$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer File: 83C7CB5B51B0D2341C906429DBCB81393F473E08.cer (raw, json) Hash identifier: usCrfC9gCMDqV89WXrOAMPCOxftKGyPVcP9CwsB3GP8= Subject key identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 081213F3D0D9F26107F8E23C2BDB1076FE6CF8D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft caRepository: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 06 Dec 2023 03:51:56 +0000 Certificate not after: Wed 04 Dec 2024 03:56:56 +0000 Subordinate resources: IP: 103.160.147.0/24 IP: 2001:df5:a680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:12:13:f3:d0:d9:f2:61:07:f8:e2:3c:2b:db:10:76:fe:6c:f8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 6 03:51:56 2023 GMT Not After : Dec 4 03:56:56 2024 GMT Subject: CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:ea:dc:a3:88:be:a3:e1:ed:b0:71:11:88: 36:1f:6d:87:51:a0:e8:bf:0e:63:a8:90:c2:fb:f8: 34:22:67:18:16:83:ca:2b:c1:27:bb:b5:e5:ef:90: 2e:46:94:99:85:9b:bc:c7:9e:80:6d:0f:08:27:07: 6e:12:d4:af:45:ac:43:08:c6:a5:b9:c4:ee:1d:dc: 8a:27:24:45:58:68:db:f9:13:a9:70:58:f8:29:6c: 74:4a:45:04:8a:ac:29:8e:4c:f9:bb:a7:ba:58:10: 91:64:c7:e7:2e:a3:e4:98:ae:e1:05:83:14:dc:9d: 86:7b:59:63:21:50:a1:25:89:24:7b:22:a1:0a:3d: 2d:31:6e:b2:33:d4:8f:f1:70:d2:79:36:1a:35:27: b6:0d:e3:f7:f2:39:5d:c5:a2:35:0b:bc:95:4d:d2: 50:70:99:4d:8f:a0:dc:79:cb:b0:d8:4f:83:a2:4d: 22:cf:2f:7d:d2:3c:b5:5d:eb:1b:9e:ec:45:61:13: 26:82:00:1a:7e:ec:f9:e8:db:ca:8d:65:d6:1a:8a: 17:b1:96:c9:3d:cd:9f:a4:39:0c:52:db:a1:1b:98: 14:5c:ca:2e:5d:11:a0:e5:ad:5b:ab:7d:ed:8b:85: 52:69:07:ac:9d:eb:40:a5:a8:e8:44:1c:f6:40:77: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.147.0/24 IPv6: 2001:df5:a680::/48 Signature Algorithm: sha256WithRSAEncryption 63:f7:f1:1f:84:ad:35:0b:7f:a0:d1:7b:94:dd:5a:7c:0d:df: f5:98:ac:0f:b1:eb:d5:1d:63:85:e6:63:c5:a0:d6:be:e0:d1: 19:18:bc:2c:b3:30:0e:3d:b4:aa:ee:9a:c9:bf:ce:25:54:68: 4e:de:a1:0a:de:b3:3c:92:01:be:73:5a:92:af:de:81:e6:a2: 19:5c:44:c8:59:c7:d9:dc:17:5d:ff:f0:59:66:85:3a:d1:a2: 2f:46:62:14:20:69:af:6b:6b:41:5b:43:e4:49:13:48:dc:73: 12:c2:62:2d:d4:72:3e:a2:69:26:57:69:2e:00:62:9b:16:95: a7:57:73:a5:d4:be:8a:ed:bb:62:3b:52:68:0e:5b:4e:8d:62: 21:98:e2:7b:9b:c7:df:4b:46:c7:b0:28:3c:31:b6:51:07:6b: f7:de:b8:fe:af:27:f1:2b:2e:bd:07:88:d4:19:0a:b8:31:0a: 98:75:29:a7:de:bb:8f:92:8c:9c:f5:7a:87:a0:f7:96:dd:fa: af:92:22:d5:52:1e:4f:99:f4:38:50:40:cc:a1:36:d6:9a:ac: d2:ca:4d:30:17:ce:46:12:7f:fb:63:2d:c6:6e:ee:e6:ac:33: 47:2b:a4:63:79:31:53:db:db:cd:77:5e:df:13:b7:e2:cf:ae: 4d:32:33:e6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUCBIT89DZ8mEH+OI8K9sQdv5s+NIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwNjAzNTE1NloX DTI0MTIwNDAzNTY1NlowMzExMC8GA1UEAxMoODNDN0NCNUI1MUIwRDIzNDFDOTA2 NDI5REJDQjgxMzkzRjQ3M0UwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANI+6tyjiL6j4e2wcRGINh9th1Gg6L8OY6iQwvv4NCJnGBaDyivBJ7u15e+Q LkaUmYWbvMeegG0PCCcHbhLUr0WsQwjGpbnE7h3ciickRVho2/kTqXBY+ClsdEpF BIqsKY5M+bunulgQkWTH5y6j5Jiu4QWDFNydhntZYyFQoSWJJHsioQo9LTFusjPU j/Fw0nk2GjUntg3j9/I5XcWiNQu8lU3SUHCZTY+g3HnLsNhPg6JNIs8vfdI8tV3r G57sRWETJoIAGn7s+ejbyo1l1hqKF7GWyT3Nn6Q5DFLboRuYFFzKLl0RoOWtW6t9 7YuFUmkHrJ3rQKWo6EQc9kB3SskCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIPHy1tRsNI0HJBkKdvLgTk/Rz4IMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNTQyNjEyNC0wNTljLTQzYWQtYTE1MC04MjJiOWQ1ZmIzZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDI2MTI0 LTA1OWMtNDNhZC1hMTUwLTgyMmI5ZDVmYjNmMy8wLzgzQzdDQjVCNTFCMEQyMzQx QzkwNjQyOURCQ0I4MTM5M0Y0NzNFMDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnoJMwDwQCAAIwCQMHACABDfWmgDANBgkqhkiG9w0BAQsFAAOCAQEAY/fxH4St NQt/oNF7lN1afA3f9ZisD7Hr1R1jheZjxaDWvuDRGRi8LLMwDj20qu6ayb/OJVRo Tt6hCt6zPJIBvnNakq/egeaiGVxEyFnH2dwXXf/wWWaFOtGiL0ZiFCBpr2trQVtD 5EkTSNxzEsJiLdRyPqJpJldpLgBimxaVp1dzpdS+iu27YjtSaA5bTo1iIZjie5vH 30tGx7AoPDG2UQdr9964/q8n8SsuvQeI1BkKuDEKmHUpp967j5KMnPV6h6D3lt36 r5Ii1VIeT5n0OFBAzKE21pqs0spNMBfORhJ/+2Mtxm7u5qwzRyukY3kxU9vbzXde 3xO34s+uTTIz5g== -----END CERTIFICATE-----Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org