$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.cer (raw, json) Hash identifier: 5jJjIUNb3WOtofvh/pxGvzHdLQMWPXasDPEquJiXlts= Subject key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A6B893244D795ECB38720C6D746F3B0C1710783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft caRepository: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Jul 2023 13:28:50 +0000 Certificate not after: Wed 03 Jul 2024 13:33:50 +0000 Subordinate resources: IP: 103.188.168.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:89:32:44:d7:95:ec:b3:87:20:c6:d7:46:f3:b0:c1:71:07:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 5 13:28:50 2023 GMT Not After : Jul 3 13:33:50 2024 GMT Subject: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:70:93:f3:58:00:93:f3:b3:7e:11:32:dd: 9a:e5:5b:6a:26:99:3a:2c:de:a3:33:ef:b7:c4:c8: 74:f9:6b:c9:9d:18:94:e4:d6:a1:94:c1:70:b1:4e: 6b:53:95:92:2c:dd:da:8c:c0:9f:6e:42:d4:27:d1: c0:7e:cf:8e:68:6d:27:a2:16:bc:02:fb:cf:45:96: f9:9a:fa:5c:8c:9e:0d:ff:6b:64:06:6f:7a:79:e4: 67:7c:07:74:ee:c2:da:49:83:4d:3b:08:67:51:f9: be:4f:1e:3a:10:25:16:7a:02:c1:f8:99:7a:d2:a0: 43:a4:91:cd:25:e8:9b:e7:21:b2:72:a0:fd:4a:aa: 63:42:de:16:7e:c3:af:de:08:e1:a3:b7:52:27:db: d0:3e:8d:22:f1:88:92:40:1b:7c:3b:4c:45:5e:d4: be:a8:b6:cc:c9:f0:15:e0:6d:4e:f0:ba:80:6f:14: 92:90:29:71:0f:cc:3d:b0:c7:6e:9e:be:36:a4:7a: 2b:08:80:49:36:6b:bd:af:e9:db:b5:72:ab:52:1b: b8:47:e5:ca:b8:1a:1f:f4:27:ef:b5:32:dc:52:53: 93:2f:b7:40:b8:c5:6c:1b:03:e4:44:50:2f:be:8a: da:f2:6f:3c:c0:54:70:2c:74:07:d8:ce:dc:01:9f: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.168.0/23 Signature Algorithm: sha256WithRSAEncryption 80:db:ce:00:4f:c6:da:ce:c1:d1:53:41:80:74:de:97:60:81: f8:d3:9f:6b:a6:b3:86:b7:50:bf:1f:78:f3:20:b8:41:32:91: 7b:2c:fb:50:1a:18:b6:95:94:4b:35:c4:43:db:e2:b6:6c:3a: a5:85:a5:7b:b5:a6:86:00:8f:7f:e6:44:32:4a:de:5c:71:34: 8b:2e:30:19:43:76:32:8d:3f:58:30:51:9c:7e:d3:7e:7f:58: 35:72:49:b0:a3:48:2b:da:32:58:da:b8:6c:7d:7e:fc:a6:e4: 64:cb:f7:72:3d:58:6d:7a:2c:28:e0:ab:09:5b:f0:45:e4:23: d3:28:cf:f3:b9:51:78:e6:0a:f3:ba:04:ce:fc:2f:00:1a:61: 02:b5:65:b5:de:76:d7:bc:59:37:a5:db:2e:39:4c:37:b2:7d: 76:84:98:a3:22:01:6d:b5:b4:d5:36:e0:41:1f:a8:0c:b5:13: 69:c1:ad:91:70:f1:1b:11:5c:9f:c3:c2:2d:5b:33:63:a1:ca: 13:56:5d:3c:c4:8c:b1:e5:12:f5:ed:6e:6b:16:89:7e:5d:22: 60:5f:0b:a1:08:27:8a:b4:14:6f:15:49:dc:ab:7a:d8:fc:8f: fb:0c:f9:59:87:ba:25:5e:c8:68:29:41:80:5f:b2:07:97:88: d6:95:2d:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOmuJMkTXleyzhyDG10bzsMFxB4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcwNTEzMjg1MFoX DTI0MDcwMzEzMzM1MFowMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0 NzMyNUQ4RkRBNzZDQzQ5NzA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8acJPzWACT87N+ETLdmuVbaiaZOizeozPvt8TIdPlryZ0YlOTWoZTBcLFO a1OVkizd2ozAn25C1CfRwH7PjmhtJ6IWvAL7z0WW+Zr6XIyeDf9rZAZvennkZ3wH dO7C2kmDTTsIZ1H5vk8eOhAlFnoCwfiZetKgQ6SRzSXom+chsnKg/UqqY0LeFn7D r94I4aO3Uifb0D6NIvGIkkAbfDtMRV7Uvqi2zMnwFeBtTvC6gG8UkpApcQ/MPbDH bp6+NqR6KwiASTZrva/p27Vyq1IbuEflyrgaH/Qn77Uy3FJTky+3QLjFbBsD5ERQ L76K2vJvPMBUcCx0B9jO3AGfU6kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPvjtgeEqOeMl1HMl2P2nbMSXBAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wM2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzYWRlOWMw LWNkZTEtNDdmMC05Y2QyLTRhNTdiZGRlMTRlOC8wLzMzRUY4RUQ4MUUxMkEzOUUz MjVENDczMjVEOEZEQTc2Q0M0OTcwNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvKgwDQYJKoZIhvcNAQELBQADggEBAIDbzgBPxtrOwdFTQYB03pdggfjTn2um s4a3UL8fePMguEEykXss+1AaGLaVlEs1xEPb4rZsOqWFpXu1poYAj3/mRDJK3lxx NIsuMBlDdjKNP1gwUZx+035/WDVySbCjSCvaMljauGx9fvym5GTL93I9WG16LCjg qwlb8EXkI9Moz/O5UXjmCvO6BM78LwAaYQK1ZbXedte8WTel2y45TDeyfXaEmKMi AW21tNU24EEfqAy1E2nBrZFw8RsRXJ/Dwi1bM2OhyhNWXTzEjLHlEvXtbmsWiX5d ImBfC6EIJ4q0FG8VSdyretj8j/sM+VmHuiVeyGgpQYBfsgeXiNaVLWM= -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org