$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer (raw, json) Hash identifier: di6aFqh8dSspnm7kLsJjRx5D4jzkqOy6py9tmn0EBYU= Subject key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 268BCBE7C34823DF5711E1BAE19E1279C4D3A213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Jun 2023 02:08:22 +0000 Certificate not after: Fri 07 Jun 2024 02:13:22 +0000 Subordinate resources: IP: 103.189.166.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8b:cb:e7:c3:48:23:df:57:11:e1:ba:e1:9e:12:79:c4:d3:a2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 9 02:08:22 2023 GMT Not After : Jun 7 02:13:22 2024 GMT Subject: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:18:95:12:48:e6:12:c2:b2:53:94:15:a2: fb:da:b1:c1:ac:c4:79:59:90:92:da:d4:1e:28:2d: 36:0c:cf:f1:02:3b:23:89:f3:d5:48:ba:3a:60:ee: b7:52:8f:2a:8c:1e:a1:9f:b3:0c:77:e6:59:3a:80: cc:aa:de:bf:2d:aa:59:9f:ab:55:73:4a:b5:8d:a9: 31:b4:dd:93:b6:1e:1d:88:f5:3d:79:aa:59:45:da: 58:c7:15:21:bd:9c:3b:2f:25:cb:60:44:df:b1:3f: b8:23:54:bf:45:ff:8e:e5:75:a9:4e:de:a8:82:41: bb:d5:d6:ea:74:bf:cd:de:f0:b3:00:8a:11:39:a7: 8a:9c:50:82:a7:6e:b1:7b:20:29:9f:15:e7:c0:bf: 6c:9b:7f:42:88:d2:64:47:14:68:e8:2a:cd:a9:a8: 83:fd:81:49:04:09:89:f3:7f:02:fd:0c:1e:11:f9: 73:8e:43:ff:06:1f:4a:e1:cb:e7:ed:d9:d8:0f:3a: ac:cd:5a:49:86:52:4f:b2:dc:f3:ef:93:7d:50:14: 6c:fc:04:78:60:17:4d:54:66:27:99:49:34:9d:f9: 85:76:66:fa:21:0e:43:04:58:52:0e:f5:75:a2:1c: 15:ec:08:6b:a8:5c:58:f3:46:4b:ec:ba:f6:e5:fa: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.166.0/23 Signature Algorithm: sha256WithRSAEncryption 05:92:d2:fe:a4:72:46:a9:25:42:19:30:5e:d3:d9:7f:45:9b: 7f:d8:c6:52:46:79:89:bb:24:27:06:32:a3:7f:70:2f:bb:dc: 13:84:c7:a5:ba:ae:b7:69:1e:e6:1b:58:d8:9e:c8:37:bc:74: bd:00:5e:8f:dd:13:de:ab:33:02:c1:32:b9:d3:b5:f5:64:78: bc:6d:72:eb:db:4b:ef:90:2c:0c:c5:fc:c0:81:6a:d1:7b:b8: a7:49:77:95:3f:19:86:23:bb:33:5b:03:9d:d6:ee:b6:5f:e4: 94:4b:94:6c:8c:eb:78:43:d8:18:33:be:41:3a:83:54:85:39: ab:de:d9:ca:c4:fb:d6:51:3e:35:b7:e6:38:47:69:d1:fd:4c: 4d:1f:2d:40:64:db:65:6b:d5:3a:51:66:10:3c:1f:c0:54:f8: 82:ad:97:6b:0a:9a:76:83:56:bb:1f:3f:33:9c:12:5a:cb:03: 16:6f:12:de:54:c8:bf:ba:89:7e:29:e8:f2:58:f3:2d:00:71: 8f:ce:1e:75:ea:08:f7:53:aa:c1:a9:4e:15:28:50:19:91:65: 18:89:a1:76:13:1c:20:8a:8f:05:d4:05:e5:da:0d:92:d2:df: 9c:37:93:77:e9:e7:6b:68:ce:fc:0c:92:52:e2:cb:84:ce:95: c0:a5:28:80 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJovL58NII99XEeG64Z4SecTTohMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwOTAyMDgyMloX DTI0MDYwNzAyMTMyMlowMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNC N0UzRkM2RDFBQkQyRDEzN0Q1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVWGJUSSOYSwrJTlBWi+9qxwazEeVmQktrUHigtNgzP8QI7I4nz1Ui6OmDu t1KPKoweoZ+zDHfmWTqAzKrevy2qWZ+rVXNKtY2pMbTdk7YeHYj1PXmqWUXaWMcV Ib2cOy8ly2BE37E/uCNUv0X/juV1qU7eqIJBu9XW6nS/zd7wswCKETmnipxQgqdu sXsgKZ8V58C/bJt/QojSZEcUaOgqzamog/2BSQQJifN/Av0MHhH5c45D/wYfSuHL 5+3Z2A86rM1aSYZST7Lc8++TfVAUbPwEeGAXTVRmJ5lJNJ35hXZm+iEOQwRYUg71 daIcFewIa6hcWPNGS+y69uX6MQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCfGqIQXZBhRktO34/xtGr0tE31RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMzBhYzY0 LTBmMTMtNDE2Mi05NjhmLWFmZTVjYzcxNGNmNi8wLzI3QzZBODg0MTc2NDE4NTE5 MkQzQjdFM0ZDNkQxQUJEMkQxMzdENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvaYwDQYJKoZIhvcNAQELBQADggEBAAWS0v6kckapJUIZMF7T2X9Fm3/YxlJG eYm7JCcGMqN/cC+73BOEx6W6rrdpHuYbWNieyDe8dL0AXo/dE96rMwLBMrnTtfVk eLxtcuvbS++QLAzF/MCBatF7uKdJd5U/GYYjuzNbA53W7rZf5JRLlGyM63hD2Bgz vkE6g1SFOave2crE+9ZRPjW35jhHadH9TE0fLUBk22Vr1TpRZhA8H8BU+IKtl2sK mnaDVrsfPzOcElrLAxZvEt5UyL+6iX4p6PJY8y0AcY/OHnXqCPdTqsGpThUoUBmR ZRiJoXYTHCCKjwXUBeXaDZLS35w3k3fp52tozvwMklLiy4TOlcClKIA= -----END CERTIFICATE-----Generated at Wed May 8 18:12:05 2024 by rpki-client on console-fra.rpki-client.org