$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer (raw, json) Hash identifier: fLY5UEWAXruI0eHWojEOkn68cDxc6N7OXkoyWYAaf2Y= Subject key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49A0C8B95D01F6A34176FB6AEB795589EF686305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft caRepository: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:07:34 +0000 Certificate not after: Mon 29 Jul 2024 02:12:34 +0000 Subordinate resources: IP: 103.208.204.0/22 IP: 2404:4780::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:c8:b9:5d:01:f6:a3:41:76:fb:6a:eb:79:55:89:ef:68:63:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:07:34 2023 GMT Not After : Jul 29 02:12:34 2024 GMT Subject: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:04:24:4e:56:29:8d:66:ff:e3:00:79:90:a3: 72:4c:af:1e:ca:e2:c7:40:b2:74:2e:90:d5:4d:5e: a2:5d:bc:57:4a:9b:fa:9b:6b:a3:05:bc:1e:76:27: 9d:b9:57:68:3c:58:15:7d:23:b9:64:78:e7:5a:6d: d4:9a:5d:1c:d7:83:6b:c1:bc:3c:5c:de:99:ea:91: f7:3e:ca:76:6b:89:96:7f:93:1e:de:e6:f9:7a:85: f8:80:35:b9:ce:af:aa:e6:b2:77:22:1b:fa:9d:40: 4d:4b:48:c1:62:fe:f9:ba:1b:9e:2a:fc:67:8d:2d: e3:4c:8b:28:0b:98:9d:f4:ce:4c:03:ce:f1:d0:98: 47:c3:00:07:9d:11:9e:55:06:c5:4a:e1:0b:d4:3c: 08:29:04:a8:76:db:fd:05:c1:27:f3:fb:8e:dd:6c: 79:ee:a8:ea:b6:08:95:ad:82:fb:ed:f3:1c:b2:d1: 02:9e:bc:84:b0:b8:a1:ce:11:7d:76:fa:29:44:88: e4:45:9a:5a:8b:42:74:6b:13:b1:c2:a9:93:ed:1b: f6:f9:99:53:f5:3a:1b:4a:d9:29:b8:a5:cc:71:84: c8:0a:b8:9b:75:03:35:ca:74:26:a8:54:a0:e7:3c: 2b:76:f8:7c:49:70:ab:b2:85:a3:70:ed:76:ad:3f: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.204.0/22 IPv6: 2404:4780::/32 Signature Algorithm: sha256WithRSAEncryption 56:3d:6d:41:60:19:cf:79:1f:c5:1a:23:53:69:29:b9:8c:db: 46:a7:5f:1b:41:da:12:ee:9f:b4:30:de:94:6f:66:6c:18:a2: 49:bc:61:4a:cf:b6:da:a6:46:5a:dd:da:eb:7f:f1:7b:8c:77: 5c:14:af:46:29:a1:cb:b6:08:4e:42:d3:c8:8a:fa:77:6b:d3: 30:d0:81:a9:aa:2d:0a:35:84:71:95:34:71:6a:74:11:7c:d5: 42:1d:07:05:7d:98:1f:1d:9c:c5:4e:22:64:75:94:c2:cb:06: a3:8c:81:6f:fb:d4:bf:ef:68:34:69:32:ac:68:75:39:8f:24: 1e:e8:6d:5c:39:4a:46:97:57:c2:1c:b6:da:cf:a5:b0:38:18: d5:21:46:16:e1:3c:49:79:f1:18:57:87:24:e4:c0:c4:7e:a9: 4a:68:35:40:eb:a8:5c:c4:8d:83:d0:5b:87:5f:b0:9b:41:4d: f5:33:b8:ab:6d:99:ed:b1:fb:69:5f:28:3f:07:b4:8d:44:9a: 17:bc:19:45:d5:4f:fd:1e:05:93:dc:45:31:63:ce:d7:42:6d: 0b:79:2d:21:9f:02:21:59:79:17:a2:f5:22:c6:ae:bc:ea:3f: 97:f3:44:15:c1:01:f8:e8:e5:72:50:16:d4:72:f7:6f:79:d1: c3:ce:53:f3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSaDIuV0B9qNBdvtq63lVie9oYwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyMDczNFoX DTI0MDcyOTAyMTIzNFowMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0 OUYwMUZDRkFBMEU5MkUyNkFGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcEJE5WKY1m/+MAeZCjckyvHsrix0CydC6Q1U1eol28V0qb+ptrowW8HnYn nblXaDxYFX0juWR451pt1JpdHNeDa8G8PFzemeqR9z7KdmuJln+THt7m+XqF+IA1 uc6vquaydyIb+p1ATUtIwWL++bobnir8Z40t40yLKAuYnfTOTAPO8dCYR8MAB50R nlUGxUrhC9Q8CCkEqHbb/QXBJ/P7jt1see6o6rYIla2C++3zHLLRAp68hLC4oc4R fXb6KUSI5EWaWotCdGsTscKpk+0b9vmZU/U6G0rZKbilzHGEyAq4m3UDNcp0JqhU oOc8K3b4fElwq7KFo3Dtdq0/XxECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIA8n/ECg2zsjOxJ8B/Pqg6S4mrzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3NzI3YzNl LTljMWEtNDZkZS1hMmI4LWM4OGI5MDM5OWYzZC8wLzgwM0M5RkYxMDI4MzZDRUM4 Q0VDNDlGMDFGQ0ZBQTBFOTJFMjZBRjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn0MwwDQQCAAIwBwMFACQER4AwDQYJKoZIhvcNAQELBQADggEBAFY9bUFgGc95 H8UaI1NpKbmM20anXxtB2hLun7Qw3pRvZmwYokm8YUrPttqmRlrd2ut/8XuMd1wU r0Ypocu2CE5C08iK+ndr0zDQgamqLQo1hHGVNHFqdBF81UIdBwV9mB8dnMVOImR1 lMLLBqOMgW/71L/vaDRpMqxodTmPJB7obVw5SkaXV8IcttrPpbA4GNUhRhbhPEl5 8RhXhyTkwMR+qUpoNUDrqFzEjYPQW4dfsJtBTfUzuKttme2x+2lfKD8HtI1Emhe8 GUXVT/0eBZPcRTFjztdCbQt5LSGfAiFZeRei9SLGrrzqP5fzRBXBAfjo5XJQFtRy 92950cPOU/M= -----END CERTIFICATE-----Generated at Thu May 9 00:37:02 2024 by rpki-client on console-fra.rpki-client.org