$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer File: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer (raw, json) Hash identifier: Vev0wGXl2DSkNk9YVRqPCry8jFJ2ZuKqLVzcGjOqrhw= Subject key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44361A108C3558EF8DC6B164BCA7355CD7B5A368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 06 Nov 2023 07:21:12 +0000 Certificate not after: Mon 04 Nov 2024 07:26:12 +0000 Subordinate resources: IP: 175.111.96.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:36:1a:10:8c:35:58:ef:8d:c6:b1:64:bc:a7:35:5c:d7:b5:a3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 07:21:12 2023 GMT Not After : Nov 4 07:26:12 2024 GMT Subject: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:31:be:83:c6:36:33:2a:e8:3b:d7:ab:d7: fe:69:3a:fd:7d:88:32:a3:8b:3d:b0:50:c7:78:68: 8a:22:22:bb:c2:b3:e9:4d:c9:0b:69:8c:0f:4b:6f: 3f:b1:18:f7:15:37:c8:a0:98:1a:d1:32:d7:c5:ef: 8a:72:9a:c1:2d:5d:ee:85:00:b1:fa:76:c1:27:15: b3:4f:fe:00:a4:2d:a0:40:90:68:6b:1c:09:3d:fb: e0:4b:93:1b:08:61:0a:42:e5:d5:d8:dc:60:16:b1: 15:6f:cb:6a:32:3a:27:2f:dc:d8:a5:d5:7b:32:65: 0c:29:82:43:e7:53:c5:3f:93:ec:e4:8d:d6:5b:46: 53:df:5e:d7:3f:bc:a2:f0:af:ed:59:92:47:04:7f: d7:bd:41:77:e5:9f:2a:b1:ce:52:9a:b5:07:46:a5: f2:79:57:45:e1:d9:5a:77:e9:67:87:67:26:a7:65: 23:18:80:d5:18:02:8d:18:4f:22:21:a5:59:2f:d9: f5:90:8b:ed:62:b6:ef:87:d9:0c:13:8c:ed:28:f5: b4:0f:3d:3f:71:36:d7:75:16:96:96:c5:cd:1a:5e: 70:f5:b6:8f:eb:3e:a0:0e:f7:9d:ee:85:78:45:e9: f7:8d:f1:94:3b:3f:a3:a2:a8:2e:78:82:e5:55:6b: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.96.0/24 Signature Algorithm: sha256WithRSAEncryption 03:9b:b8:fd:24:46:0b:50:97:c4:1a:1f:3a:50:3e:9c:cf:14: 24:8c:bf:c6:ec:82:6d:1c:da:a5:ab:92:7e:92:af:80:f1:40: 60:cf:83:d2:1f:4f:1a:fd:cf:4b:0e:fd:9e:ac:a7:f2:46:4f: 2e:5f:74:36:67:ef:39:74:7c:5e:24:9b:97:b0:be:62:6b:0a: eb:54:ec:8e:35:5a:de:47:c7:8c:8a:da:20:c0:6c:d1:8e:44: 47:35:e0:bd:0c:58:33:72:81:0d:9c:72:81:41:9c:23:ad:f4: 56:b3:77:46:e7:d3:1d:28:7c:71:b0:89:b2:61:76:ba:63:09: 8f:7b:30:c7:c5:66:83:6f:96:13:90:51:a7:0b:3f:24:89:43: 6f:c0:63:fc:0d:68:b4:46:a4:39:7a:41:ba:74:77:71:67:d4: c4:a2:5a:44:19:ef:e3:1f:50:bc:70:10:a9:aa:e3:5b:a7:39: 5c:26:c2:ee:9a:ae:a4:ce:20:d5:0f:90:0f:3c:37:1c:47:46: 81:79:4b:71:fb:47:c5:ba:db:a9:91:fa:9c:21:17:3c:37:cc: 0e:59:5b:ef:2a:69:77:f3:82:da:16:90:0b:4b:99:17:d4:b5: 75:82:cc:4b:df:d8:66:bc:1c:15:01:a2:0d:64:7f:58:61:74: 73:7f:29:a8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURDYaEIw1WO+NxrFkvKc1XNe1o2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNjA3MjExMloX DTI0MTEwNDA3MjYxMlowMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0Mz MERCMzNDM0JCRDhGMDUxODM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsIMb6DxjYzKug716vX/mk6/X2IMqOLPbBQx3hoiiIiu8Kz6U3JC2mMD0tv P7EY9xU3yKCYGtEy18XvinKawS1d7oUAsfp2wScVs0/+AKQtoECQaGscCT374EuT GwhhCkLl1djcYBaxFW/LajI6Jy/c2KXVezJlDCmCQ+dTxT+T7OSN1ltGU99e1z+8 ovCv7VmSRwR/171Bd+WfKrHOUpq1B0al8nlXReHZWnfpZ4dnJqdlIxiA1RgCjRhP IiGlWS/Z9ZCL7WK274fZDBOM7Sj1tA89P3E213UWlpbFzRpecPW2j+s+oA73ne6F eEXp943xlDs/o6KoLniC5VVrUYUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCeyzpb66OF2Ojww2zPDu9jwUYOLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1NTExYThh LTMwZGEtNDY3MC1hMDEwLTc5MjZkN2NkNTEwYi8wLzI3QjJDRTk2RkFFOEUxNzYz QTNDMzBEQjMzQzNCQkQ4RjA1MTgzOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACvb2AwDQYJKoZIhvcNAQELBQADggEBAAObuP0kRgtQl8QaHzpQPpzPFCSMv8bs gm0c2qWrkn6Sr4DxQGDPg9IfTxr9z0sO/Z6sp/JGTy5fdDZn7zl0fF4km5ewvmJr CutU7I41Wt5Hx4yK2iDAbNGOREc14L0MWDNygQ2ccoFBnCOt9Fazd0bn0x0ofHGw ibJhdrpjCY97MMfFZoNvlhOQUacLPySJQ2/AY/wNaLRGpDl6Qbp0d3Fn1MSiWkQZ 7+MfULxwEKmq41unOVwmwu6arqTOINUPkA88NxxHRoF5S3H7R8W626mR+pwhFzw3 zA5ZW+8qaXfzgtoWkAtLmRfUtXWCzEvf2Ga8HBUBog1kf1hhdHN/Kag= -----END CERTIFICATE-----Generated at Thu May 9 00:36:57 2024 by rpki-client on console-fra.rpki-client.org