$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.cer (raw, json) Hash identifier: TKYRGYv/mY7NDQUra0MDLybVwJKiErAORpByNX7lpio= Subject key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1328C0F3019B987DCA4FF17F099E39F3D0CBDDAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 14 Jan 2024 18:54:09 +0000 Certificate not after: Sun 12 Jan 2025 18:59:09 +0000 Subordinate resources: IP: 103.189.138.0/23 IP: 2001:df1:9dc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:28:c0:f3:01:9b:98:7d:ca:4f:f1:7f:09:9e:39:f3:d0:cb:dd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 14 18:54:09 2024 GMT Not After : Jan 12 18:59:09 2025 GMT Subject: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:df:be:a6:db:3a:81:22:75:03:e8:1c:6a: 81:c5:24:c3:44:bc:6d:7a:ac:64:1d:4d:27:6e:6a: 12:e8:ec:5e:b4:5f:2d:6c:7c:42:b3:f7:92:e7:93: 8c:e1:75:13:05:0e:ad:0b:9b:ad:b0:04:87:bc:10: ea:33:0c:e1:48:1f:85:df:74:72:e5:0e:e2:08:1d: 36:9b:fc:49:18:e0:46:ae:ac:66:a4:01:c4:e9:f9: de:50:b3:a6:f6:78:46:cb:28:f8:15:8b:bf:0f:ae: 32:f7:7c:48:b7:74:27:b2:a5:10:aa:59:55:bf:d7: 54:ae:33:29:32:30:7a:45:87:cb:64:13:00:84:ed: 2a:cf:5f:58:00:ab:57:c1:f7:91:d5:5f:db:2b:46: 32:38:7c:e5:0e:a4:19:4c:93:6f:50:a4:b4:92:fc: 6a:cc:75:84:ee:36:92:33:8f:d1:2f:e2:2b:d7:ef: 43:6c:80:a7:51:72:46:71:ef:b1:bf:86:eb:db:66: c6:82:f5:e3:bb:2e:68:1f:07:fd:0f:ec:91:a8:27: d8:11:6a:cc:30:3d:14:83:24:bb:e2:31:0a:c8:f8: 82:12:34:09:74:6f:98:9f:07:1a:9e:4d:87:d6:eb: ed:7e:9d:4b:18:12:03:e5:63:79:aa:ad:a1:97:b7: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.138.0/23 IPv6: 2001:df1:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption 41:9a:c6:39:d4:d4:f1:84:3f:16:25:c9:00:23:7b:a3:7b:0e: e5:fc:d8:f7:59:c1:f8:9e:8d:e2:68:d4:48:7e:37:99:28:ba: db:c2:07:9c:b3:80:b8:7f:b3:24:52:eb:fa:78:c5:d0:c7:c3: 8c:76:02:0b:a8:e9:0c:ad:07:31:8d:56:90:d2:55:de:e2:6b: 7e:e7:d8:33:8a:38:87:7e:0c:42:62:87:12:52:9c:d0:0b:d2: d8:d7:2d:19:8f:96:1a:69:e7:f2:2d:79:78:47:42:0d:05:39: f2:ae:52:f2:76:95:f6:9d:8d:48:15:7f:b5:29:f4:83:de:77: 71:44:b9:a4:41:88:1c:ea:e9:b2:c3:b2:e0:2a:e6:6a:7a:48: c9:7a:d3:a5:2a:9f:c3:88:85:df:83:77:12:ee:e9:39:b7:98: 9a:67:5b:f8:99:32:a1:d1:46:19:d2:37:92:e6:f8:a4:b6:71: 23:61:1b:3c:b9:cd:31:5d:24:3d:f6:fb:15:fe:46:d2:5e:f6: 82:67:9a:0b:58:ef:57:9d:15:de:79:92:6b:c7:1f:54:8c:56: 66:bb:94:bb:fc:e7:d9:55:ac:03:3e:14:ea:ba:ca:6c:ce:f1: d2:d5:cb:76:ba:83:65:e7:9a:be:ba:29:80:5c:0e:64:c3:40: 6d:b5:82:a4 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEyjA8wGbmH3KT/F/CZ4589DL3awwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNDE4NTQwOVoX DTI1MDExMjE4NTkwOVowMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRG NEExRERGRTAxNjU1N0E4MzVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRi376m2zqBInUD6BxqgcUkw0S8bXqsZB1NJ25qEujsXrRfLWx8QrP3kueT jOF1EwUOrQubrbAEh7wQ6jMM4Ugfhd90cuUO4ggdNpv8SRjgRq6sZqQBxOn53lCz pvZ4Rsso+BWLvw+uMvd8SLd0J7KlEKpZVb/XVK4zKTIwekWHy2QTAITtKs9fWACr V8H3kdVf2ytGMjh85Q6kGUyTb1CktJL8asx1hO42kjOP0S/iK9fvQ2yAp1FyRnHv sb+G69tmxoL147suaB8H/Q/skagn2BFqzDA9FIMku+IxCsj4ghI0CXRvmJ8HGp5N h9br7X6dSxgSA+VjeaqtoZe37CECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCdXWuvEQ0F8Mf30od3+AWVXqDX0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNmI1OTdj LTk1NDctNGMxZS1hYzg3LTNhNDM0YTMwMGE2Ny8wLzI3NTc1QUVCQzQ0MzQxN0Mz MUZERjRBMURERkUwMTY1NTdBODM1RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvYowDwQCAAIwCQMHACABDfGdwDANBgkqhkiG9w0BAQsFAAOCAQEAQZrGOdTU 8YQ/FiXJACN7o3sO5fzY91nB+J6N4mjUSH43mSi628IHnLOAuH+zJFLr+njF0MfD jHYCC6jpDK0HMY1WkNJV3uJrfufYM4o4h34MQmKHElKc0AvS2NctGY+WGmnn8i15 eEdCDQU58q5S8naV9p2NSBV/tSn0g953cUS5pEGIHOrpssOy4CrmanpIyXrTpSqf w4iF34N3Eu7pObeYmmdb+JkyodFGGdI3kub4pLZxI2EbPLnNMV0kPfb7Ff5G0l72 gmeaC1jvV50V3nmSa8cfVIxWZruUu/zn2VWsAz4U6rrKbM7x0tXLdrqDZeeavrop gFwOZMNAbbWCpA== -----END CERTIFICATE-----Generated at Thu May 9 00:36:57 2024 by rpki-client on console-fra.rpki-client.org