$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer File: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer (raw, json) Hash identifier: qwwpOJ3QU0ojoh4hn6X3CMCw43PzXYFtRN4z2gcybyA= Subject key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03C4209FE73CE8076727BA33148C97BBDA7B8B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft caRepository: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 19:36:46 +0000 Certificate not after: Sun 13 Oct 2024 19:41:46 +0000 Subordinate resources: IP: 103.136.162.0/23 IP: 2404:97c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c4:20:9f:e7:3c:e8:07:67:27:ba:33:14:8c:97:bb:da:7b:8b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 19:36:46 2023 GMT Not After : Oct 13 19:41:46 2024 GMT Subject: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:27:15:8b:2f:bc:3b:bd:93:83:a7:01:74: 33:2b:21:c5:9c:d4:e1:3f:e8:94:9e:ca:27:0e:c4: e6:2a:57:bd:f6:cc:c2:ee:3f:4b:34:f5:a3:80:90: 0b:fd:1d:ce:ee:2e:ae:2c:41:e9:22:27:12:9b:db: 82:ee:a0:e8:17:52:01:4d:20:34:34:54:95:c3:5a: 1b:54:97:04:8c:7d:f3:06:ab:48:e7:e7:75:0b:27: 6a:88:3e:ad:de:d3:0f:7b:9d:a6:9a:a1:a2:e4:d0: 79:c8:68:c1:a7:b8:1f:c2:33:1a:e2:76:be:d2:03: 06:a6:62:b2:2a:49:44:1e:8d:3e:54:09:2e:aa:98: fd:b9:14:ca:4b:82:32:16:15:e1:2b:a9:e6:5c:a7: c4:86:1b:df:fb:f6:3e:f1:a6:21:b0:1b:2d:3e:42: 92:6e:5a:20:7d:f3:5a:bd:ca:e4:46:fe:5e:99:19: b4:df:3b:42:71:6d:dd:56:15:b3:81:01:32:5a:eb: 90:af:e9:45:3d:b2:b2:db:66:87:6e:06:35:fa:3a: 03:c5:90:84:a8:44:5f:fc:7a:1d:1d:e8:c9:21:ed: af:60:0d:12:62:79:69:36:d0:42:ae:04:5e:38:1e: 08:d9:74:3c:0c:65:09:68:68:b7:4f:61:66:89:6c: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.162.0/23 IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 21:33:aa:84:92:d6:7b:fb:32:12:bb:75:77:ab:28:16:ce:da: db:87:23:1b:61:4a:62:43:7a:f6:a0:eb:47:a1:82:5b:8f:b2: bb:5b:0a:98:8d:45:2c:f7:bb:18:bb:d3:5d:05:4b:c0:30:c0: 1e:e9:95:10:a1:20:f9:09:2f:74:86:cb:fe:53:bd:36:14:06: 60:90:f2:95:6b:c4:46:f3:3c:2a:04:1e:a4:2a:79:d9:01:da: b8:b8:2a:86:a3:39:b7:1c:34:69:3b:7f:e7:87:5a:26:8c:cd: ff:be:d9:e2:f9:fc:40:5e:1a:a4:fb:87:cd:d8:58:7f:9d:97: c0:f4:e9:29:a5:7a:d3:12:0a:fc:6b:cb:1e:3c:61:06:c8:e9: c3:1e:0f:05:32:ff:eb:62:7c:54:87:61:9b:80:64:a9:a2:a8: 5c:fd:70:47:16:7f:d0:bb:4e:f3:af:f2:6b:51:cc:61:7e:f1: e0:7f:97:8f:4f:57:7e:29:16:2a:f2:a8:12:3c:8b:2c:09:d7: 5a:db:d5:75:c5:d4:1e:3c:03:23:06:f2:00:67:2c:07:87:cd: da:6e:d1:2d:95:89:4d:f1:b1:ff:f1:70:c3:82:12:7a:7f:0c: 61:d2:43:9d:8f:ea:bb:b5:57:9e:9d:a8:6d:70:4a:5d:f1:7e: 42:05:b2:15 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUA8Qgn+c86AdnJ7ozFIyXu9p7izMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNTE5MzY0NloX DTI0MTAxMzE5NDE0NlowMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2 MkMzQjUzQ0VBMzkyNzI5REVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIHJxWLL7w7vZODpwF0MyshxZzU4T/olJ7KJw7E5ipXvfbMwu4/SzT1o4CQ C/0dzu4urixB6SInEpvbgu6g6BdSAU0gNDRUlcNaG1SXBIx98warSOfndQsnaog+ rd7TD3udppqhouTQechowae4H8IzGuJ2vtIDBqZisipJRB6NPlQJLqqY/bkUykuC MhYV4Sup5lynxIYb3/v2PvGmIbAbLT5Ckm5aIH3zWr3K5Eb+XpkZtN87QnFt3VYV s4EBMlrrkK/pRT2ysttmh24GNfo6A8WQhKhEX/x6HR3oySHtr2ANEmJ5aTbQQq4E XjgeCNl0PAxlCWhot09hZolsrhMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEc3SLjrOb7pb2Riw7U86jknKd7uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMz LTMwYzgtNDk1Ny04MjkxLWEwYzFmOWIxODM5ZS8wLzQ3Mzc0OEI4RUIzOUJFRTk2 RjY0NjJDM0I1M0NFQTM5MjcyOURFRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFniKIwDQQCAAIwBwMFACQEl8AwDQYJKoZIhvcNAQELBQADggEBACEzqoSS1nv7 MhK7dXerKBbO2tuHIxthSmJDevag60ehgluPsrtbCpiNRSz3uxi7010FS8AwwB7p lRChIPkJL3SGy/5TvTYUBmCQ8pVrxEbzPCoEHqQqedkB2ri4KoajObccNGk7f+eH WiaMzf++2eL5/EBeGqT7h83YWH+dl8D06SmletMSCvxryx48YQbI6cMeDwUy/+ti fFSHYZuAZKmiqFz9cEcWf9C7TvOv8mtRzGF+8eB/l49PV34pFiryqBI8iywJ11rb 1XXF1B48AyMG8gBnLAeHzdpu0S2ViU3xsf/xcMOCEnp/DGHSQ52P6ru1V56dqG1w Sl3xfkIFshU= -----END CERTIFICATE-----Generated at Wed May 8 05:33:16 2024 by rpki-client on console-ams.rpki-client.org