$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer (raw, json) Hash identifier: cinIPVxfTMCA5V6LQ0ih9aAxy3rHvA40MIymCQJI7iU= Subject key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: B67D41A60D0EE51E92845112EAB3E2273FCD95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Oct 2023 03:00:22 +0000 Certificate not after: Mon 28 Oct 2024 03:05:22 +0000 Subordinate resources: IP: 103.227.4.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b6:7d:41:a6:0d:0e:e5:1e:92:84:51:12:ea:b3:e2:27:3f:cd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 30 03:00:22 2023 GMT Not After : Oct 28 03:05:22 2024 GMT Subject: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:1a:e6:19:22:89:d5:dc:9b:7d:dd:c2:3e: f1:59:3b:16:06:c6:0e:c7:b8:89:41:ed:77:7e:9b: 00:b1:5e:61:eb:63:78:17:ed:19:ba:4f:c9:45:aa: 98:32:5c:11:e3:ee:97:cb:72:f1:4b:be:57:9a:1c: 53:75:48:71:35:f1:ff:c4:ad:08:7a:88:f9:64:f8: 49:9c:c2:90:1c:0c:d1:0d:ba:c0:9d:bf:17:4d:7d: 3e:e1:d5:c7:3a:4f:02:16:dc:70:8a:c5:b7:39:2a: 44:01:df:1f:c9:16:73:bf:12:f4:83:7e:b6:d5:42: 39:bd:7f:a4:db:f5:64:e7:f5:47:c5:27:23:15:c0: 53:10:c1:c4:41:e4:db:01:16:a4:f1:4a:16:de:ae: b3:62:f5:3c:f1:03:21:8e:1e:a7:5b:79:b6:b0:94: 33:52:3b:03:66:48:29:58:28:74:d6:71:7a:36:08: 1c:13:58:a7:70:df:02:7d:ff:db:44:90:3f:84:c8: 80:cd:9c:b3:53:d8:90:9c:59:09:46:4b:e0:f7:ba: 69:14:f1:32:6d:bd:01:1d:08:90:6e:c8:88:43:7b: fd:ce:82:42:9f:ae:a5:e3:7b:c4:38:5f:1f:6b:19: ac:c3:51:2d:66:a9:c0:dd:9a:41:b6:d4:0f:35:1b: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.4.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:63:75:7a:73:31:46:f2:1b:12:75:e8:73:81:e8:1c:30:37: 15:95:52:43:94:4b:d9:c2:ac:50:6a:ea:e8:6c:17:e4:9d:83: 4b:02:1b:19:29:b0:d1:62:78:5c:47:63:70:dd:0b:d3:93:f3: e6:78:3c:4f:dd:02:34:3c:c1:fd:78:f2:fd:76:f9:e4:6e:5b: e6:f3:0b:6a:78:76:f3:60:22:cd:3d:6c:f1:0e:08:32:8d:95: 66:f2:e7:81:e2:20:51:27:fa:0d:9a:ab:58:52:d7:ed:b3:8c: 6c:25:54:0d:fc:9a:53:22:a3:40:80:dc:9d:32:16:28:bc:78: 3a:81:1b:36:f5:cb:dc:f7:b7:83:54:8e:32:4b:20:de:59:5b: 0a:73:4e:2a:02:e8:7d:d6:07:42:d7:c0:07:e3:a6:d3:fc:5a: 4c:43:6a:a7:13:4f:cd:13:f1:2c:19:40:75:7a:64:83:d5:ba: f8:c8:8a:88:98:34:49:de:ab:7d:be:b2:31:d5:81:c0:4c:a0: 91:9e:c8:56:7d:c6:bb:85:a9:34:49:ba:75:e5:9d:52:38:de: 1e:76:56:9e:5a:30:08:f7:ba:d5:60:bd:d0:bc:d8:d8:da:20: 7b:6d:d5:fc:a2:e8:4f:2a:4c:5d:97:b8:a5:cd:f2:0f:c8:ba: 48:97:f2:8d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUALZ9QaYNDuUekoRREuqz4ic/zZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAzMDAzMDAyMloX DTI0MTAyODAzMDUyMlowMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4 QjVGNDREOTM4RTJDQTZEQjYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIZGuYZIonV3Jt93cI+8Vk7FgbGDse4iUHtd36bALFeYetjeBftGbpPyUWq mDJcEePul8ty8Uu+V5ocU3VIcTXx/8StCHqI+WT4SZzCkBwM0Q26wJ2/F019PuHV xzpPAhbccIrFtzkqRAHfH8kWc78S9IN+ttVCOb1/pNv1ZOf1R8UnIxXAUxDBxEHk 2wEWpPFKFt6us2L1PPEDIY4ep1t5trCUM1I7A2ZIKVgodNZxejYIHBNYp3DfAn3/ 20SQP4TIgM2cs1PYkJxZCUZL4Pe6aRTxMm29AR0IkG7IiEN7/c6CQp+upeN7xDhf H2sZrMNRLWapwN2aQbbUDzUbbXECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIP6Qn/64C2ABHqLX0TZOOLKbbYJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlN2I5NDc2 LTdlMzgtNGM1MC1hNjI0LWIyNDQzYzcwYmI0ZC8wLzgzRkE0MjdGRkFFMDJEODAw NDdBOEI1RjQ0RDkzOEUyQ0E2REI2MDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn4wQwDQYJKoZIhvcNAQELBQADggEBAHpjdXpzMUbyGxJ16HOB6BwwNxWVUkOU S9nCrFBq6uhsF+Sdg0sCGxkpsNFieFxHY3DdC9OT8+Z4PE/dAjQ8wf148v12+eRu W+bzC2p4dvNgIs09bPEOCDKNlWby54HiIFEn+g2aq1hS1+2zjGwlVA38mlMio0CA 3J0yFii8eDqBGzb1y9z3t4NUjjJLIN5ZWwpzTioC6H3WB0LXwAfjptP8WkxDaqcT T80T8SwZQHV6ZIPVuvjIioiYNEneq32+sjHVgcBMoJGeyFZ9xruFqTRJunXlnVI4 3h52Vp5aMAj3utVgvdC82NjaIHtt1fyi6E8qTF2XuKXN8g/IukiX8o0= -----END CERTIFICATE-----Generated at Wed May 8 17:45:19 2024 by rpki-client on console-ams.rpki-client.org