$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer (raw, json) Hash identifier: iUndw4fRZuUxYtsJMyciyuAgLWQ/wc5vT3be8ifKhCs= Subject key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38CFC280D885E403F859F93C4AED3A0221B23FC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Apr 2024 22:32:38 +0000 Certificate not after: Fri 11 Apr 2025 22:37:38 +0000 Subordinate resources: IP: 103.169.227.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cf:c2:80:d8:85:e4:03:f8:59:f9:3c:4a:ed:3a:02:21:b2:3f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 12 22:32:38 2024 GMT Not After : Apr 11 22:37:38 2025 GMT Subject: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:53:50:d0:8c:70:fa:2b:cf:79:07:56:95: 3e:42:3b:8d:e8:8c:81:c1:a3:a8:56:2f:7b:85:db: 96:ab:d2:4e:01:14:3c:84:aa:76:38:5e:c4:6a:2c: 33:34:6c:57:4f:a5:0b:88:19:c8:ba:40:a7:51:f9: 02:a4:ab:3b:0f:14:bd:24:b5:94:31:03:f1:79:f2: 21:7b:40:37:9c:46:89:cb:d5:f6:43:3c:db:49:b9: af:cb:df:e4:fa:44:2a:a2:9f:f9:f5:00:41:20:ea: d8:1f:be:74:3d:24:ce:b6:66:2a:ab:02:32:ce:3e: dd:17:62:91:55:7c:d4:c6:05:65:cb:63:ac:7d:c3: 24:cf:17:84:fc:a6:e9:7f:c5:6d:80:11:61:82:5d: d2:86:29:b2:6c:42:40:83:e7:da:8e:ac:41:b2:1e: 3b:38:bd:aa:34:10:8e:1f:70:7d:74:8a:f6:ef:62: 62:f2:80:05:ca:71:94:2f:08:fe:8d:e5:88:28:a2: ce:34:a5:9c:d7:b1:ca:47:fd:d9:14:e5:c5:da:ed: 5b:e2:42:e1:ce:12:c0:ff:98:d1:fa:42:36:15:94: c6:b3:48:45:6f:3b:db:a3:df:a7:26:7a:8f:2f:4f: d8:85:d9:98:c6:22:d3:11:10:7d:8c:d9:c2:06:e4: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.227.0/24 Signature Algorithm: sha256WithRSAEncryption 68:95:cf:69:a1:9c:1b:b6:ac:dd:64:b2:cd:80:83:af:f2:1b: c1:2d:27:88:a0:ae:f4:51:69:62:6a:38:87:45:25:b4:ff:9e: c8:a9:0c:cb:a7:c1:a3:1e:d6:33:87:14:9c:7b:eb:79:e6:35: 13:87:65:bd:f7:f0:9f:31:da:d7:5d:d1:e4:d0:32:59:9b:d7: d0:f8:23:dd:9a:8f:e4:b7:aa:90:17:98:03:8b:77:08:8a:d9: 7e:29:c0:4c:8b:ec:19:1e:c3:49:ec:94:2e:0a:c5:99:b4:36: d1:38:69:0a:f6:36:bb:4a:f8:48:ca:bc:69:b8:43:ec:3f:3e: 8e:14:dc:03:eb:7d:4e:82:5a:bd:e7:66:ac:ea:d9:6d:2d:ad: 2f:98:0e:8b:f2:06:d9:ac:39:b6:9f:9d:2d:7a:51:aa:d6:61: 96:80:41:d8:d1:ec:78:26:98:3b:9f:f4:9a:86:8a:89:08:a7: ad:2e:c4:41:e4:70:4e:a9:45:10:97:22:78:d8:72:9f:36:4d: fd:7d:dc:6a:68:4c:51:33:1f:ef:81:da:82:6e:de:33:b2:70: 43:e7:75:df:2d:d6:2b:bf:40:8c:8c:02:99:db:13:c0:c8:ff: cf:18:c5:7c:58:7d:c3:91:d0:a2:fc:04:c9:13:bc:25:d4:1e: 7a:e0:00:f1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOM/CgNiF5AP4Wfk8Su06AiGyP8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMjIyMzIzOFoX DTI1MDQxMTIyMzczOFowMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0ND MzJDNUM0RUE4QzVGNUQyNDM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNyU1DQjHD6K895B1aVPkI7jeiMgcGjqFYve4XblqvSTgEUPISqdjhexGos MzRsV0+lC4gZyLpAp1H5AqSrOw8UvSS1lDED8XnyIXtAN5xGicvV9kM820m5r8vf 5PpEKqKf+fUAQSDq2B++dD0kzrZmKqsCMs4+3RdikVV81MYFZctjrH3DJM8XhPym 6X/FbYARYYJd0oYpsmxCQIPn2o6sQbIeOzi9qjQQjh9wfXSK9u9iYvKABcpxlC8I /o3liCiizjSlnNexykf92RTlxdrtW+JC4c4SwP+Y0fpCNhWUxrNIRW8726PfpyZ6 jy9P2IXZmMYi0xEQfYzZwgbk14kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ+q5zr2jwjVeTzDLFxOqMX10kN6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5YWU5ODI4 LTBlODItNDQzNC1iOGYyLTJkOGFkNTljZWE4OC8wLzlGQUFFNzNBRjY4RjA4RDU3 OTNDQzMyQzVDNEVBOEM1RjVEMjQzN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqeMwDQYJKoZIhvcNAQELBQADggEBAGiVz2mhnBu2rN1kss2Ag6/yG8EtJ4ig rvRRaWJqOIdFJbT/nsipDMunwaMe1jOHFJx763nmNROHZb338J8x2tdd0eTQMlmb 19D4I92aj+S3qpAXmAOLdwiK2X4pwEyL7Bkew0nslC4KxZm0NtE4aQr2NrtK+EjK vGm4Q+w/Po4U3APrfU6CWr3nZqzq2W0trS+YDovyBtmsObafnS16UarWYZaAQdjR 7HgmmDuf9JqGiokIp60uxEHkcE6pRRCXInjYcp82Tf193GpoTFEzH++B2oJu3jOy cEPndd8t1iu/QIyMApnbE8DI/88YxXxYfcOR0KL8BMkTvCXUHnrgAPE= -----END CERTIFICATE-----Generated at Wed May 8 18:12:12 2024 by rpki-client on console-fra.rpki-client.org