$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer (raw, json) Hash identifier: kajiuJQ0313kvgf1kl5PLGj1ZJCtPRQYv9JuBTyNyBw= Subject key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41AA72AF130B2FEB795F10A3D22CF1B04F0F3607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 05:59:59 +0000 Certificate not after: Tue 01 Jul 2025 06:04:59 +0000 Subordinate resources: IP: 103.73.235.0/24 IP: 103.82.6.0/24 IP: 2001:df4:b200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:72:af:13:0b:2f:eb:79:5f:10:a3:d2:2c:f1:b0:4f:0f:36:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 05:59:59 2024 GMT Not After : Jul 1 06:04:59 2025 GMT Subject: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:57:ff:b8:13:d0:e0:1f:db:1f:02:9a:93: db:70:86:3a:db:a0:ee:5f:e4:93:86:0f:6e:a1:db: e3:4b:72:18:da:d5:78:15:be:47:00:2b:69:e1:b1: c1:1c:85:4e:95:c7:79:a8:df:96:da:2a:06:68:d9: fa:63:b8:a6:9f:cc:f5:e2:c5:70:5b:e4:f7:d1:a7: 44:2a:dd:09:fc:dd:f3:63:9c:3e:e5:4c:ed:3e:84: fb:20:96:71:9f:d0:c8:51:44:90:b9:49:e9:96:cf: 50:da:77:c2:c3:8b:25:a8:b7:8c:d4:ba:67:3e:a9: 6e:92:4a:fb:bc:b9:ef:46:1d:60:e7:7a:0c:31:be: fc:3b:dd:43:aa:7c:57:4d:35:8e:28:06:9d:a8:26: f0:de:a2:4e:47:14:85:e5:73:ca:17:ab:f4:e6:42: 86:fd:61:d8:53:51:99:ae:99:ca:cf:87:30:c9:ca: 99:48:4f:43:d8:60:86:9f:0e:70:1b:f1:56:a6:90: 59:eb:69:e8:a9:23:a2:c6:85:31:1b:2a:8d:d2:02: 1e:09:7e:95:e8:63:78:61:02:91:5e:d6:87:a4:46: 01:15:4c:6c:d8:0a:db:bb:5d:c6:ca:c1:ab:d4:83: d6:65:16:2c:e7:07:99:a9:17:b6:0b:ce:ec:f7:53: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.235.0/24 103.82.6.0/24 IPv6: 2001:df4:b200::/48 Signature Algorithm: sha256WithRSAEncryption 04:e8:d0:11:50:df:80:b8:fc:63:26:b0:33:63:31:d7:ee:f3: f9:6a:8c:8c:89:2c:26:a5:cf:10:68:f2:e1:a8:77:ae:01:54: 1c:f8:9a:ad:f2:5a:94:67:ac:a9:1b:99:24:e6:98:77:f3:b0: aa:31:10:5d:70:a8:7b:11:bf:8d:ce:b5:4e:08:36:e3:af:f3: 21:65:a8:2c:6a:71:9b:ab:59:8b:2e:80:1b:25:dd:29:32:93: 5f:2e:d1:9a:34:fc:91:15:7d:4c:c9:65:c2:53:bd:94:56:ea: d9:f3:43:f9:73:c0:d3:a5:c5:53:e9:cf:6a:09:69:3e:f5:e8: 4b:f4:40:26:16:21:ce:c3:c6:7f:24:1e:37:d7:e1:74:e1:67: 18:00:cd:03:13:a3:88:72:5d:70:d5:9e:94:8d:eb:47:4e:b7: 5e:59:a4:0c:fa:5b:1e:30:53:3d:b6:54:f6:de:9a:c0:54:2b: 17:0f:a1:1b:46:55:e4:38:4c:51:90:cb:25:f3:1c:a8:d8:ff: bf:f8:a8:93:18:b3:5a:45:da:37:62:a6:4d:69:c2:40:d4:34: 32:d4:d8:45:6a:bd:48:de:df:a9:99:c1:8c:87:97:1d:40:f8: ee:78:05:0a:66:60:54:f2:1d:db:36:1d:d6:41:63:67:f5:b4: 98:a4:9a:4a -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUQapyrxMLL+t5XxCj0izxsE8PNgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjA1NTk1OVoX DTI1MDcwMTA2MDQ1OVowMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNC OUIyRjNCQkJDN0ZCODhBMzJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLsV/+4E9DgH9sfApqT23CGOtug7l/kk4YPbqHb40tyGNrVeBW+RwAraeGx wRyFTpXHeajfltoqBmjZ+mO4pp/M9eLFcFvk99GnRCrdCfzd82OcPuVM7T6E+yCW cZ/QyFFEkLlJ6ZbPUNp3wsOLJai3jNS6Zz6pbpJK+7y570YdYOd6DDG+/DvdQ6p8 V001jigGnagm8N6iTkcUheVzyher9OZChv1h2FNRma6Zys+HMMnKmUhPQ9hghp8O cBvxVqaQWetp6KkjosaFMRsqjdICHgl+lehjeGECkV7Wh6RGARVMbNgK27tdxsrB q9SD1mUWLOcHmakXtgvO7PdTLtkCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCEP2Y602aTY0Py5svO7vH+4ijKpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNzg4Yzg4 LWNhMmMtNGZhMC1hMzVmLTNlN2ExMDg4NzIyOC8wLzIxMEZEOThFQjREOUE0RDhE MEZDQjlCMkYzQkJCQzdGQjg4QTMyQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnSesDBABnUgYwDwQCAAIwCQMHACABDfSyADANBgkqhkiG9w0BAQsFAAOCAQEA BOjQEVDfgLj8YyawM2Mx1+7z+WqMjIksJqXPEGjy4ah3rgFUHPiarfJalGesqRuZ JOaYd/OwqjEQXXCoexG/jc61Tgg246/zIWWoLGpxm6tZiy6AGyXdKTKTXy7RmjT8 kRV9TMllwlO9lFbq2fND+XPA06XFU+nPaglpPvXoS/RAJhYhzsPGfyQeN9fhdOFn GADNAxOjiHJdcNWelI3rR063XlmkDPpbHjBTPbZU9t6awFQrFw+hG0ZV5DhMUZDL JfMcqNj/v/iokxizWkXaN2KmTWnCQNQ0MtTYRWq9SN7fqZnBjIeXHUD47ngFCmZg VPId2zYd1kFjZ/W0mKSaSg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org