$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer (raw, json) Hash identifier: biK9LUDXruJ71BuOevF8XVw7ys8R8XrkV695S+2k9GM= Subject key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69F43013024A9DE30697615A4989B2AD7DC4F2EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft caRepository: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 16 Sep 2023 13:58:03 +0000 Certificate not after: Sat 14 Sep 2024 14:03:03 +0000 Subordinate resources: IP: 103.165.155.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f4:30:13:02:4a:9d:e3:06:97:61:5a:49:89:b2:ad:7d:c4:f2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 13:58:03 2023 GMT Not After : Sep 14 14:03:03 2024 GMT Subject: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:c0:53:e4:d4:30:a9:e9:af:66:3a:13:50: d8:3d:e0:5f:3d:cf:c3:e6:92:37:1a:bc:30:4b:1d: 59:03:3b:20:75:b1:3c:15:8f:24:4b:ce:5b:eb:98: f5:86:fd:e3:45:51:db:98:7f:72:86:4a:a9:76:3b: 45:95:1e:32:d5:fb:0d:b4:99:42:79:af:39:a2:ac: 2a:1a:c0:0c:4f:84:51:1a:28:12:7f:00:6d:5a:b1: e1:63:10:82:25:da:d8:ec:b7:ea:a8:02:5c:63:84: c2:b3:20:7d:c5:62:60:82:92:76:a5:59:5e:32:8e: 36:7a:66:b3:39:fc:4e:64:6b:bf:85:04:88:1d:82: 75:23:ff:8b:3a:04:0e:14:1e:42:e4:b2:8b:bb:51: cd:9c:8b:66:b7:19:71:f3:ea:d7:c4:67:16:3a:3b: 23:25:3f:d0:b9:ba:bf:6e:66:86:7c:42:c2:a1:a3: 1f:43:d6:f7:9b:7b:dd:81:ec:b1:84:09:2d:8a:9f: cc:77:f5:61:0d:49:a7:25:05:35:46:fa:67:91:0e: da:d4:2f:f4:d9:40:ca:c5:c4:34:38:07:f9:0b:fa: 1f:d8:b9:a9:be:e2:28:93:76:5a:38:c2:3b:5c:cb: 67:aa:27:1d:6a:78:60:12:e9:40:f7:af:0d:68:41: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.155.0/24 Signature Algorithm: sha256WithRSAEncryption 77:67:77:1e:4b:88:a5:45:4e:d2:b0:c8:14:ed:1b:e2:a1:27: c0:4d:2e:2d:60:e6:f6:16:fd:54:0f:d7:4d:21:d4:f8:64:9d: 22:5d:e6:2c:f0:a0:76:af:57:3a:d2:5b:8b:af:d3:ad:70:76: 4e:d8:cf:53:3e:d6:4f:4b:05:a4:b1:74:f7:a3:c2:f4:9c:00: 41:d4:d7:97:39:d5:8c:48:b3:4a:a3:78:8f:87:ca:fb:29:54: fa:47:3b:c0:5e:f1:8f:7f:32:5c:03:96:e5:3a:ee:db:db:ee: 43:4f:33:95:06:59:18:51:74:2d:ef:a7:cc:13:77:3a:03:51: 8d:46:23:da:86:18:3f:4e:97:63:f2:8b:d5:a7:c8:85:42:6b: 74:b7:56:00:80:02:d0:dc:48:31:da:c2:52:9a:93:e0:12:41: 02:79:80:19:64:c6:70:35:39:6c:cb:91:f7:ac:5d:45:4d:9e: d5:80:25:5b:8d:d5:5a:3a:f8:4e:d9:18:3e:7c:2e:3b:47:8c: f3:64:46:f1:8e:2b:0b:7a:f1:41:c1:f6:ea:82:2c:d2:7b:08: bc:f6:4e:eb:2d:55:c5:55:ea:37:d4:bb:99:c3:71:d9:2b:a6: 58:ac:30:61:41:e5:37:dd:85:18:dc:85:c9:2e:d8:15:a7:93: 2c:db:b8:a3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUafQwEwJKneMGl2FaSYmyrX3E8uowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNjEzNTgwM1oX DTI0MDkxNDE0MDMwM1owMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2 QUY2MDk2RDZEQjZGNTFFRkUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTVwFPk1DCp6a9mOhNQ2D3gXz3Pw+aSNxq8MEsdWQM7IHWxPBWPJEvOW+uY 9Yb940VR25h/coZKqXY7RZUeMtX7DbSZQnmvOaKsKhrADE+EURooEn8AbVqx4WMQ giXa2Oy36qgCXGOEwrMgfcViYIKSdqVZXjKONnpmszn8TmRrv4UEiB2CdSP/izoE DhQeQuSyi7tRzZyLZrcZcfPq18RnFjo7IyU/0Lm6v25mhnxCwqGjH0PW95t73YHs sYQJLYqfzHf1YQ1JpyUFNUb6Z5EO2tQv9NlAysXENDgH+Qv6H9i5qb7iKJN2WjjC O1zLZ6onHWp4YBLpQPevDWhBVa0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJrXEn7EMKTJth9q9gltbbb1Hv40MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MGZlMmFj LTI5ZjYtNDNhMi1iZTY0LTA2YTNhZTlkOGQyMC8wLzlBRDcxMjdFQzQzMEE0QzlC NjFGNkFGNjA5NkQ2REI2RjUxRUZFMzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpZswDQYJKoZIhvcNAQELBQADggEBAHdndx5LiKVFTtKwyBTtG+KhJ8BNLi1g 5vYW/VQP100h1PhknSJd5izwoHavVzrSW4uv061wdk7Yz1M+1k9LBaSxdPejwvSc AEHU15c51YxIs0qjeI+HyvspVPpHO8Be8Y9/MlwDluU67tvb7kNPM5UGWRhRdC3v p8wTdzoDUY1GI9qGGD9Ol2Pyi9WnyIVCa3S3VgCAAtDcSDHawlKak+ASQQJ5gBlk xnA1OWzLkfesXUVNntWAJVuN1Vo6+E7ZGD58LjtHjPNkRvGOKwt68UHB9uqCLNJ7 CLz2TustVcVV6jfUu5nDcdkrplisMGFB5TfdhRjchcku2BWnkyzbuKM= -----END CERTIFICATE-----Generated at Thu May 9 00:29:13 2024 by rpki-client on console-ams.rpki-client.org