4f:24:28:06:23:e4:7e:6e:c5:67:a0:b3: 45:bd:be:35:fa:d0:84:01:30:b0:33:51:c5:1b:ae:15:b4:17: f3:ad:fb:b0:9e:34:86:d6:02:57:64:9e:ce:8a:1b:ca:15:56: 2c:2f:34:94:4f:b4:5f:69:56:a8:c0:07:6c:75:2f:fe:f5:e8: e9:ee:bd:2a:d8:41:ed:6c:f6:20:34:b9:2d:81:1d:f5:20:54: ec:7e:27:93:e3:52:8c:8e:85:90:b4:ea:c5:f5:73:bf:ef:e9: b9:59:10:07:0e:8a:78:17:82:90:52:05:7e:3a:ab:1d:48:47: 6a:02:f2:f3 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUVsSgG2Ao85OS26lR+Z+t5KZm+qAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMjU0N1oX DTI0MDcyOTAzMzA0N1owMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3 MTA2RkY2RTYyMjI4RTAzQzFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrBUrTVyIQkBZcjaDu3Rz73KP/qPcuik3t4uZYPfOU8XcqNb8CVE7WMIrn9 QrSeBlEXs9Iim18NeC/81m7Y1w1MeiKJ8DCAxyY6J0BYLcANr9UQd9g4c6hS3XiG OLtzHHCuILpI0WTPRg7ClcnHEfn2i+SxNoxO8bnskHt3/Yxsw9+kbjmeFfrAH3Vo cRxGRQseRLR18LKm8yBTv+HhDeT3pXhsTstXRLssvjxip/miOmzCRQQQXDrkEysc 7t+fzjRRlqYznX/R2AmThEMrKWvMaqDwRI4ul4C3bu6IryJkspTy+7SHK8LsBhcD 1dH482pNYTEQGrm390cixkO1EkMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAkSvCqNLovyVT1xBv9uYiKOA8HkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1NjY5ODA3 LTA1MGUtNDNhZS04NzA4LWI0NmI4ODE3ODQyYy8wLzA5MTJCQzJBOEQyRThCRjI1 NTNENzEwNkZGNkU2MjIyOEUwM0MxRTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFngrYwDwQCAAIwCQMHACABDfbnADANBgkqhkiG9w0BAQsFAAOCAQEAEKDsqs8q 8eHkooy6wqGeOr8t/BvrQJ4NIND4kHk+5qeFAmV6hnRZJJGev/1PERSpb+p6chCM s36l2YmqFq6ZqSpu3SIiJOvr+rMZT1K3Y+Fyy9puxmXnc+QJbp3qqwA8T3pJXtHT r12YkDRqfbwbrddbb/AOmoiMfeovmqZrtFrYogZ5TyQoBiPkfm7FZ6CzRb2+NfrQ hAEwsDNRxRuuFbQX8637sJ40htYCV2SezoobyhVWLC80lE+0X2lWqMAHbHUv/vXo 6e69KthB7Wz2IDS5LYEd9SBU7H4nk+NSjI6FkLTqxfVzv+/puVkQBw6KeBeCkFIF fjqrHUhHagLy8w== -----END CERTIFICATE-----Generated at Tue May 7 18:07:04 2024 by rpki-client on console-fra.rpki-client.org