$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer File: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer (raw, json) Hash identifier: qJQIvn8oDDCrSOnga+4yfomOOJntp7Mqbgg4M1UzYrE= Subject key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A40F0C7C3E5696BEA45F501F9592F9EB953A147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft caRepository: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Sep 2024 09:18:12 +0000 Certificate not after: Mon 15 Sep 2025 09:23:12 +0000 Subordinate resources: IP: 103.136.162.0/23 IP: 2404:97c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:f0:c7:c3:e5:69:6b:ea:45:f5:01:f9:59:2f:9e:b9:53:a1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 09:18:12 2024 GMT Not After : Sep 15 09:23:12 2025 GMT Subject: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:27:15:8b:2f:bc:3b:bd:93:83:a7:01:74: 33:2b:21:c5:9c:d4:e1:3f:e8:94:9e:ca:27:0e:c4: e6:2a:57:bd:f6:cc:c2:ee:3f:4b:34:f5:a3:80:90: 0b:fd:1d:ce:ee:2e:ae:2c:41:e9:22:27:12:9b:db: 82:ee:a0:e8:17:52:01:4d:20:34:34:54:95:c3:5a: 1b:54:97:04:8c:7d:f3:06:ab:48:e7:e7:75:0b:27: 6a:88:3e:ad:de:d3:0f:7b:9d:a6:9a:a1:a2:e4:d0: 79:c8:68:c1:a7:b8:1f:c2:33:1a:e2:76:be:d2:03: 06:a6:62:b2:2a:49:44:1e:8d:3e:54:09:2e:aa:98: fd:b9:14:ca:4b:82:32:16:15:e1:2b:a9:e6:5c:a7: c4:86:1b:df:fb:f6:3e:f1:a6:21:b0:1b:2d:3e:42: 92:6e:5a:20:7d:f3:5a:bd:ca:e4:46:fe:5e:99:19: b4:df:3b:42:71:6d:dd:56:15:b3:81:01:32:5a:eb: 90:af:e9:45:3d:b2:b2:db:66:87:6e:06:35:fa:3a: 03:c5:90:84:a8:44:5f:fc:7a:1d:1d:e8:c9:21:ed: af:60:0d:12:62:79:69:36:d0:42:ae:04:5e:38:1e: 08:d9:74:3c:0c:65:09:68:68:b7:4f:61:66:89:6c: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.162.0/23 IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 40:f6:69:d3:f1:4e:12:ef:da:01:7c:d2:3b:df:74:dc:dd:91: c4:88:66:85:4a:7f:f8:41:77:1f:c6:a4:09:00:ce:57:2e:ed: b4:39:e9:2a:ea:a5:ce:f1:fb:27:f5:59:07:48:75:9c:c0:13: e4:de:3f:b6:18:67:4a:55:19:64:0a:00:0a:ab:6a:87:f4:d1: e7:e2:99:11:31:4e:f4:74:e2:d4:f1:c5:d8:76:f8:b1:52:2b: 9a:89:7e:89:00:41:89:01:1a:4d:09:1f:f1:c6:9a:9c:00:8d: ce:de:f6:e9:19:77:eb:23:cb:ca:d8:90:37:52:90:51:8b:3e: a0:32:f8:e5:ab:51:0d:e8:cf:15:c9:08:23:5a:15:26:80:a7: 9c:5e:9c:3f:97:ea:99:34:49:c3:3f:a2:8f:b6:2f:b4:a2:7f: a4:7b:97:e6:8a:07:ac:97:1c:53:cf:71:b0:16:0a:be:85:07: 60:dd:cd:d6:5a:30:93:a7:85:9f:38:7d:3b:28:3f:1d:07:b3: 94:3a:72:8a:d3:23:67:a8:7d:76:ac:d8:91:e0:f0:dc:97:f1: 63:42:b0:87:bc:ca:bc:9a:b8:6b:71:43:d4:0d:88:09:17:e1: d1:84:cf:26:d8:8b:fe:0e:cc:12:da:47:13:33:ef:62:a5:70: b8:19:a1:3d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSkDwx8PlaWvqRfUB+VkvnrlToUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNjA5MTgxMloX DTI1MDkxNTA5MjMxMlowMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2 MkMzQjUzQ0VBMzkyNzI5REVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIHJxWLL7w7vZODpwF0MyshxZzU4T/olJ7KJw7E5ipXvfbMwu4/SzT1o4CQ C/0dzu4urixB6SInEpvbgu6g6BdSAU0gNDRUlcNaG1SXBIx98warSOfndQsnaog+ rd7TD3udppqhouTQechowae4H8IzGuJ2vtIDBqZisipJRB6NPlQJLqqY/bkUykuC MhYV4Sup5lynxIYb3/v2PvGmIbAbLT5Ckm5aIH3zWr3K5Eb+XpkZtN87QnFt3VYV s4EBMlrrkK/pRT2ysttmh24GNfo6A8WQhKhEX/x6HR3oySHtr2ANEmJ5aTbQQq4E XjgeCNl0PAxlCWhot09hZolsrhMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEc3SLjrOb7pb2Riw7U86jknKd7uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMz LTMwYzgtNDk1Ny04MjkxLWEwYzFmOWIxODM5ZS8wLzQ3Mzc0OEI4RUIzOUJFRTk2 RjY0NjJDM0I1M0NFQTM5MjcyOURFRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFniKIwDQQCAAIwBwMFACQEl8AwDQYJKoZIhvcNAQELBQADggEBAED2adPxThLv 2gF80jvfdNzdkcSIZoVKf/hBdx/GpAkAzlcu7bQ56Srqpc7x+yf1WQdIdZzAE+Te P7YYZ0pVGWQKAAqraof00efimRExTvR04tTxxdh2+LFSK5qJfokAQYkBGk0JH/HG mpwAjc7e9ukZd+sjy8rYkDdSkFGLPqAy+OWrUQ3ozxXJCCNaFSaAp5xenD+X6pk0 ScM/oo+2L7Sif6R7l+aKB6yXHFPPcbAWCr6FB2DdzdZaMJOnhZ84fTsoPx0Hs5Q6 corTI2eofXas2JHg8NyX8WNCsIe8yryauGtxQ9QNiAkX4dGEzybYi/4OzBLaRxMz 72KlcLgZoT0= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:47 2024 by rpki-client on console-fra.rpki-client.org