$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer File: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer (raw, json) Hash identifier: ZZjb+HQil4yDaoUInG2jewPnyP4K/jxxYwnXJQkZV8o= Subject key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48BE4A4D7EDF3974BDDC12497011BAC8DF0D10F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Oct 2023 08:02:33 +0000 Certificate not after: Sun 29 Sep 2024 08:07:33 +0000 Subordinate resources: IP: 103.163.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:be:4a:4d:7e:df:39:74:bd:dc:12:49:70:11:ba:c8:df:0d:10:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 08:02:33 2023 GMT Not After : Sep 29 08:07:33 2024 GMT Subject: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:bc:ef:55:7a:9d:1e:f0:35:13:72:85:51: 32:a4:ff:a4:bf:1b:b9:78:f1:40:8d:b7:de:84:9d: ff:03:00:dd:35:4c:12:1f:45:16:cc:b6:8c:2c:60: e1:e9:3b:eb:d3:16:d6:33:2c:b6:95:e1:a1:22:7a: 35:64:5d:5a:89:9a:7e:68:95:49:3f:01:6f:74:11: 7c:af:35:17:41:5c:ab:e9:a8:6c:53:3c:78:69:80: b8:88:17:aa:61:57:e9:43:59:71:8b:ef:bf:cb:2c: 25:17:9b:45:06:f1:70:f0:fc:0a:01:2f:41:89:26: da:ec:dd:15:64:fd:9e:86:1f:c1:35:fe:f0:96:29: bb:89:0a:85:29:2d:28:86:66:97:0a:19:12:4a:01: 14:d1:8c:71:d0:0c:3e:d5:c4:d8:25:9e:b2:ec:7d: 65:e8:29:3b:ae:a2:23:f3:28:88:2c:de:08:8c:e8: 3a:7a:d8:dd:fc:fa:ca:10:c2:cb:a7:48:e3:fa:d4: 94:d8:3f:51:7b:d0:bc:d8:09:fb:c2:d7:31:57:49: 13:e7:b9:e2:d0:ec:76:8c:80:03:30:b8:a0:d0:56: aa:f8:fe:c1:11:b3:aa:38:22:b3:27:61:80:10:b3: c1:96:99:e3:e7:87:30:47:7a:0a:d2:e6:2a:b1:51: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.80.0/23 Signature Algorithm: sha256WithRSAEncryption 07:7e:99:37:4c:c0:42:22:fd:df:4f:c8:46:85:8a:43:46:54: b7:40:00:e0:a8:fd:47:2e:b5:7f:be:ff:dc:44:99:e1:44:e5: 04:20:e0:f6:ed:7d:59:70:b8:fc:86:5e:da:aa:f8:95:48:8f: 14:d9:b6:0f:ca:7f:4b:a4:c7:52:41:9b:d6:d8:dc:de:cb:c2: 50:8e:49:4c:59:b8:c7:45:8b:4f:da:d6:2f:f0:67:82:d4:30: 12:58:10:b1:61:f2:93:d9:a1:e8:55:36:74:b5:ed:85:af:e3: 9b:81:8b:67:80:3b:66:37:51:7e:07:f1:cd:7f:0a:a8:7e:e2: 7f:1d:e3:71:91:60:f8:34:c1:3c:70:a4:fa:29:c2:73:4a:0c: 49:33:a9:90:95:25:72:34:a0:c5:68:66:c8:c0:0c:ee:be:65: 61:60:37:f8:0e:92:c5:81:b1:83:19:91:ae:ec:0b:41:ec:2b: 1d:60:2a:48:37:6a:3a:3f:0c:f3:8b:49:3a:74:42:8d:ae:d7: d3:50:cd:a0:dc:c4:2b:7d:a8:12:05:4e:35:c8:56:78:cc:54: 14:09:8b:95:6d:bc:b5:e1:fe:f5:23:8e:74:a7:c1:a1:76:4f: e3:7c:2b:78:31:5d:7e:e5:35:c2:09:12:c9:fc:cd:ec:27:7f: 6e:26:29:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSL5KTX7fOXS93BJJcBG6yN8NEPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwMTA4MDIzM1oX DTI0MDkyOTA4MDczM1owMzExMC8GA1UEAxMoODFDOTRCRTk5OEVDQkREMkVGODk3 QkZFOEU4RTUxQjg3NEMwQTY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCqvO9Vep0e8DUTcoVRMqT/pL8buXjxQI233oSd/wMA3TVMEh9FFsy2jCxg 4ek769MW1jMstpXhoSJ6NWRdWomafmiVST8Bb3QRfK81F0Fcq+mobFM8eGmAuIgX qmFX6UNZcYvvv8ssJRebRQbxcPD8CgEvQYkm2uzdFWT9noYfwTX+8JYpu4kKhSkt KIZmlwoZEkoBFNGMcdAMPtXE2CWesux9ZegpO66iI/MoiCzeCIzoOnrY3fz6yhDC y6dI4/rUlNg/UXvQvNgJ+8LXMVdJE+e54tDsdoyAAzC4oNBWqvj+wRGzqjgisydh gBCzwZaZ4+eHMEd6CtLmKrFRpZECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIHJS+mY7L3S74l7/o6OUbh0wKZSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDIzNGQ1MC02N2UxLTQxOWMtODViYS02NGJhOGMxMTEyMjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMjM0ZDUw LTY3ZTEtNDE5Yy04NWJhLTY0YmE4YzExMTIyNS8wLzgxQzk0QkU5OThFQ0JERDJF Rjg5N0JGRThFOEU1MUI4NzRDMEE2NTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFno1AwDQYJKoZIhvcNAQELBQADggEBAAd+mTdMwEIi/d9PyEaFikNGVLdAAOCo /UcutX++/9xEmeFE5QQg4PbtfVlwuPyGXtqq+JVIjxTZtg/Kf0ukx1JBm9bY3N7L wlCOSUxZuMdFi0/a1i/wZ4LUMBJYELFh8pPZoehVNnS17YWv45uBi2eAO2Y3UX4H 8c1/Cqh+4n8d43GRYPg0wTxwpPopwnNKDEkzqZCVJXI0oMVoZsjADO6+ZWFgN/gO ksWBsYMZka7sC0HsKx1gKkg3ajo/DPOLSTp0Qo2u19NQzaDcxCt9qBIFTjXIVnjM VBQJi5VtvLXh/vUjjnSnwaF2T+N8K3gxXX7lNcIJEsn8zewnf24mKRY= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org