$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer (raw, json) Hash identifier: zohOpefIUt6ZjeGIRSFyptLSV3zap4D8yVNl9BR+ons= Subject key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76D06AA053A858A2C6BC56E7647F30DC25BAD4B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 Nov 2023 17:21:36 +0000 Certificate not after: Fri 22 Nov 2024 17:26:36 +0000 Subordinate resources: IP: 103.179.89.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d0:6a:a0:53:a8:58:a2:c6:bc:56:e7:64:7f:30:dc:25:ba:d4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 17:21:36 2023 GMT Not After : Nov 22 17:26:36 2024 GMT Subject: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:e7:f4:f5:b1:c0:b2:46:54:3c:ac:42:a0: 81:08:ea:7f:88:84:a4:f6:a9:37:dc:37:bf:0b:b9: 6d:2c:35:af:84:fb:d8:d1:20:80:98:24:90:bd:d9: d8:f6:36:e0:c2:48:a1:6e:c5:97:8e:1f:ef:ec:d5: 06:5d:a5:fb:1c:15:c0:2d:62:21:ce:a4:fc:2f:1d: cc:2b:08:52:d5:4f:49:6d:57:7e:46:c5:1c:c6:cb: 63:3e:20:fe:0e:89:ac:c1:1d:5b:18:1d:6d:47:ac: 55:85:6c:a7:89:83:ca:c1:1b:ba:ff:89:68:46:3d: e4:da:e6:29:dc:3e:6a:b9:49:2a:f3:4c:1e:78:ce: 04:a0:9e:d1:89:db:9c:8d:71:a6:7a:67:b2:4e:70: db:de:d8:6a:db:36:a7:c7:33:ea:5d:bc:db:c2:93: 55:74:f5:cf:0c:8b:cd:b8:0e:b2:ca:80:95:a7:23: 9e:fd:8c:98:01:e7:24:7f:dc:19:7e:35:ee:1b:97: 91:95:fb:6a:a3:5c:d9:ac:cd:95:ef:1d:61:00:82: 9b:a7:48:a4:6a:b6:72:41:ff:68:91:03:96:d1:9b: be:13:4a:b3:0a:4c:2f:58:17:bf:9e:fa:b2:7e:a3: 97:fc:ff:19:0d:80:6a:05:c2:11:10:e4:d5:1c:82: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.89.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:0b:fb:63:5f:0d:94:f0:aa:09:a8:77:55:5e:ba:c0:cb:3f: e9:21:51:81:c7:4a:74:a2:65:97:7c:d7:20:d1:14:ab:2a:9e: 89:34:3e:fc:37:3a:ee:a8:38:4d:fb:ba:da:6f:aa:81:2c:42: 8f:7f:b3:5e:5b:6c:2f:42:6f:91:e7:a7:fd:e3:2d:82:61:7e: f2:bb:c1:c4:1a:2b:cc:2e:46:91:ea:79:30:a0:8f:bc:67:43: 25:2a:7e:ea:2b:89:9b:ab:8b:47:82:ce:4d:3b:ed:a5:5b:29: ef:6e:24:26:69:19:9a:48:4f:5e:83:81:27:b8:60:16:a5:f4: 6c:43:46:05:44:2f:e4:df:be:7a:12:fe:3c:95:34:50:07:c2: 24:92:67:d0:06:1a:fe:2d:b7:bc:df:68:ec:92:df:37:d1:84: 86:e6:8e:6b:70:ff:e3:be:29:2a:ea:66:3d:a4:80:88:61:11: 3c:1f:58:ff:5e:db:94:14:17:45:be:52:a2:bd:3b:29:2b:6a: 04:0e:4f:52:25:27:79:91:e4:05:5b:6d:a7:8c:fa:3a:85:ba: e2:8c:89:24:f3:4a:f0:dd:58:cf:12:5d:08:8f:37:d8:8c:c0: 3a:aa:62:92:49:40:4d:df:84:07:c6:be:df:52:d9:bf:4a:12: 32:0f:23:23 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdtBqoFOoWKLGvFbnZH8w3CW61LcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyNDE3MjEzNloX DTI0MTEyMjE3MjYzNlowMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNC MzczRjM5OEI1NjAyQjU1QTZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMf05/T1scCyRlQ8rEKggQjqf4iEpPapN9w3vwu5bSw1r4T72NEggJgkkL3Z 2PY24MJIoW7Fl44f7+zVBl2l+xwVwC1iIc6k/C8dzCsIUtVPSW1XfkbFHMbLYz4g /g6JrMEdWxgdbUesVYVsp4mDysEbuv+JaEY95NrmKdw+arlJKvNMHnjOBKCe0Ynb nI1xpnpnsk5w297Yats2p8cz6l2828KTVXT1zwyLzbgOssqAlacjnv2MmAHnJH/c GX417huXkZX7aqNc2azNle8dYQCCm6dIpGq2ckH/aJEDltGbvhNKswpML1gXv576 sn6jl/z/GQ2AagXCERDk1RyC3dcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOiwGmjsuusdeyzc/OYtWArVab9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YzI3NjIx LWUyOTctNDEwMC05NzFhLTFjNjk2N2M1MmIxYi8wLzczQTJDMDY5QTNCMkVCQUM3 NUVDQjM3M0YzOThCNTYwMkI1NUE2RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABns1kwDQYJKoZIhvcNAQELBQADggEBAD4L+2NfDZTwqgmod1VeusDLP+khUYHH SnSiZZd81yDRFKsqnok0Pvw3Ou6oOE37utpvqoEsQo9/s15bbC9Cb5Hnp/3jLYJh fvK7wcQaK8wuRpHqeTCgj7xnQyUqfuoriZuri0eCzk077aVbKe9uJCZpGZpIT16D gSe4YBal9GxDRgVEL+TfvnoS/jyVNFAHwiSSZ9AGGv4tt7zfaOyS3zfRhIbmjmtw /+O+KSrqZj2kgIhhETwfWP9e25QUF0W+UqK9OykragQOT1IlJ3mR5AVbbaeM+jqF uuKMiSTzSvDdWM8SXQiPN9iMwDqqYpJJQE3fhAfGvt9S2b9KEjIPIyM= -----END CERTIFICATE-----Generated at Tue May 7 16:42:37 2024 by rpki-client on console-ams.rpki-client.org