$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer (raw, json) Hash identifier: cKvl+4RNWp5lTnrqTB2dTYebm+LZ+jVNd9eluJBSFsc= Subject key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 490376AC324455D163C4F1BF300A9401DB7EA881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Aug 2024 23:41:20 +0000 Certificate not after: Fri 15 Aug 2025 23:46:20 +0000 Subordinate resources: IP: 103.175.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:76:ac:32:44:55:d1:63:c4:f1:bf:30:0a:94:01:db:7e:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 16 23:41:20 2024 GMT Not After : Aug 15 23:46:20 2025 GMT Subject: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:d9:6c:8f:8f:cb:ac:aa:6f:db:ed:17:7e: 14:8c:f3:ad:27:a2:1e:29:ce:3c:33:e1:a0:4c:1f: d0:09:db:d4:30:c7:e1:30:c0:67:7d:08:14:2c:5e: ce:a7:1a:a9:68:3a:39:d1:85:56:6c:1e:e1:47:49: 6e:99:b0:87:89:9c:c5:f8:37:fb:01:07:54:b0:41: 17:18:61:b4:32:9b:a8:bf:fa:1c:bc:be:83:ae:d8: e3:37:42:97:b1:ea:46:4c:48:59:34:2e:46:ce:28: 69:7a:9f:a7:52:9c:e2:56:2f:25:82:b4:e2:59:4a: 73:28:55:b8:1b:7e:8d:b0:a8:74:2b:ad:40:f8:dc: 45:4f:49:08:32:fc:56:00:88:40:87:43:64:8e:2e: 84:e0:b8:4f:c5:7a:a9:b1:cf:6f:90:dc:f2:81:92: 1d:b0:95:8a:68:44:be:cf:43:35:fa:67:cb:1b:87: 47:2e:48:db:da:ae:c0:8d:f6:80:94:8b:d7:e5:c5: 88:3f:e4:db:00:41:54:4f:1e:49:bf:b5:d6:8f:50: ef:cc:38:8a:0f:4d:fd:12:de:ff:ef:48:fc:ce:be: c2:a5:99:08:1c:75:cf:21:83:77:0b:02:04:51:64: 43:70:d0:28:c7:88:a4:3b:12:39:00:69:80:c7:52: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.112.0/23 Signature Algorithm: sha256WithRSAEncryption 41:b2:47:fd:67:d4:92:80:e2:02:61:5a:96:26:37:9a:f8:d1: b0:8f:31:97:4b:af:f2:42:b2:60:14:42:70:fb:4a:67:9c:47: f3:a0:7b:26:74:3a:d5:e5:8c:fc:c0:2b:4c:8b:cc:f1:0e:ba: 0f:3e:7e:5a:e5:6f:50:c0:52:38:96:63:f6:c3:f5:0f:7e:18: 43:82:99:08:c9:06:1a:e4:17:2b:00:39:23:f9:28:3a:7d:ae: 3e:a9:43:a9:ac:cc:34:e0:00:01:f9:51:53:3f:bf:d4:c1:03: 6a:b7:06:fb:c3:54:c5:3d:58:d2:48:0f:cd:70:8b:09:ca:09: 93:be:ad:6c:e2:f1:ff:68:ef:8b:09:97:47:a5:dc:bb:92:5d: 0d:bb:16:bd:c8:8c:fd:45:f9:06:e1:0f:83:2b:b6:85:6c:3f: c9:cc:e0:43:b5:a4:a8:62:ee:90:49:ed:72:c7:89:5e:b5:37: 9e:87:07:d0:b7:11:ef:6e:8b:3c:15:37:b4:66:12:de:2c:6e: 56:e6:e8:93:91:61:6c:6c:9e:55:c6:d0:20:d8:9a:f9:5f:ee: 60:73:59:08:24:01:9e:1a:16:4f:21:2a:88:48:36:32:f7:6b: 7b:85:bb:19:3c:a3:d4:a7:47:e7:c9:05:65:68:df:db:63:65: 4e:44:29:24 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSQN2rDJEVdFjxPG/MAqUAdt+qIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxNjIzNDEyMFoX DTI1MDgxNTIzNDYyMFowMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRC RUM3N0FBNTg5RDdFMTcxNDVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZF2WyPj8usqm/b7Rd+FIzzrSeiHinOPDPhoEwf0Anb1DDH4TDAZ30IFCxe zqcaqWg6OdGFVmwe4UdJbpmwh4mcxfg3+wEHVLBBFxhhtDKbqL/6HLy+g67Y4zdC l7HqRkxIWTQuRs4oaXqfp1Kc4lYvJYK04llKcyhVuBt+jbCodCutQPjcRU9JCDL8 VgCIQIdDZI4uhOC4T8V6qbHPb5Dc8oGSHbCVimhEvs9DNfpnyxuHRy5I29quwI32 gJSL1+XFiD/k2wBBVE8eSb+11o9Q78w4ig9N/RLe/+9I/M6+wqWZCBx1zyGDdwsC BFFkQ3DQKMeIpDsSOQBpgMdSfxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJeiXT/dqsQ3HfS+x3qlidfhcUXcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiZjFkYWZj LWI4MjktNDJjYi1iMTdjLTAxNWYwYTkwZDgzZC8wLzk3QTI1RDNGRERBQUM0Mzcx REY0QkVDNzdBQTU4OUQ3RTE3MTQ1REMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr3AwDQYJKoZIhvcNAQELBQADggEBAEGyR/1n1JKA4gJhWpYmN5r40bCPMZdL r/JCsmAUQnD7SmecR/OgeyZ0OtXljPzAK0yLzPEOug8+flrlb1DAUjiWY/bD9Q9+ GEOCmQjJBhrkFysAOSP5KDp9rj6pQ6mszDTgAAH5UVM/v9TBA2q3BvvDVMU9WNJI D81wiwnKCZO+rWzi8f9o74sJl0el3LuSXQ27Fr3IjP1F+QbhD4MrtoVsP8nM4EO1 pKhi7pBJ7XLHiV61N56HB9C3Ee9uizwVN7RmEt4sblbm6JORYWxsnlXG0CDYmvlf 7mBzWQgkAZ4aFk8hKohINjL3a3uFuxk8o9SnR+fJBWVo39tjZU5EKSQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:44 2024 by rpki-client on console-ams.rpki-client.org