$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer (raw, json) Hash identifier: /Gxtr+9LvRiwyitO8xYQt1VHwNkXXVhonll1yneoEA4= Subject key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29BEB7F5C11D7EFF785C7C4D6C062534D3AEAE1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Sep 2023 10:28:21 +0000 Certificate not after: Fri 13 Sep 2024 10:33:21 +0000 Subordinate resources: IP: 103.175.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:be:b7:f5:c1:1d:7e:ff:78:5c:7c:4d:6c:06:25:34:d3:ae:ae:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 10:28:21 2023 GMT Not After : Sep 13 10:33:21 2024 GMT Subject: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:d9:6c:8f:8f:cb:ac:aa:6f:db:ed:17:7e: 14:8c:f3:ad:27:a2:1e:29:ce:3c:33:e1:a0:4c:1f: d0:09:db:d4:30:c7:e1:30:c0:67:7d:08:14:2c:5e: ce:a7:1a:a9:68:3a:39:d1:85:56:6c:1e:e1:47:49: 6e:99:b0:87:89:9c:c5:f8:37:fb:01:07:54:b0:41: 17:18:61:b4:32:9b:a8:bf:fa:1c:bc:be:83:ae:d8: e3:37:42:97:b1:ea:46:4c:48:59:34:2e:46:ce:28: 69:7a:9f:a7:52:9c:e2:56:2f:25:82:b4:e2:59:4a: 73:28:55:b8:1b:7e:8d:b0:a8:74:2b:ad:40:f8:dc: 45:4f:49:08:32:fc:56:00:88:40:87:43:64:8e:2e: 84:e0:b8:4f:c5:7a:a9:b1:cf:6f:90:dc:f2:81:92: 1d:b0:95:8a:68:44:be:cf:43:35:fa:67:cb:1b:87: 47:2e:48:db:da:ae:c0:8d:f6:80:94:8b:d7:e5:c5: 88:3f:e4:db:00:41:54:4f:1e:49:bf:b5:d6:8f:50: ef:cc:38:8a:0f:4d:fd:12:de:ff:ef:48:fc:ce:be: c2:a5:99:08:1c:75:cf:21:83:77:0b:02:04:51:64: 43:70:d0:28:c7:88:a4:3b:12:39:00:69:80:c7:52: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.112.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:d4:71:4a:55:49:45:36:49:6e:b8:11:cb:8f:94:1b:d2:b0: 54:c2:74:cb:c0:2e:e1:fb:cb:bd:eb:3e:a9:00:9b:40:51:8d: 76:f2:ea:ea:1a:af:ec:91:26:65:48:27:f2:24:6a:be:ba:c1: c1:62:a4:82:25:99:1e:ed:46:27:cf:b0:bb:cb:1f:21:4e:3d: 25:74:ad:92:53:5e:2d:48:c5:f6:3c:6e:0e:a8:72:51:8a:15: 8d:e3:0a:89:33:d8:c6:5e:d9:2e:f0:68:0c:7a:f1:36:f3:91: e5:9b:4e:f3:eb:4f:e7:62:db:8f:be:40:33:91:e9:26:a3:4b: 8b:0a:9c:07:af:5e:3c:90:f5:ec:6b:cd:94:9e:60:20:82:57: a1:17:e3:a1:cb:d2:a2:ae:72:b0:04:ca:f4:6d:48:10:a3:1d: 16:09:2d:90:d4:a0:4d:d0:a3:e6:e4:69:09:9d:60:bb:0c:35: cc:6d:b6:8a:62:82:58:43:76:a7:d7:d8:e9:7a:80:4a:53:79: 49:ca:87:3c:e7:b3:3c:17:77:6b:ac:db:58:30:e2:e9:bf:5f: 20:7f:36:a8:df:ca:0c:7a:8e:f1:70:c9:7a:3f:e7:ca:e5:42: 43:1a:4f:81:a8:f0:12:2d:a8:5c:23:fd:6a:99:20:5e:b5:28: ee:21:80:b3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKb639cEdfv94XHxNbAYlNNOurh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNTEwMjgyMVoX DTI0MDkxMzEwMzMyMVowMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRC RUM3N0FBNTg5RDdFMTcxNDVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZF2WyPj8usqm/b7Rd+FIzzrSeiHinOPDPhoEwf0Anb1DDH4TDAZ30IFCxe zqcaqWg6OdGFVmwe4UdJbpmwh4mcxfg3+wEHVLBBFxhhtDKbqL/6HLy+g67Y4zdC l7HqRkxIWTQuRs4oaXqfp1Kc4lYvJYK04llKcyhVuBt+jbCodCutQPjcRU9JCDL8 VgCIQIdDZI4uhOC4T8V6qbHPb5Dc8oGSHbCVimhEvs9DNfpnyxuHRy5I29quwI32 gJSL1+XFiD/k2wBBVE8eSb+11o9Q78w4ig9N/RLe/+9I/M6+wqWZCBx1zyGDdwsC BFFkQ3DQKMeIpDsSOQBpgMdSfxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJeiXT/dqsQ3HfS+x3qlidfhcUXcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiZjFkYWZj LWI4MjktNDJjYi1iMTdjLTAxNWYwYTkwZDgzZC8wLzk3QTI1RDNGRERBQUM0Mzcx REY0QkVDNzdBQTU4OUQ3RTE3MTQ1REMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr3AwDQYJKoZIhvcNAQELBQADggEBAHrUcUpVSUU2SW64EcuPlBvSsFTCdMvA LuH7y73rPqkAm0BRjXby6uoar+yRJmVIJ/Ikar66wcFipIIlmR7tRifPsLvLHyFO PSV0rZJTXi1IxfY8bg6oclGKFY3jCokz2MZe2S7waAx68TbzkeWbTvPrT+di24++ QDOR6SajS4sKnAevXjyQ9exrzZSeYCCCV6EX46HL0qKucrAEyvRtSBCjHRYJLZDU oE3Qo+bkaQmdYLsMNcxttopiglhDdqfX2Ol6gEpTeUnKhzznszwXd2us21gw4um/ XyB/Nqjfygx6jvFwyXo/58rlQkMaT4Go8BItqFwj/WqZIF61KO4hgLM= -----END CERTIFICATE-----Generated at Wed May 8 05:33:19 2024 by rpki-client on console-ams.rpki-client.org