$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer (raw, json) Hash identifier: pXuezh2VQ9Ju/DCBQOWouEOR5MyVBzc7+AkpIFKEIRw= Subject key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55DC3DADBCE97F41C089EB8476781B93873D620B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft caRepository: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Jul 2023 14:44:36 +0000 Certificate not after: Thu 18 Jul 2024 14:49:36 +0000 Subordinate resources: IP: 103.171.179.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dc:3d:ad:bc:e9:7f:41:c0:89:eb:84:76:78:1b:93:87:3d:62:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 14:44:36 2023 GMT Not After : Jul 18 14:49:36 2024 GMT Subject: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:6d:3b:50:52:d3:84:76:16:4c:38:61:c1: 30:3e:b2:e0:12:70:8a:78:a6:91:e9:38:3a:de:4a: 7e:17:01:91:0d:ec:5b:98:df:02:ca:a8:ae:9a:8b: 29:04:ed:4e:b6:53:76:1c:86:b9:d9:4d:86:d0:46: b7:11:f1:82:22:97:56:a6:3f:be:e2:a0:c1:df:b6: ec:65:60:0a:c3:7b:72:53:27:04:38:af:dc:57:a2: 6c:c5:96:6f:09:e3:54:aa:5a:e4:0d:35:0c:8f:12: 9a:23:24:7a:87:7d:a7:8b:57:30:03:95:cd:d5:15: b0:72:61:e2:b7:83:31:c3:fb:de:bf:57:47:84:2c: 43:4d:e3:29:4f:d1:7c:88:1c:18:8d:41:67:05:1c: 89:2d:82:37:b1:95:08:68:6b:33:86:10:ab:23:21: e9:5d:50:8c:32:ef:10:e4:07:47:f0:1d:12:95:7f: d9:15:b8:e3:35:86:3a:5c:81:37:45:b9:83:da:6a: 14:ea:7a:31:fd:e5:78:52:4c:d9:4e:49:db:83:a5: 63:e0:0c:b7:eb:42:55:1a:a7:4f:74:94:f8:50:11: 04:96:ab:35:30:37:8a:3a:45:11:ab:41:d4:99:df: ad:d8:e8:d6:3b:ea:d4:d0:77:6e:7b:0d:f6:53:49: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.179.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f0:45:f2:8c:04:36:5f:cf:03:fa:66:b2:50:f2:5c:86:d7: 9c:0e:f7:73:4a:ac:e8:0c:c3:d9:a4:2a:62:e2:09:95:17:46: 57:8b:f2:03:90:4a:36:89:5d:25:8b:b6:1d:f3:52:09:5b:b0: fa:34:97:89:72:9f:29:d5:69:3a:78:f0:17:4a:d6:91:d2:14: 8a:99:53:0d:f4:ad:9a:27:63:9d:95:c0:2d:ae:26:0b:1a:f2: 66:60:9c:c2:a4:07:93:99:3f:10:c7:db:d0:9f:b2:8c:81:90: 50:12:74:fa:25:4d:03:09:74:e8:76:ce:c1:7f:19:db:18:c7: 83:b5:15:f2:9c:71:10:5e:03:c0:59:74:77:b3:62:10:d8:16: 97:b7:ad:4c:3b:71:90:0e:19:1a:c8:7b:ba:f8:c3:f4:59:65: cc:be:dd:42:af:fe:e3:50:14:e5:20:ac:08:7a:1b:28:4c:85: a8:f8:0b:14:51:d7:f7:94:d2:1b:3d:cf:b4:80:1e:d9:0b:24: 30:f9:ba:41:2b:27:5a:f1:28:df:b9:08:2b:aa:35:46:ea:80: 52:07:f7:64:ac:8a:26:50:9b:59:65:56:1b:07:b0:33:4d:5f: b1:2b:c6:33:ed:fc:44:6a:49:7b:9b:d5:5f:1e:75:e8:5b:2b: 86:94:8c:00 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVdw9rbzpf0HAieuEdngbk4c9YgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyMDE0NDQzNloX DTI0MDcxODE0NDkzNlowMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdB OUFCNTQ5QURERTIwQkU4QTRCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoAbTtQUtOEdhZMOGHBMD6y4BJwinimkek4Ot5KfhcBkQ3sW5jfAsqorpqL KQTtTrZTdhyGudlNhtBGtxHxgiKXVqY/vuKgwd+27GVgCsN7clMnBDiv3FeibMWW bwnjVKpa5A01DI8SmiMkeod9p4tXMAOVzdUVsHJh4reDMcP73r9XR4QsQ03jKU/R fIgcGI1BZwUciS2CN7GVCGhrM4YQqyMh6V1QjDLvEOQHR/AdEpV/2RW44zWGOlyB N0W5g9pqFOp6Mf3leFJM2U5J24OlY+AMt+tCVRqnT3SU+FARBJarNTA3ijpFEatB 1Jnfrdjo1jvq1NB3bnsN9lNJ94ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJR5uMXVro+r3Fepq1Sa3eIL6KSzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5MGFhMTU4 LTY1ODEtNGNiZS1iNmNlLWQ4NzIxYzcxOWZhMC8wLzk0NzlCOEM1RDVBRThGQUJE QzU3QTlBQjU0OUFEREUyMEJFOEE0QjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnq7MwDQYJKoZIhvcNAQELBQADggEBAIXwRfKMBDZfzwP6ZrJQ8lyG15wO93NK rOgMw9mkKmLiCZUXRleL8gOQSjaJXSWLth3zUglbsPo0l4lynynVaTp48BdK1pHS FIqZUw30rZonY52VwC2uJgsa8mZgnMKkB5OZPxDH29CfsoyBkFASdPolTQMJdOh2 zsF/GdsYx4O1FfKccRBeA8BZdHezYhDYFpe3rUw7cZAOGRrIe7r4w/RZZcy+3UKv /uNQFOUgrAh6GyhMhaj4CxRR1/eU0hs9z7SAHtkLJDD5ukErJ1rxKN+5CCuqNUbq gFIH92SsiiZQm1llVhsHsDNNX7ErxjPt/ERqSXub1V8edehbK4aUjAA= -----END CERTIFICATE-----Generated at Wed May 8 04:37:53 2024 by rpki-client on console-fra.rpki-client.org