$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer (raw, json) Hash identifier: gsUq9d/dkyrrkPRLcnfAmMYRc0DmhAeE6WT5OZ96cps= Subject key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41F83B12B6A05B511F2970DFA3E228027381A9F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft caRepository: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Jun 2023 07:43:56 +0000 Certificate not after: Thu 06 Jun 2024 07:48:56 +0000 Subordinate resources: IP: 103.170.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f8:3b:12:b6:a0:5b:51:1f:29:70:df:a3:e2:28:02:73:81:a9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 8 07:43:56 2023 GMT Not After : Jun 6 07:48:56 2024 GMT Subject: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:2c:22:2b:de:95:9c:75:65:39:6a:ae:30: c1:f5:a8:2b:33:ed:96:6f:7e:5f:89:84:45:81:67: 30:1c:e1:db:ef:2f:9e:9c:fd:94:0d:03:d8:fd:99: d1:e9:29:63:b6:84:e1:48:19:5f:f4:ce:17:4a:87: 5c:e0:62:0a:c3:1b:3f:14:d3:22:89:31:d5:29:16: d3:3e:13:1c:f5:bd:6d:6f:3c:76:5e:0e:ca:75:7f: 92:51:3e:df:19:59:72:96:b2:a3:d2:88:83:7e:ad: e5:e0:f3:6d:c6:d2:f8:5f:a8:7c:64:bf:29:d3:0b: d8:97:76:ff:5d:04:87:5a:24:cb:49:62:eb:6f:b2: 3b:c3:cb:35:b5:27:d0:5b:ee:b8:db:2a:10:e2:a6: 54:05:dc:f2:8c:3b:aa:26:a0:40:ae:94:3e:1d:2d: cb:4a:1b:fc:01:96:0b:d5:01:11:31:55:52:1e:18: c2:ee:45:51:8f:cf:60:03:4c:30:f6:af:bb:aa:80: a4:b5:34:50:99:39:e6:45:ce:9e:ce:a5:20:17:f1: 72:4e:a7:c3:79:b5:60:7b:be:a4:a7:8c:24:21:10: eb:3b:54:24:c5:61:09:b6:80:04:43:b7:b7:c3:0f: dc:0a:1e:14:8b:ef:29:e5:d4:d2:e3:a0:ec:bc:ff: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.236.0/23 Signature Algorithm: sha256WithRSAEncryption 54:11:40:b3:6b:cb:dc:59:7f:64:c8:16:8d:ad:a6:a6:af:19: e2:2f:fa:23:35:e3:24:38:78:90:cf:4f:45:09:16:84:7f:51: 32:bf:29:8d:9f:58:7f:df:5a:98:20:11:ce:03:d8:5d:25:f1: de:b1:c4:88:1c:2c:69:84:3f:46:ff:73:dc:0b:d6:bb:7c:63: ad:98:58:89:4b:b2:8b:dc:1b:6b:fc:15:a5:f4:df:34:10:43: b7:76:99:3e:7d:ee:1c:51:2d:8c:8e:ee:8f:2c:af:f2:2a:8d: 70:d7:ad:29:0a:59:51:37:37:2b:64:b1:a9:fb:a1:ad:30:67: de:a8:1b:c4:9b:39:4c:56:5b:fd:a5:73:a3:45:58:0b:a9:40: 7c:f0:b6:c6:ea:21:68:8d:6f:9e:3f:1b:8c:57:c9:57:b8:9b: 77:f4:9d:ec:0f:16:01:30:f4:f4:7f:02:bd:bb:ef:ea:b8:d1: d9:db:85:a9:06:38:dc:6b:ca:b5:88:96:d5:bd:cc:4e:13:6c: 47:4b:b8:72:30:7a:d3:2d:d1:b1:a9:da:46:d5:cc:29:29:e1: 45:eb:f8:64:8b:ca:34:74:84:25:ef:2c:c9:2a:4b:c2:77:a7: bc:b0:41:45:b8:eb:02:12:73:0a:8c:29:f7:8c:5b:99:14:62: 76:4e:d9:05 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQfg7EragW1EfKXDfo+IoAnOBqfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwODA3NDM1NloX DTI0MDYwNjA3NDg1NlowMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThF NThEMkVDMTJFNkUwNjU4OEEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBhLCIr3pWcdWU5aq4wwfWoKzPtlm9+X4mERYFnMBzh2+8vnpz9lA0D2P2Z 0ekpY7aE4UgZX/TOF0qHXOBiCsMbPxTTIokx1SkW0z4THPW9bW88dl4OynV/klE+ 3xlZcpayo9KIg36t5eDzbcbS+F+ofGS/KdML2Jd2/10Eh1oky0li62+yO8PLNbUn 0FvuuNsqEOKmVAXc8ow7qiagQK6UPh0ty0ob/AGWC9UBETFVUh4Ywu5FUY/PYANM MPavu6qApLU0UJk55kXOns6lIBfxck6nw3m1YHu+pKeMJCEQ6ztUJMVhCbaABEO3 t8MP3AoeFIvvKeXU0uOg7Lz/zDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8Cqbh8xfgaIujljS7BLm4GWIoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZmE0MjY1 LWJiNTgtNDZlMi04MzA5LTNhZDM5ODFhMzUxNi8wLzlGMDJBOUI4N0NDNUY4MUEy MkU4RTU4RDJFQzEyRTZFMDY1ODhBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnquwwDQYJKoZIhvcNAQELBQADggEBAFQRQLNry9xZf2TIFo2tpqavGeIv+iM1 4yQ4eJDPT0UJFoR/UTK/KY2fWH/fWpggEc4D2F0l8d6xxIgcLGmEP0b/c9wL1rt8 Y62YWIlLsovcG2v8FaX03zQQQ7d2mT597hxRLYyO7o8sr/IqjXDXrSkKWVE3Nytk san7oa0wZ96oG8SbOUxWW/2lc6NFWAupQHzwtsbqIWiNb54/G4xXyVe4m3f0newP FgEw9PR/Ar277+q40dnbhakGONxryrWIltW9zE4TbEdLuHIwetMt0bGp2kbVzCkp 4UXr+GSLyjR0hCXvLMkqS8J3p7ywQUW46wIScwqMKfeMW5kUYnZO2QU= -----END CERTIFICATE-----Generated at Thu May 9 00:29:13 2024 by rpki-client on console-ams.rpki-client.org