$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer (raw, json) Hash identifier: U69pnjbtGLgj2BUT7ex5/VU7DfWi2qNHzy9i0Jnf6pY= Subject key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F012BAE67F0757AB8D3A1A1923A1C284934F605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft caRepository: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Mar 2024 15:38:25 +0000 Certificate not after: Tue 25 Mar 2025 15:43:25 +0000 Subordinate resources: IP: 103.112.5.0/24 IP: 103.112.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:01:2b:ae:67:f0:75:7a:b8:d3:a1:a1:92:3a:1c:28:49:34:f6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 26 15:38:25 2024 GMT Not After : Mar 25 15:43:25 2025 GMT Subject: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:8a:4b:52:23:be:59:70:4f:f6:cb:c0:21: a7:84:dd:16:3f:72:3e:c2:45:07:c4:3e:a3:5d:c4: d6:49:8c:4f:a3:e8:16:f5:60:9e:9b:8c:54:1f:59: db:b2:c6:2f:9e:8e:95:90:09:4a:c4:67:90:90:19: 3d:54:51:a6:68:74:ec:b4:66:e6:8a:2e:86:94:af: 99:b2:80:14:34:e7:88:cf:cc:72:c8:c5:62:cb:97: 50:93:90:5c:f9:4a:fe:bd:91:d8:2d:23:ca:90:3b: ca:38:12:3e:16:45:6a:f3:f1:91:b6:ef:ee:e6:ff: 7f:84:b7:99:fd:3c:ac:06:3c:00:36:b9:2e:42:77: 5f:d4:58:d2:3a:b7:66:00:96:be:be:0d:30:1d:9f: ac:7b:f2:87:cf:c8:6b:2c:f2:fa:c0:53:cf:8d:05: a6:3a:6c:9b:46:d1:d8:f0:99:a0:9c:be:1c:72:72: 63:73:22:8a:4f:84:eb:8d:f9:66:07:9a:44:30:cb: 93:9f:71:36:ea:44:11:73:ae:59:f1:82:40:ab:de: cd:80:f2:8b:01:13:46:08:ad:9e:ba:86:04:32:d7: d5:21:f0:61:27:57:e0:87:84:e8:c4:93:cd:27:8d: 0c:b6:2d:7d:b0:61:45:41:ae:8f:5b:10:ec:80:e7: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.5.0/24 103.112.44.0/23 Signature Algorithm: sha256WithRSAEncryption 76:64:26:3d:89:ca:b9:8b:56:06:1b:b7:cc:c5:7a:90:09:a3: 79:47:13:9d:c5:9c:26:35:0f:14:f8:31:a2:88:ca:b7:a4:2a: 18:1f:59:f3:b9:c6:ca:c8:44:ff:d3:0e:62:c2:40:69:08:14: f2:f8:22:a0:2d:88:84:56:e6:51:03:fc:32:6a:77:5c:61:b7: e9:bd:47:21:77:5b:2a:0f:95:43:be:e0:0b:a6:b1:9f:9f:5b: 55:e6:7f:23:54:bd:cd:6e:4e:7f:57:4f:67:ab:d4:85:ed:ba: 5b:e5:92:28:4d:20:b3:70:f9:a4:22:ba:c4:35:fa:bc:84:42: 3d:0d:1c:47:26:49:47:03:ec:98:62:8e:8d:74:af:b3:e1:b3: 49:09:3e:38:f9:b4:74:7d:47:28:03:c2:ba:16:92:17:30:8c: ce:81:c5:29:c1:c2:f2:68:93:b8:bc:86:ff:d2:35:37:f9:fc: 69:65:30:94:76:68:6d:4c:7b:a2:6c:d9:c6:62:44:d3:3e:73: 49:51:2b:0c:0e:59:72:be:22:4e:8b:8d:a8:d3:52:7e:b6:9b: 35:df:ca:2e:d8:6f:3a:33:21:ce:bc:b0:8d:c4:80:40:ba:1b: 62:71:0c:d4:e6:c3:9a:4b:b5:f6:8e:31:fd:dd:70:96:64:69: b1:69:a3:c2 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUTwErrmfwdXq406GhkjocKEk09gUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyNjE1MzgyNVoX DTI1MDMyNTE1NDMyNVowMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1 NjFGRkEyQTI0MkFFQjhGNDg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLCiktSI75ZcE/2y8Ahp4TdFj9yPsJFB8Q+o13E1kmMT6PoFvVgnpuMVB9Z 27LGL56OlZAJSsRnkJAZPVRRpmh07LRm5oouhpSvmbKAFDTniM/McsjFYsuXUJOQ XPlK/r2R2C0jypA7yjgSPhZFavPxkbbv7ub/f4S3mf08rAY8ADa5LkJ3X9RY0jq3 ZgCWvr4NMB2frHvyh8/Iayzy+sBTz40Fpjpsm0bR2PCZoJy+HHJyY3Miik+E6435 ZgeaRDDLk59xNupEEXOuWfGCQKvezYDyiwETRgitnrqGBDLX1SHwYSdX4IeE6MST zSeNDLYtfbBhRUGuj1sQ7IDnJtMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA0IAPFRbaV72blWH/oqJCrrj0hTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MWJjM2Vj LTg2YjgtNGFmYi04YThmLWEwYTg2YTRjMjljNi8wLzBEMDgwMEYxNTE2REE1N0JE OUI5NTYxRkZBMkEyNDJBRUI4RjQ4NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABncAUDBAFncCwwDQYJKoZIhvcNAQELBQADggEBAHZkJj2JyrmLVgYbt8zFepAJ o3lHE53FnCY1DxT4MaKIyrekKhgfWfO5xsrIRP/TDmLCQGkIFPL4IqAtiIRW5lED /DJqd1xht+m9RyF3WyoPlUO+4AumsZ+fW1XmfyNUvc1uTn9XT2er1IXtulvlkihN ILNw+aQiusQ1+ryEQj0NHEcmSUcD7Jhijo10r7Phs0kJPjj5tHR9RygDwroWkhcw jM6BxSnBwvJok7i8hv/SNTf5/GllMJR2aG1Me6Js2cZiRNM+c0lRKwwOWXK+Ik6L jajTUn62mzXfyi7YbzozIc68sI3EgEC6G2JxDNTmw5pLtfaOMf3dcJZkabFpo8I= -----END CERTIFICATE-----Generated at Wed May 8 09:50:24 2024 by rpki-client on console-fra.rpki-client.org