$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer (raw, json) Hash identifier: 4q4U6D1kfOyhpRvzpoNdFeUHAiHywm6OcA02pDkSYyc= Subject key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14D15915E0F4995E3BFF25A03322279D27EF1964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 May 2024 06:38:39 +0000 Certificate not after: Fri 09 May 2025 06:43:39 +0000 Subordinate resources: IP: 103.189.166.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d1:59:15:e0:f4:99:5e:3b:ff:25:a0:33:22:27:9d:27:ef:19:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: May 10 06:38:39 2024 GMT Not After : May 9 06:43:39 2025 GMT Subject: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:18:95:12:48:e6:12:c2:b2:53:94:15:a2: fb:da:b1:c1:ac:c4:79:59:90:92:da:d4:1e:28:2d: 36:0c:cf:f1:02:3b:23:89:f3:d5:48:ba:3a:60:ee: b7:52:8f:2a:8c:1e:a1:9f:b3:0c:77:e6:59:3a:80: cc:aa:de:bf:2d:aa:59:9f:ab:55:73:4a:b5:8d:a9: 31:b4:dd:93:b6:1e:1d:88:f5:3d:79:aa:59:45:da: 58:c7:15:21:bd:9c:3b:2f:25:cb:60:44:df:b1:3f: b8:23:54:bf:45:ff:8e:e5:75:a9:4e:de:a8:82:41: bb:d5:d6:ea:74:bf:cd:de:f0:b3:00:8a:11:39:a7: 8a:9c:50:82:a7:6e:b1:7b:20:29:9f:15:e7:c0:bf: 6c:9b:7f:42:88:d2:64:47:14:68:e8:2a:cd:a9:a8: 83:fd:81:49:04:09:89:f3:7f:02:fd:0c:1e:11:f9: 73:8e:43:ff:06:1f:4a:e1:cb:e7:ed:d9:d8:0f:3a: ac:cd:5a:49:86:52:4f:b2:dc:f3:ef:93:7d:50:14: 6c:fc:04:78:60:17:4d:54:66:27:99:49:34:9d:f9: 85:76:66:fa:21:0e:43:04:58:52:0e:f5:75:a2:1c: 15:ec:08:6b:a8:5c:58:f3:46:4b:ec:ba:f6:e5:fa: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.166.0/23 Signature Algorithm: sha256WithRSAEncryption 29:52:2b:71:4f:0b:19:e9:60:78:ed:50:16:8c:f7:99:8e:65: 60:00:0d:0c:63:7d:b5:3f:61:f2:e0:29:82:bc:eb:d1:14:05: 65:07:59:94:c2:4a:5b:d2:a2:12:27:9f:bc:d9:61:b6:5a:54: 26:41:fe:e5:e4:85:c7:f0:03:ee:41:2d:a1:06:27:94:75:7a: e6:b6:ac:9b:b4:e7:7e:8e:a3:37:c9:37:2a:63:c9:eb:5d:36: 6c:61:af:fe:5b:a7:06:3b:44:df:ec:2a:bb:22:2a:e0:a1:17: 0d:a7:c7:4f:ba:98:1d:e7:35:f0:2f:7a:26:8e:a8:68:e0:e8: c8:4d:77:c9:86:ae:8c:70:47:cf:e7:92:94:6e:b0:0f:53:14: 86:6f:8e:cc:0b:4f:4a:40:c0:f6:23:33:ad:e2:a5:93:b5:77: 1b:47:c1:92:ba:11:30:dc:4a:ee:d2:4f:7e:56:06:36:3f:2c: 35:26:a0:63:ee:4c:32:d6:d7:5d:2a:b2:ec:d3:ea:d1:40:5e: f8:a5:77:41:1a:c9:25:11:4f:28:6e:dc:a1:e1:6a:73:0a:5b: c6:38:cf:6b:e2:74:82:43:9d:8c:61:c8:02:ea:72:83:af:a2: 8b:6d:6f:87:fe:49:61:e2:6d:63:55:16:4b:83:0f:eb:c9:6c: 4f:a7:38:5a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFNFZFeD0mV47/yWgMyInnSfvGWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMDA2MzgzOVoX DTI1MDUwOTA2NDMzOVowMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNC N0UzRkM2RDFBQkQyRDEzN0Q1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVWGJUSSOYSwrJTlBWi+9qxwazEeVmQktrUHigtNgzP8QI7I4nz1Ui6OmDu t1KPKoweoZ+zDHfmWTqAzKrevy2qWZ+rVXNKtY2pMbTdk7YeHYj1PXmqWUXaWMcV Ib2cOy8ly2BE37E/uCNUv0X/juV1qU7eqIJBu9XW6nS/zd7wswCKETmnipxQgqdu sXsgKZ8V58C/bJt/QojSZEcUaOgqzamog/2BSQQJifN/Av0MHhH5c45D/wYfSuHL 5+3Z2A86rM1aSYZST7Lc8++TfVAUbPwEeGAXTVRmJ5lJNJ35hXZm+iEOQwRYUg71 daIcFewIa6hcWPNGS+y69uX6MQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCfGqIQXZBhRktO34/xtGr0tE31RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMzBhYzY0 LTBmMTMtNDE2Mi05NjhmLWFmZTVjYzcxNGNmNi8wLzI3QzZBODg0MTc2NDE4NTE5 MkQzQjdFM0ZDNkQxQUJEMkQxMzdENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvaYwDQYJKoZIhvcNAQELBQADggEBAClSK3FPCxnpYHjtUBaM95mOZWAADQxj fbU/YfLgKYK869EUBWUHWZTCSlvSohInn7zZYbZaVCZB/uXkhcfwA+5BLaEGJ5R1 eua2rJu0536OozfJNypjyetdNmxhr/5bpwY7RN/sKrsiKuChFw2nx0+6mB3nNfAv eiaOqGjg6MhNd8mGroxwR8/nkpRusA9TFIZvjswLT0pAwPYjM63ipZO1dxtHwZK6 ETDcSu7ST35WBjY/LDUmoGPuTDLW110qsuzT6tFAXvild0EaySURTyhu3KHhanMK W8Y4z2vidIJDnYxhyALqcoOvoottb4f+SWHibWNVFkuDD+vJbE+nOFo= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:42 2025 by rpki-client