$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer (raw, json) Hash identifier: eYEMMHF74IAvIkaD3+zcbXxnyyJllJqIvS9nSamjt1w= Subject key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CFDA5D9F29E9BDDB62D3F98FD110DDD800D91AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft caRepository: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Oct 2023 15:43:25 +0000 Certificate not after: Thu 24 Oct 2024 15:48:25 +0000 Subordinate resources: IP: 103.96.146.0/23 IP: 2001:df2:e9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fd:a5:d9:f2:9e:9b:dd:b6:2d:3f:98:fd:11:0d:dd:80:0d:91:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 26 15:43:25 2023 GMT Not After : Oct 24 15:48:25 2024 GMT Subject: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:08:f8:cf:26:3a:eb:5f:a1:e0:33:57:e1: f1:7b:e2:f7:1d:45:8a:0e:40:55:07:96:5c:a2:2c: bc:8a:59:bd:1c:1b:60:da:26:ad:78:ba:b6:3c:6f: 1f:84:51:6b:7b:ff:28:0d:d6:9e:61:c5:e1:8f:b8: cc:48:82:f7:92:a0:58:90:50:f1:9f:c2:b5:aa:c6: 31:aa:05:fb:64:07:c2:3a:2a:24:d9:32:33:bb:b2: 07:ec:34:60:94:68:1a:6c:41:3c:bc:12:97:97:fa: fb:9f:b0:82:8a:c8:aa:7d:e7:d2:15:65:1e:2b:2d: 09:ec:f2:3f:cc:4b:c1:dc:37:72:33:57:9e:9c:ae: 62:4e:9a:6d:3f:76:c1:2a:32:dd:d8:bb:f8:b2:79: 1e:c3:e1:1a:a3:99:1c:06:ff:5e:a8:e2:94:12:43: 80:8b:86:14:0b:6f:b5:2b:60:75:b0:2b:e7:c4:aa: b0:e9:fc:88:49:77:68:b2:3a:30:87:69:51:4d:68: 73:39:22:78:c2:01:13:be:91:52:ed:80:e4:af:0f: 88:ed:10:b5:1e:63:bb:46:57:92:40:c9:e7:2e:39: 53:9e:e0:8f:47:24:ed:64:65:ba:db:ab:27:55:f5: e2:f9:05:87:e2:4f:76:49:93:0d:12:37:aa:55:e6: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.146.0/23 IPv6: 2001:df2:e9c0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:27:02:3e:2f:0e:ad:cd:0d:66:53:92:d0:9b:c8:6a:4c:75: 01:eb:0f:70:ee:e2:b4:96:b5:ad:78:84:c7:41:5f:d1:33:01: 7c:e3:dc:2e:bf:73:37:80:f2:60:70:6c:5d:13:f9:fe:ad:d3: a9:6b:9d:2f:2c:6e:19:21:6b:d8:e2:4d:2f:7e:57:6d:44:df: 7c:0c:30:42:a9:7c:7a:1f:1f:fc:bb:b0:48:96:24:f4:90:1a: 96:f1:3c:65:f0:c8:e6:98:64:40:99:6e:99:2b:d9:fc:f5:94: 4c:67:81:50:3e:3f:c2:6a:bf:03:b2:b3:4e:c5:81:70:46:03: c7:3c:f0:ac:5d:20:9f:46:13:9c:37:be:2e:42:6c:d4:6a:9a: 9c:2a:d9:fe:8a:19:ad:ce:02:c2:67:95:15:4e:c9:d3:42:e0: a3:be:44:b7:b2:56:97:f7:15:e0:9f:9b:de:02:a0:1d:e2:78: fd:e5:71:97:e1:4e:07:c9:e7:b1:9e:75:95:60:97:f7:0e:5f: 85:78:dd:ea:82:a0:78:c0:91:a6:2c:38:0a:9a:00:d8:31:5c: 3e:b9:58:e7:fe:5e:6e:d6:dd:52:ae:a3:da:36:a5:93:ff:62: b5:4b:9e:2c:dd:87:ac:69:07:49:82:b7:1e:69:b8:5e:ef:04: 7e:c9:1d:4c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULP2l2fKem922LT+Y/REN3YANkaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyNjE1NDMyNVoX DTI0MTAyNDE1NDgyNVowMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1 RkI0QTVERDg0QzZGQTJEQ0QwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsICPjPJjrrX6HgM1fh8Xvi9x1Fig5AVQeWXKIsvIpZvRwbYNomrXi6tjxv H4RRa3v/KA3WnmHF4Y+4zEiC95KgWJBQ8Z/CtarGMaoF+2QHwjoqJNkyM7uyB+w0 YJRoGmxBPLwSl5f6+5+wgorIqn3n0hVlHistCezyP8xLwdw3cjNXnpyuYk6abT92 wSoy3di7+LJ5HsPhGqOZHAb/XqjilBJDgIuGFAtvtStgdbAr58SqsOn8iEl3aLI6 MIdpUU1oczkieMIBE76RUu2A5K8PiO0QtR5ju0ZXkkDJ5y45U57gj0ck7WRlutur J1X14vkFh+JPdkmTDRI3qlXmS00CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIHCA89Fjkio/zRftKXdhMb6Lc0KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhNDc0NmI3 LTVmZjItNDU1Ni04YTNlLTVhODZjYmNjODU5OC8wLzgxQzIwM0NGNDU4RTQ4QThG RjM0NUZCNEE1REQ4NEM2RkEyRENEMEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnYJIwDwQCAAIwCQMHACABDfLpwDANBgkqhkiG9w0BAQsFAAOCAQEAfScCPi8O rc0NZlOS0JvIakx1AesPcO7itJa1rXiEx0Ff0TMBfOPcLr9zN4DyYHBsXRP5/q3T qWudLyxuGSFr2OJNL35XbUTffAwwQql8eh8f/LuwSJYk9JAalvE8ZfDI5phkQJlu mSvZ/PWUTGeBUD4/wmq/A7KzTsWBcEYDxzzwrF0gn0YTnDe+LkJs1GqanCrZ/ooZ rc4CwmeVFU7J00Lgo75Et7JWl/cV4J+b3gKgHeJ4/eVxl+FOB8nnsZ51lWCX9w5f hXjd6oKgeMCRpiw4CpoA2DFcPrlY5/5ebtbdUq6j2jalk/9itUueLN2HrGkHSYK3 Hmm4Xu8EfskdTA== -----END CERTIFICATE-----Generated at Wed May 8 18:12:10 2024 by rpki-client on console-fra.rpki-client.org