$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer File: 2993EFF92300988A33773DD8C4B502F74B907112.cer (raw, json) Hash identifier: U9UqwKJmSaJqMOtPrLmmz4W8vvOaWB1jXX7M3d88NSg= Subject key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E7CBD21BAEA69EFA9FFC9D5080489E537A41BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft caRepository: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 Aug 2024 22:49:43 +0000 Certificate not after: Tue 12 Aug 2025 22:54:43 +0000 Subordinate resources: IP: 103.105.76.0/22 IP: 2402:2c40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7c:bd:21:ba:ea:69:ef:a9:ff:c9:d5:08:04:89:e5:37:a4:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Aug 13 22:49:43 2024 GMT Not After : Aug 12 22:54:43 2025 GMT Subject: CN=2993EFF92300988A33773DD8C4B502F74B907112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:f3:c9:b9:d5:a5:92:6e:d5:18:2e:7a:70: 64:b7:8b:0d:26:2e:80:60:c8:b1:04:79:a4:4e:5b: cb:f5:35:5e:84:a4:65:4f:23:ab:0f:3b:42:a6:f7: da:75:a9:dc:84:47:11:3b:a3:ec:a0:54:82:29:6b: 67:69:91:00:6c:77:dd:45:c1:9e:13:06:e7:b9:77: 5e:27:57:35:04:0a:da:13:6f:4b:43:75:87:c3:d4: 9c:fc:ca:ef:d4:54:de:8c:57:96:33:fb:96:78:ee: 3a:e8:38:e7:c7:f3:96:af:55:a6:ca:07:3b:ec:19: f3:1d:3c:26:01:6e:fb:c5:45:8b:42:35:46:ef:c6: 9b:ca:6f:53:43:a5:b6:27:45:be:f1:bd:94:6b:fb: 6e:b5:ae:be:27:d1:5c:75:78:f5:fd:e1:fc:a8:cb: b3:0d:1e:f2:4a:6f:12:b6:9c:c4:fa:de:7a:fb:33: e8:9f:1f:d5:61:d1:2b:c2:eb:e8:68:87:45:41:bb: 74:db:45:63:9a:3c:df:66:39:4f:72:3a:c3:a3:da: f4:ad:12:35:0a:1a:b1:ce:26:f0:84:46:49:0a:cc: f3:73:91:1e:cb:57:7f:4e:b5:8b:29:13:60:a7:a4: b9:dd:03:87:72:fb:75:fb:88:74:96:3f:ad:47:08: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.76.0/22 IPv6: 2402:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 15:65:a5:a9:a0:07:9c:97:1f:04:91:85:35:b3:32:68:b3:49: 45:78:cd:bd:fa:1a:38:61:55:45:a2:2f:84:3e:4a:87:b6:24: 14:72:4a:21:d7:f8:48:3c:9b:ce:cc:f3:dd:d0:42:2f:90:a8: 89:95:a8:24:6d:8d:7c:27:c3:2f:a3:6f:de:10:88:2f:d0:b4: 44:73:96:72:78:36:b8:b8:2a:c8:f2:8d:44:d2:c8:4f:4e:46: bd:69:01:54:06:7f:6d:79:d6:51:8e:f4:51:b8:50:3f:9f:3e: e4:18:b3:4c:ea:73:8a:c3:86:29:64:c8:86:13:1e:6f:f4:b3: 0c:eb:78:b5:56:4c:b0:8d:4e:a0:36:c7:3a:16:b9:03:6d:bf: 47:7a:ac:22:29:b9:8d:89:44:50:c8:c7:59:b2:f8:d9:76:5c: cd:76:85:3e:52:ae:b0:ad:0e:70:6e:83:aa:54:ab:62:47:8a: f9:d6:ce:47:f7:e9:1b:0c:55:69:b8:ad:c0:95:41:1d:18:df: d2:99:79:a7:10:fd:77:82:8f:d6:2c:ec:de:8e:85:c4:7f:ed: 20:5f:d7:d5:9a:47:88:f8:11:19:de:a5:e3:26:91:2f:fc:26: 4a:f1:1f:e6:6c:ab:00:f6:b9:4d:3c:45:7e:8c:29:df:dd:47: 51:0c:ac:c0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUfny9Ibrqae+p/8nVCASJ5TekG74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMzIyNDk0M1oX DTI1MDgxMjIyNTQ0M1owMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzcz REQ4QzRCNTAyRjc0QjkwNzExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtX88m51aWSbtUYLnpwZLeLDSYugGDIsQR5pE5by/U1XoSkZU8jqw87Qqb3 2nWp3IRHETuj7KBUgilrZ2mRAGx33UXBnhMG57l3XidXNQQK2hNvS0N1h8PUnPzK 79RU3oxXljP7lnjuOug458fzlq9VpsoHO+wZ8x08JgFu+8VFi0I1Ru/Gm8pvU0Ol tidFvvG9lGv7brWuvifRXHV49f3h/KjLsw0e8kpvEracxPreevsz6J8f1WHRK8Lr 6GiHRUG7dNtFY5o832Y5T3I6w6Pa9K0SNQoasc4m8IRGSQrM83ORHstXf061iykT YKekud0Dh3L7dfuIdJY/rUcIqXMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCmT7/kjAJiKM3c92MS1AvdLkHESMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3N2JjM2Qy LTRhYjMtNGNmYi05MjIyLTY2YzZlYTk0NDdlMy8wLzI5OTNFRkY5MjMwMDk4OEEz Mzc3M0REOEM0QjUwMkY3NEI5MDcxMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnaUwwDQQCAAIwBwMFACQCLEAwDQYJKoZIhvcNAQELBQADggEBABVlpamgB5yX HwSRhTWzMmizSUV4zb36GjhhVUWiL4Q+Soe2JBRySiHX+Eg8m87M893QQi+QqImV qCRtjXwnwy+jb94QiC/QtERzlnJ4Nri4KsjyjUTSyE9ORr1pAVQGf2151lGO9FG4 UD+fPuQYs0zqc4rDhilkyIYTHm/0swzreLVWTLCNTqA2xzoWuQNtv0d6rCIpuY2J RFDIx1my+Nl2XM12hT5SrrCtDnBug6pUq2JHivnWzkf36RsMVWm4rcCVQR0Y39KZ eacQ/XeCj9Ys7N6OhcR/7SBf19WaR4j4ERnepeMmkS/8JkrxH+ZsqwD2uU08RX6M Kd/dR1EMrMA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:39:33 2025 by rpki-client