$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer (raw, json) Hash identifier: vXOk48NLrJ2wDNt0MGcWQKD+14oH1tzXIk4koHevc60= Subject key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EF37393A2B7872AC58829DDC9FCE6B03F61CA0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft caRepository: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Jul 2023 13:02:30 +0000 Certificate not after: Thu 18 Jul 2024 13:07:30 +0000 Subordinate resources: IP: 103.159.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:73:93:a2:b7:87:2a:c5:88:29:dd:c9:fc:e6:b0:3f:61:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 13:02:30 2023 GMT Not After : Jul 18 13:07:30 2024 GMT Subject: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:2a:f0:c0:e4:9a:4d:23:d7:78:c7:7f:51: 43:47:c5:7b:01:ee:da:0b:2f:0d:43:bd:24:da:0b: 9b:50:61:1f:2b:3c:be:5b:24:d4:7c:5c:2e:c0:21: de:41:6d:48:e5:7f:f2:29:51:59:71:aa:1c:3c:90: 5d:c0:84:bd:08:4c:62:c0:a6:e4:c9:66:ac:ab:3d: 9a:4a:f8:89:26:1e:70:06:43:47:a5:69:60:02:11: 6b:a0:9d:38:f6:0e:4f:53:bd:6a:51:55:21:e5:fb: f3:7c:ec:e3:21:d6:07:a0:76:f2:fb:59:ca:31:35: 28:34:af:61:d0:c3:d4:92:4f:91:e1:59:c8:71:b4: 9e:19:17:8f:3a:e3:95:80:70:18:64:72:31:4e:bd: 8d:70:57:e7:b9:ac:25:c7:f2:46:e2:9a:c3:6c:22: a0:58:5b:44:5f:d0:a2:0d:b6:f6:44:a9:e2:7f:16: a9:79:b1:a3:56:6f:b5:97:90:1a:9f:0c:f9:1a:43: 13:0b:5e:99:0c:87:f1:93:b9:3e:da:c4:96:38:91: 17:a7:03:dc:d0:4c:cb:1b:dd:0d:bd:eb:20:8b:0f: 24:fe:9e:e7:8f:dc:ed:70:86:de:71:10:9b:48:fc: f2:da:29:be:dc:5e:f4:51:16:79:24:74:0a:a3:7f: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.112.0/23 Signature Algorithm: sha256WithRSAEncryption 65:a8:d0:af:7a:48:6b:3c:08:c8:ab:90:a6:f1:5a:0a:dc:51: c6:a1:42:f1:6c:89:b9:fc:d5:c5:a4:8f:54:af:fd:01:29:72: a8:d5:ba:e7:07:a5:bd:f0:a3:96:82:3a:a0:ae:ce:7b:28:af: 40:ab:30:95:c5:f0:99:b7:3c:27:b9:5e:b8:7d:87:37:16:a1: b3:97:bc:48:10:8a:8e:69:f6:ca:fb:6c:57:20:3f:98:be:7f: 86:45:11:ca:d9:e3:54:56:a5:2f:46:ef:83:35:0b:fb:cf:61: 04:47:53:06:65:7e:e0:ea:84:00:a8:f5:7d:21:e0:be:8a:35: 4d:d9:55:83:a4:ae:a3:98:59:6b:cb:45:97:cc:55:7f:02:01: 77:1a:30:89:26:96:39:23:64:71:5d:9f:29:5f:9b:20:51:97: 67:26:f1:ef:03:af:e2:35:b3:af:ea:bb:33:d8:f1:d4:59:a6: 7b:47:32:8f:bb:8f:87:b8:0d:a3:83:87:34:fd:b7:c3:7a:52: e8:ba:c6:01:18:38:bd:cd:66:e4:0a:90:81:3c:f5:52:b2:fe: 6a:34:43:b6:72:e1:52:f6:ed:a9:ee:ba:2a:03:f0:36:47:79: da:1a:1a:55:c5:35:e0:c9:0e:d1:e2:50:98:ff:a7:82:66:a0: cb:51:71:76 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXvNzk6K3hyrFiCndyfzmsD9hygowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyMDEzMDIzMFoX DTI0MDcxODEzMDczMFowMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBB RjlERDU4NDdBOThCQ0UyNkM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPoXKvDA5JpNI9d4x39RQ0fFewHu2gsvDUO9JNoLm1BhHys8vlsk1HxcLsAh 3kFtSOV/8ilRWXGqHDyQXcCEvQhMYsCm5MlmrKs9mkr4iSYecAZDR6VpYAIRa6Cd OPYOT1O9alFVIeX783zs4yHWB6B28vtZyjE1KDSvYdDD1JJPkeFZyHG0nhkXjzrj lYBwGGRyMU69jXBX57msJcfyRuKaw2wioFhbRF/Qog229kSp4n8WqXmxo1ZvtZeQ Gp8M+RpDEwtemQyH8ZO5PtrEljiRF6cD3NBMyxvdDb3rIIsPJP6e54/c7XCG3nEQ m0j88topvtxe9FEWeSR0CqN/LNUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKAOniHukyfwWTCvndWEepi84mxmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4 LWU3MTUtNGI3OS1hZjMyLTJlNTE1NDFhMzRmZi8wL0EwMEU5RTIxRUU5MzI3RjA1 OTMwQUY5REQ1ODQ3QTk4QkNFMjZDNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn3AwDQYJKoZIhvcNAQELBQADggEBAGWo0K96SGs8CMirkKbxWgrcUcahQvFs ibn81cWkj1Sv/QEpcqjVuucHpb3wo5aCOqCuznsor0CrMJXF8Jm3PCe5Xrh9hzcW obOXvEgQio5p9sr7bFcgP5i+f4ZFEcrZ41RWpS9G74M1C/vPYQRHUwZlfuDqhACo 9X0h4L6KNU3ZVYOkrqOYWWvLRZfMVX8CAXcaMIkmljkjZHFdnylfmyBRl2cm8e8D r+I1s6/quzPY8dRZpntHMo+7j4e4DaODhzT9t8N6Uui6xgEYOL3NZuQKkIE89VKy /mo0Q7Zy4VL27anuuioD8DZHedoaGlXFNeDJDtHiUJj/p4JmoMtRcXY= -----END CERTIFICATE-----Generated at Wed May 8 09:50:34 2024 by rpki-client on console-fra.rpki-client.org