$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer (raw, json) Hash identifier: a0kijqXkxH5GfXdjx/Xo20L+9KVITQLSnCxmYvpuVgY= Subject key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6805C95DA295E2B121879966703C10673EC5CD31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 10 Sep 2023 14:26:11 +0000 Certificate not after: Sun 08 Sep 2024 14:31:11 +0000 Subordinate resources: IP: 103.47.132.0/22 IP: 2402:8780::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:05:c9:5d:a2:95:e2:b1:21:87:99:66:70:3c:10:67:3e:c5:cd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 14:26:11 2023 GMT Not After : Sep 8 14:31:11 2024 GMT Subject: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fe:87:b4:f9:97:78:c1:bf:09:9b:af:06:4c: 9d:33:fb:ba:18:7a:9b:d4:63:44:22:26:7a:3a:55: 08:4d:1d:07:0c:64:67:92:aa:d8:df:fe:92:28:55: 50:89:9a:a5:35:ae:ab:19:68:59:38:c1:e9:33:08: d8:15:3a:45:fc:9b:7a:61:12:18:9e:05:98:10:b3: ff:cc:c4:64:55:b4:6f:4b:9b:98:97:8a:2d:5a:66: 5f:12:68:68:b2:58:c0:a0:38:ae:c5:9d:26:9b:80: 33:9a:0f:15:38:c9:06:3e:78:1d:02:e2:99:0f:f7: a0:f3:95:44:c0:e0:ce:16:83:76:e0:cb:08:2b:68: 6d:82:3d:03:06:d9:28:ab:48:b6:12:02:fe:bf:08: cc:31:4d:1a:c8:32:0a:69:7e:01:85:37:90:f9:fc: 42:e6:29:b3:0d:7b:a1:f0:0f:bf:78:65:62:40:74: 57:f1:7d:99:f4:b3:7f:c9:0b:0e:3f:55:49:54:1d: aa:0b:c4:5e:a6:87:9a:d1:6f:6b:67:a9:d1:be:73: 14:47:20:6f:28:dc:7d:89:6c:76:71:87:5f:3f:dc: fc:6a:c1:96:2f:b6:80:a2:dc:c1:89:12:b5:a7:1c: ec:6f:ef:bf:69:5a:72:f4:18:a4:9b:07:71:f2:73: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.132.0/22 IPv6: 2402:8780::/32 Signature Algorithm: sha256WithRSAEncryption 6c:f2:31:a0:71:e0:fb:ae:4b:56:0c:88:b9:e9:c2:d8:db:67: ed:58:7e:56:48:ac:6d:de:ae:46:44:83:7e:d8:00:49:74:04: d9:0e:08:07:61:6e:2f:f2:66:00:01:fa:8f:8d:38:d0:ff:a0: f9:96:80:81:da:37:cb:a4:cd:3f:ac:5a:bd:f8:de:10:04:38: fe:b3:c5:77:60:e3:4e:6a:4a:67:76:50:92:48:d3:68:7f:c1: 67:93:83:b5:95:92:3e:bc:42:1b:c7:99:34:eb:64:2e:b4:19: 5a:c3:6e:81:b3:22:55:05:33:0c:20:d4:da:8b:5d:a9:98:1b: 2d:43:8f:f3:8a:3e:f7:1e:4b:68:a4:80:8b:c6:b0:42:7a:df: 34:54:13:95:57:e3:a3:87:99:53:76:6c:91:e4:0a:f2:ad:1e: 0f:1b:32:f5:5c:f0:7a:c0:bb:10:c6:fe:18:b3:3d:99:13:42: 88:91:51:66:76:56:78:53:49:72:a2:5a:8c:c3:b1:48:dd:c5: 13:7e:5c:59:f9:da:55:cc:70:41:05:50:92:e6:3b:99:01:5f: 48:a6:bc:51:5c:b2:8a:8b:33:c0:47:77:6a:c1:bd:da:fd:52: 27:5c:fc:15:95:be:c9:4c:22:42:70:b9:0d:06:08:aa:47:d2: 96:13:fd:83 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaAXJXaKV4rEhh5lmcDwQZz7FzTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMDE0MjYxMVoX DTI0MDkwODE0MzExMVowMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVD QkM3Q0NDMzBBNTkyN0E3NDRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPT+h7T5l3jBvwmbrwZMnTP7uhh6m9RjRCImejpVCE0dBwxkZ5Kq2N/+kihV UImapTWuqxloWTjB6TMI2BU6RfybemESGJ4FmBCz/8zEZFW0b0ubmJeKLVpmXxJo aLJYwKA4rsWdJpuAM5oPFTjJBj54HQLimQ/3oPOVRMDgzhaDduDLCCtobYI9AwbZ KKtIthIC/r8IzDFNGsgyCml+AYU3kPn8QuYpsw17ofAPv3hlYkB0V/F9mfSzf8kL Dj9VSVQdqgvEXqaHmtFva2ep0b5zFEcgbyjcfYlsdnGHXz/c/GrBli+2gKLcwYkS tacc7G/vv2lacvQYpJsHcfJz+eECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBfQKxFtS7plEkXLx8zDClknp0TkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0 LWU1ZmEtNDBlYi04NTk4LWI3Y2QxMDEzNDNjYS8wLzE3RDAyQjExNkQ0QkJBNjUx MjQ1Q0JDN0NDQzMwQTU5MjdBNzQ0RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnL4QwDQQCAAIwBwMFACQCh4AwDQYJKoZIhvcNAQELBQADggEBAGzyMaBx4Puu S1YMiLnpwtjbZ+1YflZIrG3erkZEg37YAEl0BNkOCAdhbi/yZgAB+o+NOND/oPmW gIHaN8ukzT+sWr343hAEOP6zxXdg405qSmd2UJJI02h/wWeTg7WVkj68QhvHmTTr ZC60GVrDboGzIlUFMwwg1NqLXamYGy1Dj/OKPvceS2ikgIvGsEJ63zRUE5VX46OH mVN2bJHkCvKtHg8bMvVc8HrAuxDG/hizPZkTQoiRUWZ2VnhTSXKiWozDsUjdxRN+ XFn52lXMcEEFUJLmO5kBX0imvFFcsoqLM8BHd2rBvdr9Uidc/BWVvslMIkJwuQ0G CKpH0pYT/YM= -----END CERTIFICATE-----Generated at Wed May 8 18:12:04 2024 by rpki-client on console-fra.rpki-client.org