$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer File: 2993EFF92300988A33773DD8C4B502F74B907112.cer (raw, json) Hash identifier: eBjJNM/udGMJx78jO3O0pPcsXv7VIQnuU4slSLC66SU= Subject key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2346363EF948518E1047778FE043E4F797EA3613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft caRepository: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Sep 2023 16:43:39 +0000 Certificate not after: Tue 10 Sep 2024 16:48:39 +0000 Subordinate resources: IP: 103.105.76.0/22 IP: 2402:2c40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:46:36:3e:f9:48:51:8e:10:47:77:8f:e0:43:e4:f7:97:ea:36:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 16:43:39 2023 GMT Not After : Sep 10 16:48:39 2024 GMT Subject: CN=2993EFF92300988A33773DD8C4B502F74B907112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:f3:c9:b9:d5:a5:92:6e:d5:18:2e:7a:70: 64:b7:8b:0d:26:2e:80:60:c8:b1:04:79:a4:4e:5b: cb:f5:35:5e:84:a4:65:4f:23:ab:0f:3b:42:a6:f7: da:75:a9:dc:84:47:11:3b:a3:ec:a0:54:82:29:6b: 67:69:91:00:6c:77:dd:45:c1:9e:13:06:e7:b9:77: 5e:27:57:35:04:0a:da:13:6f:4b:43:75:87:c3:d4: 9c:fc:ca:ef:d4:54:de:8c:57:96:33:fb:96:78:ee: 3a:e8:38:e7:c7:f3:96:af:55:a6:ca:07:3b:ec:19: f3:1d:3c:26:01:6e:fb:c5:45:8b:42:35:46:ef:c6: 9b:ca:6f:53:43:a5:b6:27:45:be:f1:bd:94:6b:fb: 6e:b5:ae:be:27:d1:5c:75:78:f5:fd:e1:fc:a8:cb: b3:0d:1e:f2:4a:6f:12:b6:9c:c4:fa:de:7a:fb:33: e8:9f:1f:d5:61:d1:2b:c2:eb:e8:68:87:45:41:bb: 74:db:45:63:9a:3c:df:66:39:4f:72:3a:c3:a3:da: f4:ad:12:35:0a:1a:b1:ce:26:f0:84:46:49:0a:cc: f3:73:91:1e:cb:57:7f:4e:b5:8b:29:13:60:a7:a4: b9:dd:03:87:72:fb:75:fb:88:74:96:3f:ad:47:08: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.76.0/22 IPv6: 2402:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 93:1d:8a:12:aa:38:da:0a:98:d2:69:6b:65:cb:aa:ec:8f:8b: 21:ae:a8:e3:48:76:08:a9:23:64:5f:2a:77:44:e5:81:a8:11: b7:ea:57:03:78:43:db:10:9d:a3:f9:7e:f0:77:06:e1:db:1a: a3:c6:d6:a3:08:3e:e5:c9:76:33:5a:54:b2:ec:9e:fa:e4:ec: 9b:a8:cd:09:01:fe:22:33:76:a2:80:fd:15:fa:9f:cd:85:a4: 99:ab:f5:45:57:67:8f:f8:17:03:18:21:5b:d1:3a:e8:9b:c9: 0f:48:aa:7b:e9:d3:a3:e7:05:a2:aa:06:b5:9c:9b:42:ce:ca: 9a:25:ee:9d:c2:99:f8:49:21:4f:0c:fc:98:b6:46:2a:e8:d6: f6:b9:c0:ee:8d:bd:c7:a9:d1:83:58:6f:04:f9:9c:c4:a3:24: ec:64:19:dc:8d:30:95:44:30:3d:e4:59:57:a5:f9:6a:d9:1f: 03:a2:bd:3c:8c:a2:a9:7a:1c:a8:62:eb:a1:f5:01:dc:64:02: 53:c3:78:b8:44:f0:70:25:90:91:f7:64:11:88:5a:bf:3a:1f: 6b:c8:47:62:8c:ef:93:87:08:de:2c:ec:a0:f1:77:df:d3:b0: f5:f8:f0:8e:7c:88:12:f2:f5:b9:2c:a9:d0:16:69:a4:35:b7: ab:d7:dd:62 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUI0Y2PvlIUY4QR3eP4EPk95fqNhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMjE2NDMzOVoX DTI0MDkxMDE2NDgzOVowMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzcz REQ4QzRCNTAyRjc0QjkwNzExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtX88m51aWSbtUYLnpwZLeLDSYugGDIsQR5pE5by/U1XoSkZU8jqw87Qqb3 2nWp3IRHETuj7KBUgilrZ2mRAGx33UXBnhMG57l3XidXNQQK2hNvS0N1h8PUnPzK 79RU3oxXljP7lnjuOug458fzlq9VpsoHO+wZ8x08JgFu+8VFi0I1Ru/Gm8pvU0Ol tidFvvG9lGv7brWuvifRXHV49f3h/KjLsw0e8kpvEracxPreevsz6J8f1WHRK8Lr 6GiHRUG7dNtFY5o832Y5T3I6w6Pa9K0SNQoasc4m8IRGSQrM83ORHstXf061iykT YKekud0Dh3L7dfuIdJY/rUcIqXMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCmT7/kjAJiKM3c92MS1AvdLkHESMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3N2JjM2Qy LTRhYjMtNGNmYi05MjIyLTY2YzZlYTk0NDdlMy8wLzI5OTNFRkY5MjMwMDk4OEEz Mzc3M0REOEM0QjUwMkY3NEI5MDcxMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnaUwwDQQCAAIwBwMFACQCLEAwDQYJKoZIhvcNAQELBQADggEBAJMdihKqONoK mNJpa2XLquyPiyGuqONIdgipI2RfKndE5YGoEbfqVwN4Q9sQnaP5fvB3BuHbGqPG 1qMIPuXJdjNaVLLsnvrk7JuozQkB/iIzdqKA/RX6n82FpJmr9UVXZ4/4FwMYIVvR OuibyQ9Iqnvp06PnBaKqBrWcm0LOypol7p3CmfhJIU8M/Ji2Riro1va5wO6Nvcep 0YNYbwT5nMSjJOxkGdyNMJVEMD3kWVel+WrZHwOivTyMoql6HKhi66H1AdxkAlPD eLhE8HAlkJH3ZBGIWr86H2vIR2KM75OHCN4s7KDxd9/TsPX48I58iBLy9bksqdAW aaQ1t6vX3WI= -----END CERTIFICATE-----Generated at Tue May 7 16:42:34 2024 by rpki-client on console-ams.rpki-client.org