$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer File: 2985976A4B3081770748882703E16497964D05A6.cer (raw, json) Hash identifier: NqOnNB17+Kueo0AbJeYrEhYw6sY0+AMFuD9enFFqRo8= Subject key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F3CC53095ACC1BCEBE5F9D3496539CB3D8F7168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 14:57:44 +0000 Certificate not after: Mon 29 Jul 2024 15:02:44 +0000 Subordinate resources: IP: 103.197.92.0/22 IP: 2403:80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:c5:30:95:ac:c1:bc:eb:e5:f9:d3:49:65:39:cb:3d:8f:71:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 14:57:44 2023 GMT Not After : Jul 29 15:02:44 2024 GMT Subject: CN=2985976A4B3081770748882703E16497964D05A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:39:a4:a5:ed:b9:fc:ad:34:9e:94:a2:96: c6:6d:07:41:54:e1:0a:9a:75:61:3d:5c:76:b9:74: 8d:b3:f4:2e:74:45:70:9b:c0:ae:ae:ae:d6:6d:c8: 23:6b:f9:fb:31:6f:a1:c0:1c:36:f1:85:95:b7:8a: a8:c9:9e:37:6d:b8:54:f4:dd:ed:2a:13:90:89:cd: 97:0f:af:c8:e0:1d:ea:08:c7:2c:bd:e0:e6:6b:9a: 4e:e4:72:95:04:93:7e:ca:e5:13:fc:e6:00:66:0b: 18:6b:46:b9:26:b3:11:a4:b4:6e:8b:8b:48:bd:98: c1:08:59:43:14:43:7f:bd:1f:50:ec:c5:42:53:fb: 7f:c5:3f:66:2a:b5:78:6b:1e:db:c6:4a:dc:f2:1f: 39:31:60:7d:e2:8b:96:5d:2e:2a:e7:e0:ea:b1:85: 34:94:fe:de:b4:c8:2b:4d:50:37:77:49:bb:91:ed: 42:d3:63:e0:bd:1b:2c:51:61:74:b2:76:9b:c1:0d: 03:6e:86:72:9e:0b:ff:00:ec:aa:ff:1f:cf:2c:52: 9d:82:56:59:e3:3b:e2:c6:97:f4:be:bb:bd:28:d0: d7:0b:b3:97:89:6e:79:8f:70:12:de:4c:b3:db:da: b8:fb:ca:48:34:f9:bc:1c:a3:dd:64:fb:af:b1:f5: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.92.0/22 IPv6: 2403:80::/32 Signature Algorithm: sha256WithRSAEncryption 5f:22:73:f1:40:9f:aa:fe:14:3e:65:50:e9:00:05:87:20:77: dd:f3:73:40:21:18:8b:6f:97:64:88:96:69:2b:7f:4a:13:21: bf:f3:68:fa:34:ec:13:96:a6:c8:e2:6e:dd:7b:34:70:c9:51: f3:4b:97:59:fb:30:3f:8f:94:6c:a7:36:3b:e6:b1:f7:59:98: 55:5d:e7:02:1c:01:89:80:f1:02:cc:04:17:2d:ea:fb:fe:ba: bc:10:1a:f8:ec:a2:48:d8:1f:af:5f:05:cb:0a:4e:8c:e0:0b: 7c:a8:af:07:a1:69:03:7f:c7:31:81:81:2f:dc:53:e9:4b:68: 2b:cc:28:e1:3f:8c:0d:b8:96:cf:4b:93:63:b1:fe:db:51:2c: a3:b0:bf:63:5b:f6:d9:5b:e3:66:f8:c9:53:a4:2b:1a:91:23: ec:71:0c:73:28:8a:40:0c:3f:8d:f4:85:73:42:ef:b9:e8:80: dd:e9:b3:53:62:d4:a6:56:4b:2c:fa:db:5f:d8:e9:e0:fe:d6: db:2a:f6:ce:c5:9d:ab:cc:a4:92:84:dd:6f:51:e7:8e:a6:8d: e0:a7:00:ef:3d:ed:fe:90:10:3d:43:eb:83:49:55:11:ea:ed: 7d:71:f7:ed:58:52:6c:cf:41:4d:36:1b:21:a0:68:54:1d:14: b4:70:77:18 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUXzzFMJWswbzr5fnTSWU5yz2PcWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTE0NTc0NFoX DTI0MDcyOTE1MDI0NFowMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4 ODI3MDNFMTY0OTc5NjREMDVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPOOaSl7bn8rTSelKKWxm0HQVThCpp1YT1cdrl0jbP0LnRFcJvArq6u1m3I I2v5+zFvocAcNvGFlbeKqMmeN224VPTd7SoTkInNlw+vyOAd6gjHLL3g5muaTuRy lQSTfsrlE/zmAGYLGGtGuSazEaS0bouLSL2YwQhZQxRDf70fUOzFQlP7f8U/Ziq1 eGse28ZK3PIfOTFgfeKLll0uKufg6rGFNJT+3rTIK01QN3dJu5HtQtNj4L0bLFFh dLJ2m8ENA26Gcp4L/wDsqv8fzyxSnYJWWeM74saX9L67vSjQ1wuzl4lueY9wEt5M s9vauPvKSDT5vByj3WT7r7H1BbcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCmFl2pLMIF3B0iIJwPhZJeWTQWmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlZDEwMGRm LTA0NDEtNDM4MS1hM2ZhLTU4N2RiOWU5YzJmMC8wLzI5ODU5NzZBNEIzMDgxNzcw NzQ4ODgyNzAzRTE2NDk3OTY0RDA1QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnxVwwDQQCAAIwBwMFACQDAIAwDQYJKoZIhvcNAQELBQADggEBAF8ic/FAn6r+ FD5lUOkABYcgd93zc0AhGItvl2SIlmkrf0oTIb/zaPo07BOWpsjibt17NHDJUfNL l1n7MD+PlGynNjvmsfdZmFVd5wIcAYmA8QLMBBct6vv+urwQGvjsokjYH69fBcsK TozgC3yorwehaQN/xzGBgS/cU+lLaCvMKOE/jA24ls9Lk2Ox/ttRLKOwv2Nb9tlb 42b4yVOkKxqRI+xxDHMoikAMP430hXNC77nogN3ps1Ni1KZWSyz621/Y6eD+1tsq 9s7FnavMpJKE3W9R546mjeCnAO897f6QED1D64NJVRHq7X1x9+1YUmzPQU02GyGg aFQdFLRwdxg= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org