$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer File: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer (raw, json) Hash identifier: Ezop1xUIpQdjND8Ktb5Q98I+yzNXOC5DkQHYOesVSAM= Subject key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 359D6E69634818E6318D63A5928FBFD565966C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft caRepository: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Sep 2023 02:58:23 +0000 Certificate not after: Sat 28 Sep 2024 03:03:23 +0000 Subordinate resources: IP: 27.121.80.0/21 IP: 2404:5a00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:6e:69:63:48:18:e6:31:8d:63:a5:92:8f:bf:d5:65:96:6c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 30 02:58:23 2023 GMT Not After : Sep 28 03:03:23 2024 GMT Subject: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:5d:3c:6e:ff:88:11:34:8c:cc:59:61:63: 4f:61:a9:47:26:f2:6e:d6:0a:56:29:63:e3:fc:18: 84:a6:83:e4:82:01:2f:9c:e9:36:54:d1:62:9c:57: 79:57:43:1c:93:a6:dc:f3:51:70:a2:72:11:2c:0c: 3c:f4:90:bc:94:41:f4:f3:64:f2:83:fc:39:de:97: 22:1b:db:89:1a:68:f1:2b:77:75:8a:90:a6:7d:b9: 02:32:9a:8d:b3:eb:b6:1a:12:b8:7c:7d:da:a6:cf: 40:58:65:99:9f:14:00:a1:80:c7:ef:7c:da:c0:c2: 11:65:8d:c5:4b:ca:d8:3d:60:3d:d9:16:5f:57:01: 4f:25:ed:bc:f2:eb:16:1f:1b:ec:ae:f6:75:49:91: 8c:0c:84:7f:58:e8:1f:b0:88:8c:48:89:a3:66:d9: 76:e5:7b:e4:5f:ca:fc:75:9f:96:05:ed:08:1f:a0: 83:3f:9f:c4:a7:35:41:43:cd:a8:f9:07:22:47:56: 5a:c3:10:62:ca:3b:4b:12:74:65:b6:c4:8a:81:1a: a8:16:01:70:74:58:2e:64:49:74:77:ff:17:f6:a6: 93:71:d1:66:7b:81:fc:00:42:71:0e:c7:40:e2:c9: 51:6b:90:00:5f:e8:a2:16:55:98:c8:2a:26:4e:bf: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.121.80.0/21 IPv6: 2404:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 10:c7:90:34:bc:1f:1e:f7:10:b9:9b:b0:e4:d7:66:86:b3:1a: 42:0b:58:6e:da:69:f5:0f:6a:b1:89:a8:df:da:f1:e1:97:d3: 59:38:c5:09:3b:9d:55:17:37:23:01:74:7e:e5:cf:ce:e4:c9: 02:7a:0c:d7:45:17:ff:23:4c:bf:95:ab:ab:be:0d:a7:16:e0: 80:fc:8e:a2:7f:45:49:a3:db:cc:df:0b:31:8e:dd:f9:77:a1: 75:7c:52:80:4d:85:95:50:b7:c9:2c:9d:38:10:33:a9:52:b4: bb:67:90:4a:41:2e:10:a5:6a:0b:65:4d:a7:0c:21:77:e1:71: 9f:b1:3d:d6:da:2c:b4:57:66:43:3a:39:70:de:38:b6:e4:ef: c8:70:ef:39:25:1d:18:a7:1e:85:4e:a8:b4:3a:90:9b:43:65: 68:de:22:1f:34:f5:65:d0:8f:5f:66:70:b0:52:09:b0:ae:d7: 64:a0:ce:0c:a1:52:f5:c0:97:05:da:d0:89:b7:b2:cf:8c:64: 7b:af:8e:28:59:73:c0:f7:1f:ac:5a:07:75:4b:f2:0d:54:6d: bc:f5:85:65:6f:ac:30:2c:ed:91:74:fc:fa:92:0b:93:96:20: ae:fe:b6:d2:c6:85:a8:ec:be:5a:13:8d:ff:3a:f7:60:eb:a2: b8:ce:36:bf -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUNZ1uaWNIGOYxjWOlko+/1WWWbCUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkzMDAyNTgyM1oX DTI0MDkyODAzMDMyM1owMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5 MEZBODUwNDRBOUM4MEIzOEE0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfTXTxu/4gRNIzMWWFjT2GpRybybtYKVilj4/wYhKaD5IIBL5zpNlTRYpxX eVdDHJOm3PNRcKJyESwMPPSQvJRB9PNk8oP8Od6XIhvbiRpo8St3dYqQpn25AjKa jbPrthoSuHx92qbPQFhlmZ8UAKGAx+982sDCEWWNxUvK2D1gPdkWX1cBTyXtvPLr Fh8b7K72dUmRjAyEf1joH7CIjEiJo2bZduV75F/K/HWflgXtCB+ggz+fxKc1QUPN qPkHIkdWWsMQYso7SxJ0ZbbEioEaqBYBcHRYLmRJdHf/F/amk3HRZnuB/ABCcQ7H QOLJUWuQAF/oohZVmMgqJk6/9+ECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJMKTtK4Wqn+d+2Q+oUESpyAs4pGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNjI4MDlj LWJmYjYtNGZlNy04ZGQ2LWNhNjAyMmNkZDU0MC8wLzkzMEE0RUQyQjg1QUE5RkU3 N0VEOTBGQTg1MDQ0QTlDODBCMzhBNDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAMbeVAwDQQCAAIwBwMFACQEWgAwDQYJKoZIhvcNAQELBQADggEBABDHkDS8Hx73 ELmbsOTXZoazGkILWG7aafUParGJqN/a8eGX01k4xQk7nVUXNyMBdH7lz87kyQJ6 DNdFF/8jTL+Vq6u+DacW4ID8jqJ/RUmj28zfCzGO3fl3oXV8UoBNhZVQt8ksnTgQ M6lStLtnkEpBLhClagtlTacMIXfhcZ+xPdbaLLRXZkM6OXDeOLbk78hw7zklHRin HoVOqLQ6kJtDZWjeIh809WXQj19mcLBSCbCu12SgzgyhUvXAlwXa0Im3ss+MZHuv jihZc8D3H6xaB3VL8g1Ubbz1hWVvrDAs7ZF0/PqSC5OWIK7+ttLGhajsvloTjf86 92DrorjONr8= -----END CERTIFICATE-----Generated at Wed May 8 21:02:18 2024 by rpki-client on console-fra.rpki-client.org