$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer File: 2D0745D26E59440CB71FAFE996834493DA753248.cer (raw, json) Hash identifier: 3/Uf9MRSPR88V5t2CwNIjgKkMG7R7HZgR9cLDDQqs9o= Subject key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0AA5AB5442CD401D167BCDC30ED24A1048E955CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Oct 2023 08:09:22 +0000 Certificate not after: Thu 03 Oct 2024 08:14:22 +0000 Subordinate resources: IP: 103.73.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:ab:54:42:cd:40:1d:16:7b:cd:c3:0e:d2:4a:10:48:e9:55:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 5 08:09:22 2023 GMT Not After : Oct 3 08:14:22 2024 GMT Subject: CN=2D0745D26E59440CB71FAFE996834493DA753248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:b0:88:fc:a3:11:f9:06:1e:60:5f:80:79: b4:cb:7d:4b:80:77:cc:29:7a:08:0c:0e:fd:62:94: c7:58:e8:f1:81:10:ca:e0:5d:a3:1c:c2:5a:87:f5: b0:c4:db:3c:ee:b3:78:4b:b3:db:7b:48:72:5f:9e: dc:60:4e:2e:a1:0d:c7:44:ea:5f:01:fd:02:cb:38: 35:97:a2:b0:75:59:13:22:9c:c8:4d:c4:c0:53:15: 6d:d6:b7:f9:7e:0c:05:d4:3d:04:1b:c9:89:52:18: 0a:ca:d4:9e:9e:1e:29:90:6c:65:3f:5f:c7:03:34: 46:1a:79:69:c7:32:05:86:1d:48:7a:59:76:0b:6e: 91:62:80:a4:9b:4a:ac:1a:35:1f:de:41:4a:8c:02: 3a:69:ac:03:00:3f:e6:78:05:0c:c4:80:a2:6e:17: 41:9d:bd:87:84:19:71:db:53:ce:92:df:a0:fb:82: b6:19:ea:2a:28:3c:59:57:20:62:43:67:a2:56:1d: b4:a0:c1:58:de:64:98:22:9a:c5:a2:c0:9c:6a:16: 09:32:2d:4f:53:92:f0:53:bc:ac:3f:0e:18:e7:7f: 17:19:db:da:9f:cd:b0:1a:88:48:b8:f7:88:bd:80: ec:2f:ab:f6:c0:a6:7b:08:bb:60:bc:d6:46:0f:87: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.158.0/23 Signature Algorithm: sha256WithRSAEncryption 07:6c:34:fb:9f:c3:e0:31:56:57:cc:cc:c7:af:74:c9:07:8d: 99:4f:93:e7:69:21:44:4c:f9:9a:be:e9:43:ee:56:06:bc:ad: 1e:6a:8b:ae:07:5f:f7:3d:c0:56:59:52:09:2c:70:a3:fe:db: 45:d0:9e:ee:5a:97:c6:74:30:b5:46:cb:53:97:33:a1:cd:7f: 10:0a:de:e3:1f:bc:0a:48:4d:c6:50:28:0a:d0:f4:d0:27:e2: 9d:83:fa:6e:f4:06:0b:34:d0:8b:2a:c9:cd:97:4d:87:a0:35: cd:22:3e:93:64:5c:2d:21:dd:f0:63:45:29:42:11:87:42:e2: cf:5d:0f:3b:58:a8:10:6a:dc:21:2a:8f:c1:3b:5b:d9:91:39: dc:bc:d9:de:25:49:eb:b8:38:a1:29:ea:33:54:ed:da:88:26: 6a:1c:64:52:77:2e:43:ca:80:4a:30:d3:c3:4d:b8:c2:16:73: ea:8f:d7:6d:82:c6:14:39:72:51:d3:32:17:56:4d:a0:2c:61: 2c:b9:9c:5a:7e:49:08:04:a3:43:5b:a6:67:3a:4e:01:5e:36: af:5a:07:56:27:bd:0e:dd:21:f8:0a:49:8c:8c:4b:15:72:67: f0:83:f1:13:29:e7:77:c6:05:d5:5b:77:e1:50:f0:d7:c5:10: 9f:fa:7d:d5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCqWrVELNQB0We83DDtJKEEjpVc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwNTA4MDkyMloX DTI0MTAwMzA4MTQyMlowMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZB RkU5OTY4MzQ0OTNEQTc1MzI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeXsIj8oxH5Bh5gX4B5tMt9S4B3zCl6CAwO/WKUx1jo8YEQyuBdoxzCWof1 sMTbPO6zeEuz23tIcl+e3GBOLqENx0TqXwH9Ass4NZeisHVZEyKcyE3EwFMVbda3 +X4MBdQ9BBvJiVIYCsrUnp4eKZBsZT9fxwM0Rhp5accyBYYdSHpZdgtukWKApJtK rBo1H95BSowCOmmsAwA/5ngFDMSAom4XQZ29h4QZcdtTzpLfoPuCthnqKig8WVcg YkNnolYdtKDBWN5kmCKaxaLAnGoWCTItT1OS8FO8rD8OGOd/Fxnb2p/NsBqISLj3 iL2A7C+r9sCmewi7YLzWRg+HdvUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC0HRdJuWUQMtx+v6ZaDRJPadTJIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDA2Y2Ri LTE3OTEtNDc4ZC05ZDI4LTllMzdhNmY4MDljYy8wLzJEMDc0NUQyNkU1OTQ0MENC NzFGQUZFOTk2ODM0NDkzREE3NTMyNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSZ4wDQYJKoZIhvcNAQELBQADggEBAAdsNPufw+AxVlfMzMevdMkHjZlPk+dp IURM+Zq+6UPuVga8rR5qi64HX/c9wFZZUgkscKP+20XQnu5al8Z0MLVGy1OXM6HN fxAK3uMfvApITcZQKArQ9NAn4p2D+m70Bgs00Isqyc2XTYegNc0iPpNkXC0h3fBj RSlCEYdC4s9dDztYqBBq3CEqj8E7W9mROdy82d4lSeu4OKEp6jNU7dqIJmocZFJ3 LkPKgEow08NNuMIWc+qP122CxhQ5clHTMhdWTaAsYSy5nFp+SQgEo0Nbpmc6TgFe Nq9aB1YnvQ7dIfgKSYyMSxVyZ/CD8RMp53fGBdVbd+FQ8NfFEJ/6fdU= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org