$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer (raw, json) Hash identifier: kqlChoO1M9qp+rFWKpwslYB88wHNpNE7w/QbYRKsfxE= Subject key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59437F1AD759F22BE7D340FA181B6BBF4D39BC06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 22 Jul 2023 12:00:10 +0000 Certificate not after: Sat 20 Jul 2024 12:05:10 +0000 Subordinate resources: IP: 103.231.112.0/22 IP: 202.8.28.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:43:7f:1a:d7:59:f2:2b:e7:d3:40:fa:18:1b:6b:bf:4d:39:bc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 22 12:00:10 2023 GMT Not After : Jul 20 12:05:10 2024 GMT Subject: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:ef:a3:2c:2a:0f:53:77:11:cf:2e:17:17: da:17:b4:5b:d7:ff:63:63:28:4a:82:ac:64:80:94: 4b:6b:dd:8d:74:5a:24:cf:92:a6:68:b2:64:c8:76: fd:1a:29:af:28:82:bb:3e:b4:08:ec:7e:9b:c4:68: 1b:51:f7:01:cc:79:6d:56:90:1e:8b:17:e6:4c:47: 86:19:98:a8:f1:9e:e1:43:8b:22:52:b6:17:18:eb: 09:53:1a:60:6d:79:08:1b:46:dd:0f:54:32:c1:26: b2:80:c5:76:b7:41:9a:24:0f:84:60:fe:44:dd:85: 29:39:75:44:d5:60:2b:39:91:0f:3a:ea:80:f4:04: 4f:00:97:8b:77:6f:3c:76:03:69:54:f0:42:5a:aa: e9:e2:55:1f:29:b7:60:5f:30:cc:95:02:6b:10:eb: e1:00:2b:45:fd:42:f3:83:5d:da:0c:86:e5:f4:bb: 02:1a:fb:05:a7:04:c4:ba:b1:9e:26:d9:6c:d3:c2: 10:c8:ce:99:5e:f9:df:4e:df:bf:df:00:50:4f:cb: d8:86:3e:30:26:b5:7b:80:89:8d:dd:6a:78:8e:70: af:7c:ff:bd:a2:f3:7a:29:ad:5e:13:5e:92:e7:38: 57:b9:de:22:37:12:20:ce:dd:76:83:27:5b:7e:72: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.112.0/22 202.8.28.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:20:e5:80:4a:61:92:65:6d:a8:44:ac:84:c1:4b:55:33:1e: 6e:70:46:36:3d:5d:52:b7:a2:80:e9:1f:2d:eb:de:ae:93:31: 83:3a:42:f8:04:6b:ce:77:77:84:5b:73:c7:cd:30:19:99:41: ab:38:94:49:06:d3:2b:42:6d:9e:de:9a:41:aa:4d:14:17:5b: c4:a0:09:62:f1:9a:74:fc:58:3b:16:c5:cf:76:2e:df:87:c0: 50:14:45:21:9e:aa:c8:94:ba:c7:5b:2f:2a:52:05:59:e6:f3: de:84:67:2d:66:57:93:91:f7:22:a6:43:4c:c3:26:34:37:92: a8:95:30:36:24:ad:43:87:07:29:d9:e8:8f:f0:c9:9b:b3:e5: 00:e6:3f:4a:82:d8:fc:d4:7c:33:f6:4e:e1:31:ea:51:9f:d6: a5:37:e7:40:7d:75:a9:ea:f5:92:c6:00:3b:5b:fd:e0:d4:3a: d1:5f:7f:10:be:48:a1:56:1d:cb:ea:54:72:b1:70:dc:ea:1e: 57:9a:08:4e:20:64:6f:7f:b5:a7:43:31:1d:40:62:62:96:72: 4e:77:8a:4e:dc:af:e2:43:20:c4:ed:6e:c8:c1:eb:45:df:a9: 95:df:26:b4:99:fd:8f:0a:5a:6a:f4:0d:53:bd:d7:0e:7e:71: 37:44:ad:13 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUWUN/GtdZ8ivn00D6GBtrv005vAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyMjEyMDAxMFoX DTI0MDcyMDEyMDUxMFowMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4 OEY3ODZEOUYwRjBDODhFNEJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvb76MsKg9TdxHPLhcX2he0W9f/Y2MoSoKsZICUS2vdjXRaJM+SpmiyZMh2 /RopryiCuz60COx+m8RoG1H3Acx5bVaQHosX5kxHhhmYqPGe4UOLIlK2FxjrCVMa YG15CBtG3Q9UMsEmsoDFdrdBmiQPhGD+RN2FKTl1RNVgKzmRDzrqgPQETwCXi3dv PHYDaVTwQlqq6eJVHym3YF8wzJUCaxDr4QArRf1C84Nd2gyG5fS7Ahr7BacExLqx nibZbNPCEMjOmV75307fv98AUE/L2IY+MCa1e4CJjd1qeI5wr3z/vaLzeimtXhNe kuc4V7neIjcSIM7ddoMnW35y6OcCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDcZZ9+9IDov1E6I94bZ8PDIjkupMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYjhiODg5 LTNiM2QtNGVmNS1hZDcwLTViMTA0NWVmZjM5My8wLzM3MTk2N0RGQkQyMDNBMkZE NDRFODhGNzg2RDlGMEYwQzg4RTRCQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJn53ADBAHKCBwwDQYJKoZIhvcNAQELBQADggEBAFwg5YBKYZJlbahErITBS1Uz Hm5wRjY9XVK3ooDpHy3r3q6TMYM6QvgEa853d4Rbc8fNMBmZQas4lEkG0ytCbZ7e mkGqTRQXW8SgCWLxmnT8WDsWxc92Lt+HwFAURSGeqsiUusdbLypSBVnm896EZy1m V5OR9yKmQ0zDJjQ3kqiVMDYkrUOHBynZ6I/wyZuz5QDmP0qC2PzUfDP2TuEx6lGf 1qU350B9danq9ZLGADtb/eDUOtFffxC+SKFWHcvqVHKxcNzqHleaCE4gZG9/tadD MR1AYmKWck53ik7cr+JDIMTtbsjB60XfqZXfJrSZ/Y8KWmr0DVO91w5+cTdErRM= -----END CERTIFICATE-----Generated at Wed May 8 09:50:28 2024 by rpki-client on console-fra.rpki-client.org