$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.cer (raw, json) Hash identifier: VZ8GCRUGgSH7A+Jqe1pFBp8do79szXCTHkp37GWmdkc= Subject key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D271B23FF2E66E90FB03FBC07C00B9FD7FE0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Oct 2023 07:58:24 +0000 Certificate not after: Thu 24 Oct 2024 08:03:24 +0000 Subordinate resources: IP: 103.147.134.0/23 IP: 2405:b940::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:1b:23:ff:2e:66:e9:0f:b0:3f:bc:07:c0:0b:9f:d7:fe:0d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 26 07:58:24 2023 GMT Not After : Oct 24 08:03:24 2024 GMT Subject: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:51:fe:8e:c1:ba:0d:65:55:a5:51:29:b4: a3:2f:dd:c7:d9:30:15:ce:8b:1f:0e:6e:92:06:95: f5:aa:6a:64:a9:fe:6d:3f:53:97:e9:1c:10:60:a8: 92:90:6b:d5:13:af:02:b5:a5:43:1b:6d:5e:b9:7e: f6:4c:f7:f7:73:eb:88:38:d3:00:ff:94:d3:6d:71: fa:f5:27:ab:a1:44:60:e2:3e:ae:54:14:07:28:a9: da:2f:02:25:37:6b:e4:e9:37:a3:0c:44:0a:b7:e1: 82:2d:a1:3e:b4:cd:58:49:9e:f2:da:18:7a:9c:88: cf:e8:5a:b0:d6:3d:ea:eb:c0:1a:48:01:ed:e0:8f: c0:15:b6:8d:3e:e9:4b:71:52:dd:93:67:78:7a:d1: 2a:ee:18:46:c5:44:97:8b:3f:ce:44:83:ad:9f:4b: ac:f8:66:21:f9:a4:4f:95:bc:a2:ef:d1:f0:5d:21: cc:61:eb:56:e8:a9:08:21:54:52:17:be:98:47:f9: bf:0e:75:dd:c4:1d:71:ec:12:13:ca:11:3d:4a:72: 6d:95:26:3c:7d:4f:91:4b:0c:05:12:07:cd:62:1c: 30:bf:a4:20:d8:04:dd:c5:d9:e3:39:72:49:c3:51: d2:2c:ef:a8:bf:9c:50:c7:db:62:1e:f7:30:70:2b: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.134.0/23 IPv6: 2405:b940::/32 Signature Algorithm: sha256WithRSAEncryption 38:9b:11:1f:65:13:0b:dd:a5:5e:5b:2f:8e:a4:65:a5:92:09: c7:84:93:45:8a:20:15:d4:28:75:c7:16:22:b5:b9:6c:08:c9: 2c:04:01:b6:c0:5a:a8:bd:93:9d:1b:9a:a0:96:28:bd:59:2c: e3:a6:cc:0a:3b:17:30:4f:d3:48:be:f3:28:35:c4:a6:5e:9d: 74:1a:f3:01:30:72:0a:2a:2c:3d:b0:f4:63:4b:d8:aa:9e:ac: 4b:63:d4:f8:27:f2:cb:2c:e0:ec:06:fe:c4:90:97:c3:4a:0e: 62:91:23:36:d2:45:9d:9b:93:b0:0c:ce:8b:67:40:3a:74:e9: 72:d2:3e:36:a6:43:7e:76:50:eb:42:5a:e3:8b:27:5a:df:70: 48:90:52:98:ea:3a:79:0f:97:df:32:8e:55:4e:51:4c:93:09: 45:7b:bf:ed:88:a6:66:a0:b7:e9:9f:bc:fc:af:7e:84:e5:f4: 8d:92:39:18:bd:0b:15:2c:9b:d2:85:6c:60:ad:91:54:2c:85: da:64:21:b8:ba:5f:af:ba:14:de:17:19:7b:4e:74:ba:62:58: 77:83:c2:e3:88:9a:4d:75:00:65:01:fe:e0:ba:37:c0:e9:02: 2f:a0:b0:2c:19:2d:0c:63:e0:18:d4:fc:bd:fb:96:fd:52:d5: 00:1e:b8:86 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIULScbI/8uZukPsD+8B8ALn9f+DaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyNjA3NTgyNFoX DTI0MTAyNDA4MDMyNFowMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1 MTA4NTYwM0RBOEU3REU1MzlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYWUf6OwboNZVWlUSm0oy/dx9kwFc6LHw5ukgaV9apqZKn+bT9Tl+kcEGCo kpBr1ROvArWlQxttXrl+9kz393PriDjTAP+U021x+vUnq6FEYOI+rlQUByip2i8C JTdr5Ok3owxECrfhgi2hPrTNWEme8toYepyIz+hasNY96uvAGkgB7eCPwBW2jT7p S3FS3ZNneHrRKu4YRsVEl4s/zkSDrZ9LrPhmIfmkT5W8ou/R8F0hzGHrVuipCCFU Uhe+mEf5vw513cQdcewSE8oRPUpybZUmPH1PkUsMBRIHzWIcML+kINgE3cXZ4zly ScNR0izvqL+cUMfbYh73MHAr/i8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBbNeHfJGheaCmdRCFYD2o595TnwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0OGI2NTgz LTQxMjItNDY5ZC04Mzg0LTNhZjFiY2M2NjA3Zi8wLzE2Q0Q3ODc3QzkxQTE3OUEw QTY3NTEwODU2MDNEQThFN0RFNTM5RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk4YwDQQCAAIwBwMFACQFuUAwDQYJKoZIhvcNAQELBQADggEBADibER9lEwvd pV5bL46kZaWSCceEk0WKIBXUKHXHFiK1uWwIySwEAbbAWqi9k50bmqCWKL1ZLOOm zAo7FzBP00i+8yg1xKZenXQa8wEwcgoqLD2w9GNL2KqerEtj1Pgn8sss4OwG/sSQ l8NKDmKRIzbSRZ2bk7AMzotnQDp06XLSPjamQ352UOtCWuOLJ1rfcEiQUpjqOnkP l98yjlVOUUyTCUV7v+2Ipmagt+mfvPyvfoTl9I2SORi9CxUsm9KFbGCtkVQshdpk Ibi6X6+6FN4XGXtOdLpiWHeDwuOImk11AGUB/uC6N8DpAi+gsCwZLQxj4BjU/L37 lv1S1QAeuIY= -----END CERTIFICATE-----Generated at Wed May 8 21:02:09 2024 by rpki-client on console-fra.rpki-client.org