$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer File: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer (raw, json) Hash identifier: nvndLaRepdkIHs9ISO83dabG4WnXCM+85VyFOHtiShw= Subject key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E50898754F0FAF86302A21E181489311AA56D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft caRepository: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Nov 2023 04:34:46 +0000 Certificate not after: Wed 13 Nov 2024 04:39:46 +0000 Subordinate resources: IP: 103.55.254.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:50:89:87:54:f0:fa:f8:63:02:a2:1e:18:14:89:31:1a:a5:6d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 15 04:34:46 2023 GMT Not After : Nov 13 04:39:46 2024 GMT Subject: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1a:c9:db:8d:ad:0f:e5:b1:c9:aa:c2:49:1e: 49:74:cd:ac:be:db:38:10:67:e4:6c:78:d1:1f:06: 80:8a:40:61:1f:7f:90:36:e5:84:c2:e9:f6:e4:a9: a5:4a:92:5d:fb:14:09:d5:b8:9f:e7:47:37:c5:e9: 4f:8a:fe:1b:6f:db:d7:42:65:e8:6c:86:bc:d6:98: e3:b8:09:6e:e0:84:d6:97:31:04:41:ca:11:30:e6: 4f:b2:ba:34:a6:94:51:37:3b:86:8b:90:b7:a9:1f: 0f:8f:ed:5c:51:fb:d8:e4:22:24:e2:d1:07:ab:56: a3:dd:1c:9e:92:f7:9c:c2:07:b2:9a:ae:a1:84:90: ae:01:c0:d4:e4:71:18:eb:11:46:f2:a6:44:ef:6f: 0a:cb:d0:de:43:14:17:82:89:fa:c3:2a:20:37:ef: 54:6e:22:23:2e:cc:a2:e6:7e:67:a0:d1:a2:e4:ca: 21:a5:25:07:84:ff:52:02:02:43:ce:42:cc:3c:11: 88:c7:61:a7:01:23:61:d9:df:cb:2d:3a:e5:e9:8c: 92:b1:df:83:77:74:9c:1b:4b:16:34:82:25:e0:33: 1e:6e:7e:3c:1e:bb:39:d3:5c:df:2e:1f:e2:f9:4f: 2d:9b:70:a9:a6:bd:56:16:01:97:29:a3:30:ff:87: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.254.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3a:f1:1c:6d:b1:3e:ba:16:b7:27:d7:59:90:12:4a:55:67: b2:79:e1:c6:8a:56:be:08:a4:bc:e1:8b:3f:26:f8:42:b5:5f: d1:98:53:ef:1a:fe:77:29:ab:04:50:5c:02:2a:88:c1:52:cd: 62:c5:92:4a:5d:56:83:c8:09:34:c3:38:fc:5e:9f:2e:84:ef: 81:70:32:8d:2b:50:56:38:08:28:d6:18:ce:39:67:86:c5:bc: fa:96:06:ce:7b:fc:a2:df:e9:93:c1:6e:3b:f0:92:a9:35:34: b6:dd:75:f5:17:e3:5c:00:c0:d3:83:68:c5:ca:22:c8:a9:5b: 87:24:27:4c:34:ab:57:1c:50:a6:bb:2c:ca:49:0f:14:ea:af: 7d:fd:60:c9:cc:b3:50:ef:e5:a4:d8:18:d2:41:01:ab:2f:fb: 9a:c6:e6:39:77:19:37:46:a9:b7:7c:00:f7:25:23:9f:07:7d: 78:03:91:62:48:dd:a2:99:2a:7d:90:65:f2:f3:40:7b:f9:c3: af:1c:71:b3:75:44:9d:e4:f6:c5:6c:21:bd:f1:09:a2:03:40: f8:d0:c0:22:03:ef:fe:70:39:d5:b1:fb:3e:26:65:90:44:ba: 10:4c:61:35:da:35:13:51:93:57:29:ce:ba:e0:4e:cb:93:20: ce:38:6b:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTlCJh1Tw+vhjAqIeGBSJMRqlbT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNTA0MzQ0NloX DTI0MTExMzA0Mzk0NlowMzExMC8GA1UEAxMoNzMyNzlEQURCNEVCOUIzMUI4OEND QUI1RjY4M0REQTA1NUY0RjBBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPEayduNrQ/lscmqwkkeSXTNrL7bOBBn5Gx40R8GgIpAYR9/kDblhMLp9uSp pUqSXfsUCdW4n+dHN8XpT4r+G2/b10Jl6GyGvNaY47gJbuCE1pcxBEHKETDmT7K6 NKaUUTc7houQt6kfD4/tXFH72OQiJOLRB6tWo90cnpL3nMIHspquoYSQrgHA1ORx GOsRRvKmRO9vCsvQ3kMUF4KJ+sMqIDfvVG4iIy7MouZ+Z6DRouTKIaUlB4T/UgIC Q85CzDwRiMdhpwEjYdnfyy065emMkrHfg3d0nBtLFjSCJeAzHm5+PB67OdNc3y4f 4vlPLZtwqaa9VhYBlymjMP+Hl/sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHMnna2065sxuIzKtfaD3aBV9PCpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YzYzNmE0Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjNjM2YTQ2 LTM4ZmYtNDQ5Ni05NzIxLThjMDNjZjA0NjM0NS8wLzczMjc5REFEQjRFQjlCMzFC ODhDQ0FCNUY2ODNEREEwNTVGNEYwQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnN/4wDQYJKoZIhvcNAQELBQADggEBAIE68RxtsT66Frcn11mQEkpVZ7J54caK Vr4IpLzhiz8m+EK1X9GYU+8a/ncpqwRQXAIqiMFSzWLFkkpdVoPICTTDOPxeny6E 74FwMo0rUFY4CCjWGM45Z4bFvPqWBs57/KLf6ZPBbjvwkqk1NLbddfUX41wAwNOD aMXKIsipW4ckJ0w0q1ccUKa7LMpJDxTqr339YMnMs1Dv5aTYGNJBAasv+5rG5jl3 GTdGqbd8APclI58HfXgDkWJI3aKZKn2QZfLzQHv5w68ccbN1RJ3k9sVsIb3xCaID QPjQwCID7/5wOdWx+z4mZZBEuhBMYTXaNRNRk1cpzrrgTsuTIM44a1M= -----END CERTIFICATE-----Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org