$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer File: 722D23AD0F959CE5CBFF927C152517F07060D195.cer (raw, json) Hash identifier: bIyeg8MMjBmTGXTrkwszHy/VU4n7sYoDv6LBg/z9llo= Subject key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 202D5493DA3BB52B6B3F5A73BDCC17367E1D95A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Nov 2023 07:17:04 +0000 Certificate not after: Wed 13 Nov 2024 07:22:04 +0000 Subordinate resources: IP: 103.49.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2d:54:93:da:3b:b5:2b:6b:3f:5a:73:bd:cc:17:36:7e:1d:95:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 15 07:17:04 2023 GMT Not After : Nov 13 07:22:04 2024 GMT Subject: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:d7:da:bf:04:17:4c:38:7f:ca:17:cb:9a: a1:4a:24:73:a5:3f:fb:bd:ca:c4:85:95:79:52:65: 02:d5:a1:85:6d:2a:fb:45:de:27:c6:42:dc:6f:00: e2:83:63:ce:8d:7c:25:a2:30:25:58:3c:10:9d:ab: 2c:21:92:33:4c:7a:92:13:7e:c7:bc:d5:88:e3:b6: 10:7e:32:14:07:e7:bf:85:2b:7a:0a:6a:52:0b:5e: bd:01:d9:4c:c6:3e:db:ad:0e:64:1f:b1:9b:7c:b6: 7b:55:3a:1a:7e:fb:79:4e:8a:33:b5:a8:94:0a:2b: f3:2d:cc:0e:4e:0c:5f:1e:59:8b:71:14:9c:77:f8: f9:87:1b:69:0d:48:92:de:96:b3:06:b2:1a:31:43: 24:30:d2:f9:71:0f:2e:70:70:54:ad:0a:5f:8f:6a: 62:0d:fe:0a:78:13:b8:6e:de:48:0c:fa:40:49:67: ec:41:99:79:81:2e:68:45:1a:70:e5:db:76:11:7a: 40:e6:3c:ed:45:19:b3:9a:86:c1:06:2b:6e:ee:2c: ad:54:5a:7a:95:ec:4f:0c:0c:87:27:ba:fd:f7:44: 0a:0d:44:71:7c:15:10:4f:42:45:ab:67:5b:63:4f: f5:29:2e:ee:f0:3b:e7:6e:9e:39:96:fa:e8:3e:41: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.50.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:ad:ef:7d:f2:9b:ac:ae:fe:4b:53:75:83:9d:59:80:65:63: c6:95:f5:2d:56:49:6b:5d:42:6d:f8:75:01:53:1b:83:11:e6: 3b:cd:67:19:02:7f:bc:60:01:96:ed:54:16:23:bf:91:7b:5f: 33:c6:01:41:f2:55:16:c9:48:2a:50:bf:00:ef:44:dd:71:f4: 5b:bd:0a:60:6c:1e:6e:49:60:c1:e4:2a:af:18:d4:27:f7:82: f6:bc:c7:52:6f:df:38:9a:49:bd:b4:fc:38:39:95:f0:25:a7: 43:dd:ac:b2:25:8b:a4:21:62:dc:52:21:e8:24:79:ea:7f:b0: 4c:3e:e1:11:12:dc:f8:b1:80:e8:1a:59:08:05:b7:9c:e4:f9: d1:90:41:e7:38:2b:4b:bb:2d:42:38:0a:2d:e4:c2:b9:da:35: e1:b3:51:b1:3f:64:46:1a:60:52:9f:ff:15:5f:62:a9:89:0d: 24:34:9c:50:21:16:3c:eb:7e:9e:68:a6:db:91:79:1a:ab:c9: e3:48:4f:f6:4d:9d:9c:a1:a2:b4:fb:47:80:05:f2:67:8f:f5: 34:b5:84:1a:22:4b:a6:2b:4a:a6:60:e4:19:04:55:4b:c5:c6: a8:d3:ae:8b:7f:7b:ab:19:b5:9a:d7:f2:bd:63:30:13:38:2d: 67:49:3d:cd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIC1Uk9o7tStrP1pzvcwXNn4dlaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNTA3MTcwNFoX DTI0MTExMzA3MjIwNFowMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5 MjdDMTUyNTE3RjA3MDYwRDE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4819q/BBdMOH/KF8uaoUokc6U/+73KxIWVeVJlAtWhhW0q+0XeJ8ZC3G8A 4oNjzo18JaIwJVg8EJ2rLCGSM0x6khN+x7zViOO2EH4yFAfnv4UregpqUgtevQHZ TMY+260OZB+xm3y2e1U6Gn77eU6KM7WolAor8y3MDk4MXx5Zi3EUnHf4+YcbaQ1I kt6WswayGjFDJDDS+XEPLnBwVK0KX49qYg3+CngTuG7eSAz6QEln7EGZeYEuaEUa cOXbdhF6QOY87UUZs5qGwQYrbu4srVRaepXsTwwMhye6/fdECg1EcXwVEE9CRatn W2NP9Sku7vA7526eOZb66D5B8B0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHItI60PlZzly/+SfBUlF/BwYNGVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xY2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjZThkYTlj LWJkYmQtNDkwOC1iYTkyLWQ5MGZlYTljOGYwNS8wLzcyMkQyM0FEMEY5NTlDRTVD QkZGOTI3QzE1MjUxN0YwNzA2MEQxOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnMTIwDQYJKoZIhvcNAQELBQADggEBAG2t733ym6yu/ktTdYOdWYBlY8aV9S1W SWtdQm34dQFTG4MR5jvNZxkCf7xgAZbtVBYjv5F7XzPGAUHyVRbJSCpQvwDvRN1x 9Fu9CmBsHm5JYMHkKq8Y1Cf3gva8x1Jv3ziaSb20/Dg5lfAlp0PdrLIli6QhYtxS Iegkeep/sEw+4RES3PixgOgaWQgFt5zk+dGQQec4K0u7LUI4Ci3kwrnaNeGzUbE/ ZEYaYFKf/xVfYqmJDSQ0nFAhFjzrfp5optuReRqryeNIT/ZNnZyhorT7R4AF8meP 9TS1hBoiS6YrSqZg5BkEVUvFxqjTrot/e6sZtZrX8r1jMBM4LWdJPc0= -----END CERTIFICATE-----Generated at Tue May 7 16:42:37 2024 by rpki-client on console-ams.rpki-client.org