$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer (raw, json) Hash identifier: +77aY/TOSPEEOiyBgLNKOCb4sQ1JIj5abKd7NtEoEec= Subject key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DE71F84B2976A71E2CE49234D2CC1E808B396B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 01 Oct 2024 18:08:37 +0000 Certificate not after: Tue 30 Sep 2025 18:13:37 +0000 Subordinate resources: IP: 103.147.142.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e7:1f:84:b2:97:6a:71:e2:ce:49:23:4d:2c:c1:e8:08:b3:96:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 18:08:37 2024 GMT Not After : Sep 30 18:13:37 2025 GMT Subject: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:ae:55:15:f8:b4:26:59:c4:2d:a7:89:0a: 17:72:94:4b:90:31:51:90:47:81:e1:0a:8b:7a:cd: ba:50:61:2c:27:d1:30:0c:9a:e0:28:0a:c3:b3:bd: 95:63:a3:99:38:7b:17:f2:b9:80:6f:b1:66:c0:46: 41:de:12:50:85:c7:c3:7c:92:7d:b9:e6:60:73:e4: 78:5b:a9:a1:4e:12:df:29:d6:d3:a0:3f:9e:f2:5d: 0f:43:40:5c:cc:ff:77:20:90:46:c1:cc:eb:5a:b5: d3:52:5b:88:e5:c9:d9:af:c6:b2:83:fc:86:7d:9e: 3c:8b:66:da:84:eb:93:72:20:68:ed:67:ae:9c:92: 08:42:05:35:21:ba:ad:30:c3:2c:b1:89:58:7f:29: da:f2:2e:28:8c:bc:74:3d:d6:50:e5:12:09:f3:ab: 23:e7:bb:fc:74:ce:50:72:5e:99:e1:62:d1:33:0c: ee:a1:b0:8b:11:42:8e:19:65:72:10:c9:cc:4d:eb: df:e4:d6:1e:d4:7a:25:1e:c4:3c:17:70:ec:9d:4f: cd:b5:03:6c:4b:18:f3:5d:8c:5e:b0:a6:d0:06:10: d0:5f:75:27:4d:57:0e:3a:de:34:da:1c:98:9a:82: 3e:bc:b4:7a:5b:11:29:a7:ae:d7:f1:af:7c:f8:a7: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:64:74:6b:cb:42:71:f6:00:35:43:1b:f6:96:65:45:57:c8: 76:f4:1a:4a:ea:39:18:11:7b:17:3f:7e:68:ce:a3:01:4f:c7: 44:f0:e0:01:80:06:21:0a:b7:be:55:26:93:ac:f6:ba:d9:74: 38:19:0d:8d:54:d3:e6:98:1e:24:e1:76:ec:21:03:0a:57:bd: a5:65:4f:95:cc:94:8d:83:e1:40:29:56:be:05:0a:e2:f3:fe: 0d:3c:a6:64:7f:84:e5:a7:b8:a8:9a:80:07:f0:13:ac:00:51: de:8a:ec:d7:ca:09:66:ca:8f:a3:45:7f:44:8a:bc:19:53:18: 2d:59:db:cf:6f:ac:c0:36:c7:f3:13:3f:85:12:0c:a0:81:a2: 3e:1b:1f:c2:cc:db:c8:89:29:38:6e:de:92:99:01:d4:4f:6d: 0e:c6:fd:58:5b:05:ab:30:32:d9:06:b5:a8:cb:44:c7:65:d8: d8:d5:8e:0d:73:38:13:36:60:00:f7:14:2a:9a:b4:9c:b2:9d: 91:bb:14:c3:d9:1a:b7:d3:d5:9a:4e:1e:47:08:d5:e4:f6:39: ac:ea:72:63:32:23:d6:ac:91:18:a8:07:09:02:2c:86:33:c2: af:85:2d:de:6a:ea:14:aa:14:5e:bf:0b:f2:5d:94:1d:c0:c4: 82:06:53:1d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXecfhLKXanHizkkjTSzB6AizlrUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMTE4MDgzN1oX DTI1MDkzMDE4MTMzN1owMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1 NEVCRDE2QURDNjgxMUNGMTRCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLwrlUV+LQmWcQtp4kKF3KUS5AxUZBHgeEKi3rNulBhLCfRMAya4CgKw7O9 lWOjmTh7F/K5gG+xZsBGQd4SUIXHw3ySfbnmYHPkeFupoU4S3ynW06A/nvJdD0NA XMz/dyCQRsHM61q101JbiOXJ2a/GsoP8hn2ePItm2oTrk3IgaO1nrpySCEIFNSG6 rTDDLLGJWH8p2vIuKIy8dD3WUOUSCfOrI+e7/HTOUHJemeFi0TMM7qGwixFCjhll chDJzE3r3+TWHtR6JR7EPBdw7J1PzbUDbEsY812MXrCm0AYQ0F91J01XDjreNNoc mJqCPry0elsRKaeu1/GvfPinYlUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKLXkCQ+1lCyfXpU69Fq3GgRzxS9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZjBhZjZh LWM2ODAtNDczMS05YjkyLTlhYTkzZDljMDE2Yy8wL0EyRDc5MDI0M0VENjUwQjI3 RDdBNTRFQkQxNkFEQzY4MTFDRjE0QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk44wDQYJKoZIhvcNAQELBQADggEBAAxkdGvLQnH2ADVDG/aWZUVXyHb0Gkrq ORgRexc/fmjOowFPx0Tw4AGABiEKt75VJpOs9rrZdDgZDY1U0+aYHiThduwhAwpX vaVlT5XMlI2D4UApVr4FCuLz/g08pmR/hOWnuKiagAfwE6wAUd6K7NfKCWbKj6NF f0SKvBlTGC1Z289vrMA2x/MTP4USDKCBoj4bH8LM28iJKThu3pKZAdRPbQ7G/Vhb BaswMtkGtajLRMdl2NjVjg1zOBM2YAD3FCqatJyynZG7FMPZGrfT1ZpOHkcI1eT2 OazqcmMyI9askRioBwkCLIYzwq+FLd5q6hSqFF6/C/JdlB3AxIIGUx0= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:25 2024 by rpki-client on console-ams.rpki-client.org