$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer File: 28612772543E43335B080C32808B7FDC277E71E4.cer (raw, json) Hash identifier: WItsFbnRXAue/Y2UFMUwg/wNCoqep7zybeqddpw6+n0= Subject key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D8F0E882C413743AE80777F9BB500B560E4D600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Oct 2023 02:41:43 +0000 Certificate not after: Thu 10 Oct 2024 02:46:43 +0000 Subordinate resources: IP: 103.115.164.0/24 IP: 103.121.122.0/24 IP: 103.133.56.0/24 IP: 103.142.21.0/24 IP: 2001:df7:9b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8f:0e:88:2c:41:37:43:ae:80:77:7f:9b:b5:00:b5:60:e4:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 02:41:43 2023 GMT Not After : Oct 10 02:46:43 2024 GMT Subject: CN=28612772543E43335B080C32808B7FDC277E71E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:a4:6d:85:a5:57:34:a7:cd:9f:27:fd:fb: 79:a5:df:0c:16:68:39:4d:ff:29:a5:8f:6d:29:44: 69:19:08:a1:ae:b8:ce:a4:c6:ab:c0:3a:1e:da:3a: 23:82:c0:04:f8:0b:23:59:68:7c:2b:8d:83:a4:f6: e8:0e:16:a4:51:3a:52:87:d5:e2:3a:48:02:eb:3d: c0:f9:c0:ff:cd:b5:b2:4f:32:29:1b:17:2d:25:21: 45:84:11:87:f1:a8:74:cc:92:21:04:c7:85:63:cd: c3:2f:10:6b:71:78:fd:53:a1:42:f0:e1:54:df:31: 2b:5b:fd:09:1b:ee:15:ce:d6:6e:a7:27:50:18:e1: c2:4f:17:5e:35:8c:2c:49:20:dd:20:74:bc:44:f1: 57:db:73:a4:1e:28:44:e2:62:cc:29:33:15:24:c3: 66:8a:56:f7:94:b3:53:e4:39:77:8f:2e:aa:e1:fa: 70:e8:0f:ab:dd:cc:37:1f:b6:16:94:5b:02:58:06: b6:b6:90:d4:e4:48:72:b7:01:c8:33:66:4c:d2:cb: 31:74:82:6e:13:76:25:4b:df:56:71:94:e0:7c:6c: 6d:f1:c0:c4:fc:82:c3:24:73:bb:57:03:86:25:cc: e6:5a:47:8d:34:ec:88:6c:e7:16:dc:c9:8a:f4:9e: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.164.0/24 103.121.122.0/24 103.133.56.0/24 103.142.21.0/24 IPv6: 2001:df7:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 6e:77:8b:29:73:c7:86:eb:20:21:53:a0:a1:8a:ab:42:17:cb: 01:a5:18:1f:94:25:43:47:58:b9:d3:69:a1:4e:16:4c:6b:28: 58:b0:80:4e:5c:1d:2a:c2:b9:ca:48:42:15:95:a2:74:61:bb: f9:e5:75:68:cb:3b:fd:ed:5e:35:23:97:9f:e3:b2:f3:24:a4: 92:2c:89:ed:84:69:ea:51:26:8a:b9:17:97:98:e6:8a:57:c6: c1:8b:c9:fa:dc:38:6d:77:f5:a0:9b:97:5e:14:b0:15:96:a5: 99:58:12:bb:cf:05:a0:2e:41:c3:21:cd:72:cc:63:92:b1:88: 8f:a6:14:8b:0e:a7:d1:84:fc:72:9a:49:6d:65:34:99:79:e4: 75:9b:09:da:5f:73:4f:f1:bd:21:6f:32:fb:c6:aa:8c:7f:0a: af:4f:5e:5a:56:a9:a0:3e:39:39:eb:06:73:2e:5e:7f:69:94: 61:37:92:96:4e:c5:48:27:07:76:0f:51:04:9e:4d:81:9f:0f: 71:ca:3a:61:6b:89:31:72:ca:84:1c:42:79:f3:dc:2f:9f:08: 86:c1:67:86:9e:d9:ee:91:13:f8:90:64:30:d1:82:f7:27:a3: 08:b7:df:1c:61:8f:67:4c:f9:c9:91:4c:e1:d8:b2:7c:9c:42: 25:99:bd:37 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUfY8OiCxBN0OugHd/m7UAtWDk1gAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjAyNDE0M1oX DTI0MTAxMDAyNDY0M1owMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgw QzMyODA4QjdGREMyNzdFNzFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM54pG2FpVc0p82fJ/37eaXfDBZoOU3/KaWPbSlEaRkIoa64zqTGq8A6Hto6 I4LABPgLI1lofCuNg6T26A4WpFE6UofV4jpIAus9wPnA/821sk8yKRsXLSUhRYQR h/GodMySIQTHhWPNwy8Qa3F4/VOhQvDhVN8xK1v9CRvuFc7WbqcnUBjhwk8XXjWM LEkg3SB0vETxV9tzpB4oROJizCkzFSTDZopW95SzU+Q5d48uquH6cOgPq93MNx+2 FpRbAlgGtraQ1ORIcrcByDNmTNLLMXSCbhN2JUvfVnGU4HxsbfHAxPyCwyRzu1cD hiXM5lpHjTTsiGznFtzJivSezJsCAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChhJ3JUPkMzWwgMMoCLf9wnfnHkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiMTMwYjc1 LTQ1OTMtNDE0MS1hMDZmLTU3YTIyYTAyM2RkMC8wLzI4NjEyNzcyNTQzRTQzMzM1 QjA4MEMzMjgwOEI3RkRDMjc3RTcxRTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BABnc6QDBABneXoDBABnhTgDBABnjhUwDwQCAAIwCQMHACABDfebADANBgkqhkiG 9w0BAQsFAAOCAQEAbneLKXPHhusgIVOgoYqrQhfLAaUYH5QlQ0dYudNpoU4WTGso WLCATlwdKsK5ykhCFZWidGG7+eV1aMs7/e1eNSOXn+Oy8ySkkiyJ7YRp6lEmirkX l5jmilfGwYvJ+tw4bXf1oJuXXhSwFZalmVgSu88FoC5BwyHNcsxjkrGIj6YUiw6n 0YT8cppJbWU0mXnkdZsJ2l9zT/G9IW8y+8aqjH8Kr09eWlapoD45OesGcy5ef2mU YTeSlk7FSCcHdg9RBJ5NgZ8Pcco6YWuJMXLKhBxCefPcL58IhsFnhp7Z7pET+JBk MNGC9yejCLffHGGPZ0z5yZFM4diyfJxCJZm9Nw== -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org