$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer (raw, json) Hash identifier: q0bhW2fy3bw+W/1L9eYAv0MUF/nBby/KAe5TRwpZ3WA= Subject key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79083E254E273C038A9214BC28273897B347A65A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 11:32:47 +0000 Certificate not after: Mon 29 Jul 2024 11:37:47 +0000 Subordinate resources: IP: 103.73.235.0/24 IP: 103.82.6.0/24 IP: 2001:df4:b200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:08:3e:25:4e:27:3c:03:8a:92:14:bc:28:27:38:97:b3:47:a6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 11:32:47 2023 GMT Not After : Jul 29 11:37:47 2024 GMT Subject: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:57:ff:b8:13:d0:e0:1f:db:1f:02:9a:93: db:70:86:3a:db:a0:ee:5f:e4:93:86:0f:6e:a1:db: e3:4b:72:18:da:d5:78:15:be:47:00:2b:69:e1:b1: c1:1c:85:4e:95:c7:79:a8:df:96:da:2a:06:68:d9: fa:63:b8:a6:9f:cc:f5:e2:c5:70:5b:e4:f7:d1:a7: 44:2a:dd:09:fc:dd:f3:63:9c:3e:e5:4c:ed:3e:84: fb:20:96:71:9f:d0:c8:51:44:90:b9:49:e9:96:cf: 50:da:77:c2:c3:8b:25:a8:b7:8c:d4:ba:67:3e:a9: 6e:92:4a:fb:bc:b9:ef:46:1d:60:e7:7a:0c:31:be: fc:3b:dd:43:aa:7c:57:4d:35:8e:28:06:9d:a8:26: f0:de:a2:4e:47:14:85:e5:73:ca:17:ab:f4:e6:42: 86:fd:61:d8:53:51:99:ae:99:ca:cf:87:30:c9:ca: 99:48:4f:43:d8:60:86:9f:0e:70:1b:f1:56:a6:90: 59:eb:69:e8:a9:23:a2:c6:85:31:1b:2a:8d:d2:02: 1e:09:7e:95:e8:63:78:61:02:91:5e:d6:87:a4:46: 01:15:4c:6c:d8:0a:db:bb:5d:c6:ca:c1:ab:d4:83: d6:65:16:2c:e7:07:99:a9:17:b6:0b:ce:ec:f7:53: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.235.0/24 103.82.6.0/24 IPv6: 2001:df4:b200::/48 Signature Algorithm: sha256WithRSAEncryption 33:d8:5d:a1:04:8b:51:be:16:a3:7c:7f:c3:28:2b:87:56:ca: a3:bb:c9:a0:b3:23:cb:62:d2:38:e3:64:b5:62:ac:41:ec:36: 59:72:75:f9:86:3f:e4:fc:bb:5d:a6:45:2d:df:8c:6c:74:c5: 25:c6:38:05:df:04:0f:de:e7:2f:f4:f4:92:09:d6:7b:ff:b4: b2:ac:45:24:fc:8a:9f:6d:96:57:dc:c8:f0:37:54:36:19:9d: 75:ec:24:1b:a6:ab:81:6e:44:d3:cf:b2:b5:f2:33:c7:2f:05: 45:69:87:5c:99:98:d8:97:6e:8d:4a:2a:ff:4c:9c:5e:af:0e: 04:74:24:64:c5:93:9f:a4:b4:36:c1:76:fd:0f:8e:47:ae:c5: f1:32:d9:0b:92:ed:fa:b7:c4:a2:9a:05:83:bb:f8:83:99:87: 09:ee:c2:24:0c:1b:9b:4a:96:8f:a0:4c:7f:7f:51:6f:f2:71: 16:2a:39:6f:95:33:e0:90:5b:a5:48:6d:2b:df:b3:2a:50:c2: ba:8e:b8:fa:e2:78:2e:f2:48:ff:ee:e9:50:af:4b:58:16:00: 3d:69:24:1b:75:eb:3f:d9:be:4f:91:32:34:ea:20:42:7b:d4: b5:c7:91:30:f6:de:45:9b:b6:7b:83:66:2c:d9:8f:e2:a9:33: a5:e5:3a:f5 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUeQg+JU4nPAOKkhS8KCc4l7NHplowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTExMzI0N1oX DTI0MDcyOTExMzc0N1owMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNC OUIyRjNCQkJDN0ZCODhBMzJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLsV/+4E9DgH9sfApqT23CGOtug7l/kk4YPbqHb40tyGNrVeBW+RwAraeGx wRyFTpXHeajfltoqBmjZ+mO4pp/M9eLFcFvk99GnRCrdCfzd82OcPuVM7T6E+yCW cZ/QyFFEkLlJ6ZbPUNp3wsOLJai3jNS6Zz6pbpJK+7y570YdYOd6DDG+/DvdQ6p8 V001jigGnagm8N6iTkcUheVzyher9OZChv1h2FNRma6Zys+HMMnKmUhPQ9hghp8O cBvxVqaQWetp6KkjosaFMRsqjdICHgl+lehjeGECkV7Wh6RGARVMbNgK27tdxsrB q9SD1mUWLOcHmakXtgvO7PdTLtkCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCEP2Y602aTY0Py5svO7vH+4ijKpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNzg4Yzg4 LWNhMmMtNGZhMC1hMzVmLTNlN2ExMDg4NzIyOC8wLzIxMEZEOThFQjREOUE0RDhE MEZDQjlCMkYzQkJCQzdGQjg4QTMyQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnSesDBABnUgYwDwQCAAIwCQMHACABDfSyADANBgkqhkiG9w0BAQsFAAOCAQEA M9hdoQSLUb4Wo3x/wygrh1bKo7vJoLMjy2LSOONktWKsQew2WXJ1+YY/5Py7XaZF Ld+MbHTFJcY4Bd8ED97nL/T0kgnWe/+0sqxFJPyKn22WV9zI8DdUNhmddewkG6ar gW5E08+ytfIzxy8FRWmHXJmY2JdujUoq/0ycXq8OBHQkZMWTn6S0NsF2/Q+OR67F 8TLZC5Lt+rfEopoFg7v4g5mHCe7CJAwbm0qWj6BMf39Rb/JxFio5b5Uz4JBbpUht K9+zKlDCuo64+uJ4LvJI/+7pUK9LWBYAPWkkG3XrP9m+T5EyNOogQnvUtceRMPbe RZu2e4NmLNmP4qkzpeU69Q== -----END CERTIFICATE-----Generated at Wed May 8 09:50:26 2024 by rpki-client on console-fra.rpki-client.org