$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer (raw, json) Hash identifier: Bl8u3Sk91ClpBb5aHPAIG3k4d1AlNkSLnAOudJwYDjA= Subject key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62297F9C1A7F988F01AE0B482A56DF9235C69AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft caRepository: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 May 2024 20:53:25 +0000 Certificate not after: Thu 01 May 2025 20:58:25 +0000 Subordinate resources: IP: 103.169.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:29:7f:9c:1a:7f:98:8f:01:ae:0b:48:2a:56:df:92:35:c6:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 20:53:25 2024 GMT Not After : May 1 20:58:25 2025 GMT Subject: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:c8:85:1b:4f:da:5b:ea:79:5f:9c:19:7e: b0:4f:a7:e5:d3:f7:47:40:26:30:92:3e:dd:9c:74: 2a:64:d7:b8:b6:6c:48:26:11:9d:2b:15:01:24:a5: 4b:ea:8a:30:76:e5:ea:ea:29:95:e7:f7:26:70:03: 95:8a:8e:bd:b2:54:46:b4:d8:8a:a6:ad:29:ef:11: f3:87:e8:e4:17:63:2a:3e:31:4a:41:b3:be:97:9c: ee:45:7f:a4:cb:b6:95:b8:8b:c2:73:40:d4:41:d7: 79:e6:af:63:c1:57:e7:f2:e6:04:f0:0c:55:95:d3: 31:6f:65:02:86:ba:fe:49:b4:48:9b:b5:af:1e:e5: a3:3f:62:7f:74:c9:21:17:1f:17:8b:a0:43:10:8b: 2d:a9:0e:06:a3:27:98:38:d9:d1:85:c9:0a:52:2a: 6e:92:d9:b3:5b:6e:7f:4d:5d:f9:8a:71:d5:97:4f: 39:96:54:54:a6:34:8c:94:da:fe:3f:8c:a8:a7:50: 99:ec:c3:66:b9:fe:82:f1:c9:c3:84:f7:cd:30:15: f3:c0:b6:72:4c:7c:25:6e:e5:49:4a:90:b6:19:19: 76:a1:b9:15:90:94:23:4a:4a:66:d3:59:73:d1:a6: 49:7d:f7:ba:11:06:52:4d:61:0e:bf:2f:3d:44:ff: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.194.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:1d:9f:96:74:0f:bb:99:ef:58:28:44:57:d4:84:9c:58:57: b5:17:cc:64:b9:a7:bf:d9:5f:30:d5:1a:4a:70:fb:08:09:42: bf:67:45:a3:d4:de:3d:3c:55:b5:5a:1b:ba:20:4a:f3:56:a6: 16:f3:ff:19:ee:7a:85:7e:8b:73:cd:76:2d:e0:86:7c:0b:02: 79:1c:08:db:2f:34:4f:14:1a:87:d0:4b:fa:be:36:39:8e:27: 6f:f9:4b:f8:68:70:64:82:c0:63:d3:84:a2:7e:9a:4f:4b:23: 8f:f9:59:c4:a7:c3:51:49:b4:e1:ff:98:5c:02:56:4e:f1:c0: 5e:b4:89:89:48:5d:5b:77:d1:6d:be:17:ce:94:7e:63:46:d0: 5b:d3:91:dd:27:8b:a5:a3:43:71:b8:25:08:fb:54:71:95:f0: dd:dc:06:6c:df:68:35:c3:b0:76:4f:d1:45:36:19:a1:ab:33: ce:03:13:39:35:d3:87:7b:09:fc:f8:eb:5b:e6:c5:26:ed:ca: 7a:9e:21:6e:2a:94:6a:e6:7c:36:b0:0b:f8:44:94:af:f5:cf: e2:ce:71:67:41:9d:68:e8:30:a1:1a:10:fc:b4:4c:6b:7c:7a: f2:17:66:b1:d1:7d:e0:cd:bd:d5:ed:fb:f6:bd:1d:ca:38:0a: 7f:34:c1:97 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYil/nBp/mI8BrgtIKlbfkjXGmuAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwMjIwNTMyNVoX DTI1MDUwMTIwNTgyNVowMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3 NzI3OERBODY2NkM4Mzg5RDdCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6nyIUbT9pb6nlfnBl+sE+n5dP3R0AmMJI+3Zx0KmTXuLZsSCYRnSsVASSl S+qKMHbl6uoplef3JnADlYqOvbJURrTYiqatKe8R84fo5BdjKj4xSkGzvpec7kV/ pMu2lbiLwnNA1EHXeeavY8FX5/LmBPAMVZXTMW9lAoa6/km0SJu1rx7loz9if3TJ IRcfF4ugQxCLLakOBqMnmDjZ0YXJClIqbpLZs1tuf01d+Ypx1ZdPOZZUVKY0jJTa /j+MqKdQmezDZrn+gvHJw4T3zTAV88C2ckx8JW7lSUqQthkZdqG5FZCUI0pKZtNZ c9GmSX33uhEGUk1hDr8vPUT/8WMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJv+Py/pdnelkKx3J42oZmyDide/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzMmM4MjNk LWE0YjctNDAwNS05YWI4LWQzYjJjOGJiZjc2My8wLzlCRkUzRjJGRTk3Njc3QTU5 MEFDNzcyNzhEQTg2NjZDODM4OUQ3QkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqcIwDQYJKoZIhvcNAQELBQADggEBAD0dn5Z0D7uZ71goRFfUhJxYV7UXzGS5 p7/ZXzDVGkpw+wgJQr9nRaPU3j08VbVaG7ogSvNWphbz/xnueoV+i3PNdi3ghnwL AnkcCNsvNE8UGofQS/q+NjmOJ2/5S/hocGSCwGPThKJ+mk9LI4/5WcSnw1FJtOH/ mFwCVk7xwF60iYlIXVt30W2+F86UfmNG0FvTkd0ni6WjQ3G4JQj7VHGV8N3cBmzf aDXDsHZP0UU2GaGrM84DEzk104d7Cfz461vmxSbtynqeIW4qlGrmfDawC/hElK/1 z+LOcWdBnWjoMKEaEPy0TGt8evIXZrHRfeDNvdXt+/a9Hco4Cn80wZc= -----END CERTIFICATE-----Generated at Wed May 8 21:02:19 2024 by rpki-client on console-fra.rpki-client.org