$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer File: 9481EF5008E46F3618B42A0945A1522D5C041511.cer (raw, json) Hash identifier: 7UoTm2pO77VGk7dAQPHlnYDaYUDe4EX9xXkdahNXMQU= Subject key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 622B747CF737CFA3D4FB99B32922BB919E54A227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft caRepository: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Jan 2024 11:49:33 +0000 Certificate not after: Thu 02 Jan 2025 11:54:33 +0000 Subordinate resources: IP: 103.59.160.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2b:74:7c:f7:37:cf:a3:d4:fb:99:b3:29:22:bb:91:9e:54:a2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 4 11:49:33 2024 GMT Not After : Jan 2 11:54:33 2025 GMT Subject: CN=9481EF5008E46F3618B42A0945A1522D5C041511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:1c:4e:d1:1f:f3:7d:70:58:3d:48:51:10: bd:20:89:67:fe:1f:85:58:b3:54:d3:f1:cd:a3:c4: 1e:05:ad:c1:d9:c3:5d:f9:ad:7c:1c:bf:47:9e:f0: 7b:4f:58:3d:5e:4f:f2:78:ca:f1:61:ef:56:bc:32: 8c:d5:b2:22:3c:0c:a1:2e:13:f7:b8:78:2d:e5:73: 49:d3:73:b9:7c:0f:59:23:bb:7a:33:d1:68:80:a4: ab:08:37:fa:81:c7:b9:2a:91:27:1e:f5:36:f1:54: 60:5e:88:fb:e6:a3:17:92:38:ab:b2:da:92:81:0d: af:4a:f5:52:fb:f1:d2:65:40:6f:f7:49:32:a8:04: 50:1f:b0:9b:7a:40:87:49:31:56:8b:73:33:31:40: 52:a3:86:90:fc:11:61:46:26:b7:9c:d3:5f:26:07: db:ad:4f:5c:7c:c3:99:23:6b:02:a5:40:05:9c:67: d2:d9:e1:dd:ee:c2:16:75:64:b5:1f:0a:39:3a:78: f0:59:b9:61:c8:6e:80:3f:49:64:ae:57:c8:07:72: 48:a3:7a:4c:fd:a5:d3:ef:ae:b3:0f:1d:b8:d5:48: a4:b9:46:0e:6a:3c:9a:44:6a:be:fc:7f:79:f6:63: 01:d9:8f:75:23:10:0c:f9:41:72:d2:25:86:8b:b4: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.160.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:48:31:d5:ce:1e:55:fa:7b:40:ed:7b:f2:ca:3b:53:c3:bf: f2:82:c8:b5:e8:a9:e8:e3:22:bb:42:4a:ef:87:60:4e:df:0d: ff:da:f1:e9:0c:9b:09:14:9e:09:7a:fd:c8:9c:09:ab:3f:95: 36:44:ed:8b:ee:a4:0e:18:10:c6:74:d1:f9:91:0c:b5:e1:59: 71:27:ad:6b:87:48:dd:25:eb:de:f1:9b:ea:fd:cd:30:fd:52: c5:3a:e7:b7:f7:c7:e4:c7:3d:8a:5d:17:49:b7:c1:50:a8:ec: 9a:43:04:9f:95:a1:ca:90:ae:37:d4:f1:a8:bd:03:a0:b1:d4: 2f:4a:58:34:b8:4e:43:70:5a:e8:07:a7:9f:35:7f:29:0e:3b: 36:92:c2:29:d7:bd:8b:d5:5e:47:3e:06:25:c9:ee:3f:56:63: 3d:6d:97:b2:30:b1:dc:5c:69:14:51:53:ca:6c:da:5d:f5:29: a4:fa:87:49:f0:c8:df:80:a7:c8:69:1d:9f:57:ea:14:6a:a0: d9:95:05:b8:e9:ec:bc:2c:38:b0:dd:ee:ef:bf:87:a4:a6:2b: bf:7d:c0:e6:55:68:26:d8:d0:4a:bf:e0:f5:3b:65:3d:cf:2b: ff:07:02:1a:4e:40:63:49:63:25:2a:c0:eb:b1:90:5b:7e:95: da:49:98:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYit0fPc3z6PU+5mzKSK7kZ5UoicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwNDExNDkzM1oX DTI1MDEwMjExNTQzM1owMzExMC8GA1UEAxMoOTQ4MUVGNTAwOEU0NkYzNjE4QjQy QTA5NDVBMTUyMkQ1QzA0MTUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBSHE7RH/N9cFg9SFEQvSCJZ/4fhVizVNPxzaPEHgWtwdnDXfmtfBy/R57w e09YPV5P8njK8WHvVrwyjNWyIjwMoS4T97h4LeVzSdNzuXwPWSO7ejPRaICkqwg3 +oHHuSqRJx71NvFUYF6I++ajF5I4q7LakoENr0r1Uvvx0mVAb/dJMqgEUB+wm3pA h0kxVotzMzFAUqOGkPwRYUYmt5zTXyYH261PXHzDmSNrAqVABZxn0tnh3e7CFnVk tR8KOTp48Fm5YchugD9JZK5XyAdySKN6TP2l0++usw8duNVIpLlGDmo8mkRqvvx/ efZjAdmPdSMQDPlBctIlhou0mTMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJSB71AI5G82GLQqCUWhUi1cBBURMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZGJkM2E1MC04MzJlLTQxMjctOTRlMS00OGFjZTE2NGNmMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkYmQzYTUw LTgzMmUtNDEyNy05NGUxLTQ4YWNlMTY0Y2YyNi8wLzk0ODFFRjUwMDhFNDZGMzYx OEI0MkEwOTQ1QTE1MjJENUMwNDE1MTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnO6AwDQYJKoZIhvcNAQELBQADggEBAI9IMdXOHlX6e0Dte/LKO1PDv/KCyLXo qejjIrtCSu+HYE7fDf/a8ekMmwkUngl6/cicCas/lTZE7YvupA4YEMZ00fmRDLXh WXEnrWuHSN0l697xm+r9zTD9UsU657f3x+THPYpdF0m3wVCo7JpDBJ+VocqQrjfU 8ai9A6Cx1C9KWDS4TkNwWugHp581fykOOzaSwinXvYvVXkc+BiXJ7j9WYz1tl7Iw sdxcaRRRU8ps2l31KaT6h0nwyN+Ap8hpHZ9X6hRqoNmVBbjp7LwsOLDd7u+/h6Sm K799wOZVaCbY0Eq/4PU7ZT3PK/8HAhpOQGNJYyUqwOuxkFt+ldpJmNo= -----END CERTIFICATE-----Generated at Wed May 8 09:50:33 2024 by rpki-client on console-fra.rpki-client.org