$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer (raw, json) Hash identifier: bnxtAfnP7KnyvS4LUCQhlIa6a7imHPYzbF7JsL9BVEY= Subject key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53C53605AE65B333F528812428FE50A47BA22785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 26 Oct 2024 05:59:17 +0000 Certificate not after: Sat 25 Oct 2025 06:04:17 +0000 Subordinate resources: IP: 103.179.89.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c5:36:05:ae:65:b3:33:f5:28:81:24:28:fe:50:a4:7b:a2:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 26 05:59:17 2024 GMT Not After : Oct 25 06:04:17 2025 GMT Subject: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:e7:f4:f5:b1:c0:b2:46:54:3c:ac:42:a0: 81:08:ea:7f:88:84:a4:f6:a9:37:dc:37:bf:0b:b9: 6d:2c:35:af:84:fb:d8:d1:20:80:98:24:90:bd:d9: d8:f6:36:e0:c2:48:a1:6e:c5:97:8e:1f:ef:ec:d5: 06:5d:a5:fb:1c:15:c0:2d:62:21:ce:a4:fc:2f:1d: cc:2b:08:52:d5:4f:49:6d:57:7e:46:c5:1c:c6:cb: 63:3e:20:fe:0e:89:ac:c1:1d:5b:18:1d:6d:47:ac: 55:85:6c:a7:89:83:ca:c1:1b:ba:ff:89:68:46:3d: e4:da:e6:29:dc:3e:6a:b9:49:2a:f3:4c:1e:78:ce: 04:a0:9e:d1:89:db:9c:8d:71:a6:7a:67:b2:4e:70: db:de:d8:6a:db:36:a7:c7:33:ea:5d:bc:db:c2:93: 55:74:f5:cf:0c:8b:cd:b8:0e:b2:ca:80:95:a7:23: 9e:fd:8c:98:01:e7:24:7f:dc:19:7e:35:ee:1b:97: 91:95:fb:6a:a3:5c:d9:ac:cd:95:ef:1d:61:00:82: 9b:a7:48:a4:6a:b6:72:41:ff:68:91:03:96:d1:9b: be:13:4a:b3:0a:4c:2f:58:17:bf:9e:fa:b2:7e:a3: 97:fc:ff:19:0d:80:6a:05:c2:11:10:e4:d5:1c:82: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.89.0/24 Signature Algorithm: sha256WithRSAEncryption 68:4d:52:3e:6e:04:45:e4:6d:c3:12:f7:1f:a0:e4:99:c9:77: e5:42:dd:93:39:e5:67:9d:19:ff:10:d7:41:b6:1d:08:b3:73: e2:a9:24:34:fa:62:de:92:bb:60:52:eb:d3:14:27:3a:7a:62: 53:21:79:8a:5f:aa:26:93:62:1f:5a:74:65:41:92:91:36:6b: 89:14:c8:81:af:0d:11:27:ee:df:3b:14:e4:0f:df:df:b8:81: 52:2e:50:98:25:bb:5a:8a:e1:6f:69:31:b7:8f:0d:25:14:ff: 54:d1:44:6f:0a:82:47:6d:4b:11:6d:22:61:ca:11:0b:64:d7: 19:bc:4e:16:18:6d:cd:14:92:27:24:35:f8:6b:db:c4:71:97: 00:21:4f:87:93:1a:bb:ac:be:aa:69:a2:3c:2f:09:6c:ab:64: cc:07:10:dd:40:b0:18:f4:0a:dd:5a:cb:69:a0:e7:33:ed:16: 53:2e:3c:2b:ba:2e:32:02:bf:32:27:ae:97:35:45:8e:08:1e: 4a:f9:4c:4e:5b:3b:ed:15:e8:5f:be:60:ac:04:c1:1d:a5:59: e8:33:ae:c1:0c:3d:e5:29:02:5d:d7:75:30:4a:c8:17:d7:ab: 03:9d:e5:44:17:2c:6b:32:9b:49:f5:e8:54:a7:ba:77:7c:41: f6:f4:c3:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU8U2Ba5lszP1KIEkKP5QpHuiJ4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNjA1NTkxN1oX DTI1MTAyNTA2MDQxN1owMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNC MzczRjM5OEI1NjAyQjU1QTZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMf05/T1scCyRlQ8rEKggQjqf4iEpPapN9w3vwu5bSw1r4T72NEggJgkkL3Z 2PY24MJIoW7Fl44f7+zVBl2l+xwVwC1iIc6k/C8dzCsIUtVPSW1XfkbFHMbLYz4g /g6JrMEdWxgdbUesVYVsp4mDysEbuv+JaEY95NrmKdw+arlJKvNMHnjOBKCe0Ynb nI1xpnpnsk5w297Yats2p8cz6l2828KTVXT1zwyLzbgOssqAlacjnv2MmAHnJH/c GX417huXkZX7aqNc2azNle8dYQCCm6dIpGq2ckH/aJEDltGbvhNKswpML1gXv576 sn6jl/z/GQ2AagXCERDk1RyC3dcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOiwGmjsuusdeyzc/OYtWArVab9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YzI3NjIx LWUyOTctNDEwMC05NzFhLTFjNjk2N2M1MmIxYi8wLzczQTJDMDY5QTNCMkVCQUM3 NUVDQjM3M0YzOThCNTYwMkI1NUE2RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABns1kwDQYJKoZIhvcNAQELBQADggEBAGhNUj5uBEXkbcMS9x+g5JnJd+VC3ZM5 5WedGf8Q10G2HQizc+KpJDT6Yt6Su2BS69MUJzp6YlMheYpfqiaTYh9adGVBkpE2 a4kUyIGvDREn7t87FOQP39+4gVIuUJglu1qK4W9pMbePDSUU/1TRRG8KgkdtSxFt ImHKEQtk1xm8ThYYbc0UkickNfhr28RxlwAhT4eTGrusvqppojwvCWyrZMwHEN1A sBj0Ct1ay2mg5zPtFlMuPCu6LjICvzInrpc1RY4IHkr5TE5bO+0V6F++YKwEwR2l WegzrsEMPeUpAl3XdTBKyBfXqwOd5UQXLGsym0n16FSnund8Qfb0w5E= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org