$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer (raw, json) Hash identifier: OGprfhJ2WPYyXuneXdd6UquBe9341D9i6koMXjlMlzM= Subject key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 645DA9F850358D82C51BE4544A68329E97E5CD93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft caRepository: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Apr 2024 16:36:31 +0000 Certificate not after: Tue 01 Apr 2025 16:41:31 +0000 Subordinate resources: IP: 58.65.240.0/21 IP: 115.166.96.0/19 IP: 2403:ff00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5d:a9:f8:50:35:8d:82:c5:1b:e4:54:4a:68:32:9e:97:e5:cd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 16:36:31 2024 GMT Not After : Apr 1 16:41:31 2025 GMT Subject: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:22:80:c3:1f:c1:86:0b:9c:40:16:24:15: e4:f9:90:d6:3a:ad:d0:3f:35:af:da:96:20:06:10: 1a:f7:fb:7b:c3:86:aa:63:69:bd:4a:06:65:c8:41: f8:1f:1a:6d:99:d3:db:7f:4a:ee:50:e9:61:93:b0: ed:12:f4:f4:ce:7a:25:cb:cb:b9:8b:d9:9a:33:0d: 81:b1:8f:e1:8c:a9:af:e1:45:65:f7:30:e3:e7:00: 78:d0:c7:39:cd:00:e1:46:fd:ba:4b:5e:a3:c5:63: 36:4d:5d:b6:be:5d:7f:11:19:6c:b9:25:35:e2:16: aa:54:ea:93:32:ed:93:62:05:87:50:8d:a8:8c:14: 80:51:b5:3d:68:4c:d0:76:5c:01:f0:dd:1e:a3:dc: b6:55:66:d5:7c:98:65:e4:f2:69:8c:50:35:b3:14: 33:64:ba:f9:a0:84:ce:48:d2:84:0c:44:c7:61:2c: 40:44:c9:5a:ec:44:8e:a8:b0:64:1f:97:c4:65:51: 35:e4:71:64:df:fe:1f:95:d0:59:80:bc:49:85:d0: c2:5d:19:79:08:de:3f:9e:01:f3:a4:9e:c2:7a:3a: 41:1e:c7:3f:53:60:5f:38:f5:11:60:cf:69:45:e8: fb:d7:64:b1:25:fd:44:cd:98:93:c4:f1:5b:ab:00: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.65.240.0/21 115.166.96.0/19 IPv6: 2403:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 48:f6:26:c3:3d:56:13:b4:66:02:dd:6c:c5:8a:f9:69:75:82: f4:7a:cc:2a:4f:ac:c3:2c:6b:e2:3f:02:82:ee:71:d9:cb:5a: 93:19:0c:ff:88:f4:9b:84:fc:0f:7e:b5:df:a9:7d:42:59:f6: 8e:24:44:cd:04:6d:25:a6:d7:e8:d9:2f:1b:6c:b7:5b:eb:74: 78:4e:a5:45:5c:e5:4e:46:de:7c:5a:8f:a0:f9:dc:2a:5e:01: ac:f8:e4:ed:d9:5d:b9:f8:40:2b:8b:37:73:eb:5b:71:c0:4a: 3e:73:c6:de:35:99:ee:d7:f9:73:36:95:31:6a:6a:f0:75:d7: 02:ea:d0:02:76:44:3b:ca:87:9d:23:02:78:a3:8b:fc:7c:f3: 19:77:a0:6b:fb:00:91:fd:9e:71:d2:46:6f:44:be:14:18:1f: 8a:f8:28:58:be:b7:3b:4b:44:4f:6d:ce:d3:c8:b1:38:cb:54: 72:0d:f9:4c:5f:20:c1:39:bd:f3:82:fe:d7:f0:c8:d9:11:4b: 7f:c2:e9:5e:8f:31:db:25:30:0a:dc:55:c3:fd:bb:14:e6:6b: 5f:c8:3d:2d:fb:07:30:c7:62:87:61:d4:58:a5:11:f6:99:fb: d9:61:97:18:d8:9d:b6:dd:a7:e2:a7:22:25:84:c8:65:b8:37: a5:46:67:a6 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUZF2p+FA1jYLFG+RUSmgynpflzZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwMjE2MzYzMVoX DTI1MDQwMTE2NDEzMVowMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZE MkJFRDM5RjBGQTE1MjYxOTA5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbjIoDDH8GGC5xAFiQV5PmQ1jqt0D81r9qWIAYQGvf7e8OGqmNpvUoGZchB +B8abZnT239K7lDpYZOw7RL09M56JcvLuYvZmjMNgbGP4Yypr+FFZfcw4+cAeNDH Oc0A4Ub9ukteo8VjNk1dtr5dfxEZbLklNeIWqlTqkzLtk2IFh1CNqIwUgFG1PWhM 0HZcAfDdHqPctlVm1XyYZeTyaYxQNbMUM2S6+aCEzkjShAxEx2EsQETJWuxEjqiw ZB+XxGVRNeRxZN/+H5XQWYC8SYXQwl0ZeQjeP54B86Sewno6QR7HP1NgXzj1EWDP aUXo+9dksSX9RM2Yk8TxW6sAwq8CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEez+/Odjf5bxc/SvtOfD6FSYZCXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2 LWVjNTMtNDJlYi05YjhiLWZhMDhmODc0ZDMxOS8wLzQ3QjNGQkYzOUQ4REZFNUJD NUNGRDJCRUQzOUYwRkExNTI2MTkwOTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAM6QfADBAVzpmAwDQQCAAIwBwMFACQD/wAwDQYJKoZIhvcNAQELBQADggEBAEj2 JsM9VhO0ZgLdbMWK+Wl1gvR6zCpPrMMsa+I/AoLucdnLWpMZDP+I9JuE/A9+td+p fUJZ9o4kRM0EbSWm1+jZLxtst1vrdHhOpUVc5U5G3nxaj6D53CpeAaz45O3ZXbn4 QCuLN3PrW3HASj5zxt41me7X+XM2lTFqavB11wLq0AJ2RDvKh50jAniji/x88xl3 oGv7AJH9nnHSRm9EvhQYH4r4KFi+tztLRE9tztPIsTjLVHIN+UxfIME5vfOC/tfw yNkRS3/C6V6PMdslMArcVcP9uxTma1/IPS37BzDHYodh1FilEfaZ+9lhlxjYnbbd p+KnIiWEyGW4N6VGZ6Y= -----END CERTIFICATE-----Generated at Wed May 8 18:12:07 2024 by rpki-client on console-fra.rpki-client.org