$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer (raw, json) Hash identifier: 9S71uBrOiCPtAv4phC2w8yWzny2YPxJDo0iMWCvF5wc= Subject key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 540424BC4CD35A5A73253B5E6635FEC2A415E301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft caRepository: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jan 2024 21:48:29 +0000 Certificate not after: Tue 14 Jan 2025 21:53:29 +0000 Subordinate resources: IP: 103.231.120.0 -- 103.231.122.255 IP: 150.129.160.0/22 IP: 202.93.232.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:04:24:bc:4c:d3:5a:5a:73:25:3b:5e:66:35:fe:c2:a4:15:e3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 21:48:29 2024 GMT Not After : Jan 14 21:53:29 2025 GMT Subject: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:20:ff:bf:e9:20:ec:9a:92:a1:e4:e2:0e: 0e:09:7e:ef:85:de:f5:27:2a:37:eb:01:e3:77:3e: ed:e4:97:9e:68:1a:80:f1:c4:22:68:cf:d2:53:99: 58:f7:f4:98:e0:80:f6:4b:a8:1b:62:fe:8c:c0:12: e9:70:66:0d:90:21:c7:d9:e2:50:f2:7a:ae:6f:08: 4f:3f:52:ff:66:44:78:69:60:3a:13:3f:ef:02:87: 05:64:8f:da:91:df:b9:0e:ed:25:fa:8e:0d:b0:11: 3f:82:b3:34:ad:f5:56:56:b4:fc:c3:f8:aa:35:36: ae:c7:76:05:b8:24:9e:08:ab:db:95:e2:11:2a:66: 16:0e:d5:a5:08:66:64:e9:7b:97:55:8d:d5:00:49: 1e:8e:bc:58:17:c2:b9:d8:68:60:4b:8a:e2:31:55: 9f:18:47:a7:fe:53:0c:22:d7:5d:31:86:08:99:af: 08:0f:0a:75:1a:6d:83:7c:7f:ae:60:91:15:52:e0: f5:42:99:3b:06:94:9b:b2:7d:fe:e1:47:8f:84:dc: 7e:46:2e:99:0b:b2:13:3a:c4:60:b9:64:f7:32:03: a1:0a:81:b0:7e:55:26:3b:f9:a1:23:d1:83:fd:f3: 21:23:11:1a:39:08:9e:0b:19:9e:e0:43:25:3c:93: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.120.0-103.231.122.255 150.129.160.0/22 202.93.232.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:78:ad:97:81:dd:44:7e:71:19:4c:53:8e:29:e8:1a:93:12: ca:de:ce:f3:f5:cb:cb:91:b1:05:01:c3:55:a1:00:f0:79:22: be:c0:6b:31:e7:cd:ad:35:5c:cd:27:e2:4b:88:64:da:f7:1c: 4f:a5:b6:8f:67:e3:4a:f0:7f:3b:51:01:b2:b0:5b:55:03:79: e3:26:f8:61:fb:1f:46:a9:0a:5a:df:8b:46:64:c4:73:45:65: ce:79:4e:40:64:18:0a:4f:c0:60:dc:29:89:aa:c4:90:16:a6: 3a:09:cf:af:de:0c:10:61:0f:92:06:34:fd:0b:14:e5:36:ac: cd:30:fa:61:de:08:c4:a6:c8:8f:95:f7:3c:91:a4:e9:a8:09: 1e:e4:43:f3:50:46:f6:d2:3a:13:51:96:f8:fc:1c:5c:ea:9f: 30:a8:6d:f3:a4:08:c4:10:f7:ae:b1:15:66:cf:00:2d:20:66: 4e:7c:52:a3:60:68:09:e8:3b:ee:2d:a5:e6:88:93:6f:b3:d3: c7:6c:91:c4:84:9f:39:46:82:b3:91:dc:90:b9:ee:86:ec:14: 11:e7:b3:74:c4:74:b5:1e:4c:32:81:2b:f1:e8:77:80:03:60: 1c:57:4a:5f:16:35:19:a3:35:08:e1:d3:3e:96:00:60:da:83: 15:0d:60:ca -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUVAQkvEzTWlpzJTteZjX+wqQV4wEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNjIxNDgyOVoX DTI1MDExNDIxNTMyOVowMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkx QUUyQjgzRTQ2NjA0MTcxODAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCfIP+/6SDsmpKh5OIODgl+74Xe9ScqN+sB43c+7eSXnmgagPHEImjP0lOZ WPf0mOCA9kuoG2L+jMAS6XBmDZAhx9niUPJ6rm8ITz9S/2ZEeGlgOhM/7wKHBWSP 2pHfuQ7tJfqODbARP4KzNK31Vla0/MP4qjU2rsd2Bbgkngir25XiESpmFg7VpQhm ZOl7l1WN1QBJHo68WBfCudhoYEuK4jFVnxhHp/5TDCLXXTGGCJmvCA8KdRptg3x/ rmCRFVLg9UKZOwaUm7J9/uFHj4TcfkYumQuyEzrEYLlk9zIDoQqBsH5VJjv5oSPR g/3zISMRGjkIngsZnuBDJTyTZSMCAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC3cU/q/L9E80ska4rg+RmBBcYAwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0ZDQxMDAz LTEyYjAtNGU2YS1iMDg1LTU2YmMyZDE5ZGFhOC8wLzJEREM1M0ZBQkYyRkQxM0NE MkM5MUFFMkI4M0U0NjYwNDE3MTgwMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBow DAMEA2fneAMEAGfnegMEApaBoAMEA8pd6DANBgkqhkiG9w0BAQsFAAOCAQEAPHit l4HdRH5xGUxTjinoGpMSyt7O8/XLy5GxBQHDVaEA8HkivsBrMefNrTVczSfiS4hk 2vccT6W2j2fjSvB/O1EBsrBbVQN54yb4YfsfRqkKWt+LRmTEc0VlznlOQGQYCk/A YNwpiarEkBamOgnPr94MEGEPkgY0/QsU5TaszTD6Yd4IxKbIj5X3PJGk6agJHuRD 81BG9tI6E1GW+PwcXOqfMKht86QIxBD3rrEVZs8ALSBmTnxSo2BoCeg77i2l5oiT b7PTx2yRxISfOUaCs5HckLnuhuwUEeezdMR0tR5MMoEr8eh3gANgHFdKXxY1GaM1 COHTPpYAYNqDFQ1gyg== -----END CERTIFICATE-----Generated at Thu May 9 00:29:10 2024 by rpki-client on console-ams.rpki-client.org