$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer (raw, json) Hash identifier: HQlD50mUTqqwV1BmHM9c9ZedSqKo9aa29lxDFlKV+nc= Subject key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7EB44DB0801A5FBDE72D2301ACD0EEC9E31A09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft caRepository: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:05:01 +0000 Certificate not after: Mon 29 Jul 2024 02:10:01 +0000 Subordinate resources: IP: 103.105.217.0/24 IP: 103.107.71.0/24 IP: 103.107.84.0/23 IP: 2402:c740::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b4:4d:b0:80:1a:5f:bd:e7:2d:23:01:ac:d0:ee:c9:e3:1a:09:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:05:01 2023 GMT Not After : Jul 29 02:10:01 2024 GMT Subject: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:2b:40:29:93:8a:21:02:54:a7:be:58:22: 6e:8d:e9:a0:04:d2:8e:94:c9:90:19:b6:84:47:b1: bd:b9:0d:b5:f7:88:74:3a:d1:57:14:7e:fb:19:ad: 93:1d:c2:01:c1:56:dd:66:6b:38:65:7c:c6:f3:f5: 66:37:0c:75:68:b7:3d:46:53:da:e5:53:d1:7c:1b: 99:43:46:98:92:83:82:d0:b3:df:7b:21:2a:b2:40: 25:1d:37:c6:7a:69:76:7d:cd:2c:e1:be:59:e4:04: d3:d2:c5:33:b4:df:8e:44:e8:9d:c4:23:80:b0:0b: e6:da:e1:ef:93:a9:a1:35:08:70:d4:17:60:45:fd: bf:21:9a:74:fd:46:46:19:53:71:c8:23:b2:2c:72: 72:ed:f8:b3:67:ca:9d:b3:9d:ad:dc:ac:fa:d5:09: 02:88:83:77:1b:26:1d:ad:8f:94:5f:91:51:a6:90: a1:c4:a1:ab:f3:4f:47:af:c5:fb:69:81:59:06:d5: 68:f0:99:46:8b:7a:83:b9:45:67:b1:71:2f:74:b8: 90:84:23:43:d4:7f:f7:21:20:7d:a2:9e:43:ef:3f: 33:4b:a2:67:d3:f6:cf:2e:fd:76:f7:dd:a7:e0:a6: 74:58:d8:f7:1b:7e:a8:dc:0a:39:3b:62:23:a2:b8: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.217.0/24 103.107.71.0/24 103.107.84.0/23 IPv6: 2402:c740::/32 Signature Algorithm: sha256WithRSAEncryption 3f:db:12:87:59:b1:c9:34:3e:8f:0d:f4:0d:d9:2d:05:45:c0: d0:80:79:3e:2a:35:44:5c:fd:13:6d:e6:a0:42:99:6e:ee:bd: a5:fd:f8:7f:09:ca:9d:86:ef:0d:61:17:67:1f:bf:c2:8f:b4: fa:d8:14:a3:3c:6b:f1:16:8e:9e:02:dd:f2:46:cf:f2:26:47: ac:98:0d:7f:45:21:44:ec:63:d2:7e:62:0b:33:56:ab:86:d7: d3:ca:e4:e3:89:27:4f:b4:7c:1e:e8:15:78:5a:d2:84:71:04: 33:99:5d:e6:f9:6d:32:5e:79:65:af:cc:b3:5d:3c:49:9c:37: 05:30:a9:51:e0:03:9f:33:29:35:dd:13:73:e2:01:1e:e9:de: 5a:37:10:5a:70:2a:ee:df:6d:48:70:4c:be:d5:9d:dc:fe:4b: 92:3f:30:26:82:d7:cd:b1:f4:dd:a7:a1:46:ff:ca:ae:47:4d: 52:d2:a7:ed:45:8f:54:16:7a:7c:ec:98:6b:cf:8b:61:ef:bc: c0:77:5b:f8:4a:ff:2d:75:95:00:92:d8:d8:dc:a9:bb:81:77: 99:c6:6f:ac:27:0b:44:0a:52:18:10:76:ad:77:00:09:13:ae: cb:b2:2f:01:91:14:0e:f6:b6:15:7d:8a:ab:d4:37:c8:7f:47: d7:4a:71:63 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUfrRNsIAaX73nLSMBrNDuyeMaCbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyMDUwMVoX DTI0MDcyOTAyMTAwMVowMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNC MzAzNTAxNkRDNEVDNjJDREVCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVWK0Apk4ohAlSnvlgibo3poATSjpTJkBm2hEexvbkNtfeIdDrRVxR++xmt kx3CAcFW3WZrOGV8xvP1ZjcMdWi3PUZT2uVT0XwbmUNGmJKDgtCz33shKrJAJR03 xnppdn3NLOG+WeQE09LFM7TfjkToncQjgLAL5trh75OpoTUIcNQXYEX9vyGadP1G RhlTccgjsixycu34s2fKnbOdrdys+tUJAoiDdxsmHa2PlF+RUaaQocShq/NPR6/F +2mBWQbVaPCZRot6g7lFZ7FxL3S4kIQjQ9R/9yEgfaKeQ+8/M0uiZ9P2zy79dvfd p+CmdFjY9xt+qNwKOTtiI6K4BEECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJHUg8SCMjZrDOzA1AW3E7GLN6xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkZGYxODFm LTFlODktNDAyMi04MmY4LWUwZGJhODU5ZWUyZS8wLzIyNDc1MjBGMTIwOEM4RDlB QzMzQjMwMzUwMTZEQzRFQzYyQ0RFQjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BABnadkDBABna0cDBAFna1QwDQQCAAIwBwMFACQCx0AwDQYJKoZIhvcNAQELBQAD ggEBAD/bEodZsck0Po8N9A3ZLQVFwNCAeT4qNURc/RNt5qBCmW7uvaX9+H8Jyp2G 7w1hF2cfv8KPtPrYFKM8a/EWjp4C3fJGz/ImR6yYDX9FIUTsY9J+YgszVquG19PK 5OOJJ0+0fB7oFXha0oRxBDOZXeb5bTJeeWWvzLNdPEmcNwUwqVHgA58zKTXdE3Pi AR7p3lo3EFpwKu7fbUhwTL7Vndz+S5I/MCaC182x9N2noUb/yq5HTVLSp+1Fj1QW enzsmGvPi2HvvMB3W/hK/y11lQCS2NjcqbuBd5nGb6wnC0QKUhgQdq13AAkTrsuy LwGRFA72thV9iqvUN8h/R9dKcWM= -----END CERTIFICATE-----Generated at Thu May 9 00:36:57 2024 by rpki-client on console-fra.rpki-client.org