$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer (raw, json) Hash identifier: l+Zk07fok8vaaMamPAIrff+XvzppjGKiOwr8X5P+emk= Subject key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D948C3F3F5674A685EB37C65A16C6257228DF6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 31 Oct 2023 04:17:29 +0000 Certificate not after: Tue 29 Oct 2024 04:22:29 +0000 Subordinate resources: IP: 103.147.142.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:94:8c:3f:3f:56:74:a6:85:eb:37:c6:5a:16:c6:25:72:28:df:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 31 04:17:29 2023 GMT Not After : Oct 29 04:22:29 2024 GMT Subject: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:ae:55:15:f8:b4:26:59:c4:2d:a7:89:0a: 17:72:94:4b:90:31:51:90:47:81:e1:0a:8b:7a:cd: ba:50:61:2c:27:d1:30:0c:9a:e0:28:0a:c3:b3:bd: 95:63:a3:99:38:7b:17:f2:b9:80:6f:b1:66:c0:46: 41:de:12:50:85:c7:c3:7c:92:7d:b9:e6:60:73:e4: 78:5b:a9:a1:4e:12:df:29:d6:d3:a0:3f:9e:f2:5d: 0f:43:40:5c:cc:ff:77:20:90:46:c1:cc:eb:5a:b5: d3:52:5b:88:e5:c9:d9:af:c6:b2:83:fc:86:7d:9e: 3c:8b:66:da:84:eb:93:72:20:68:ed:67:ae:9c:92: 08:42:05:35:21:ba:ad:30:c3:2c:b1:89:58:7f:29: da:f2:2e:28:8c:bc:74:3d:d6:50:e5:12:09:f3:ab: 23:e7:bb:fc:74:ce:50:72:5e:99:e1:62:d1:33:0c: ee:a1:b0:8b:11:42:8e:19:65:72:10:c9:cc:4d:eb: df:e4:d6:1e:d4:7a:25:1e:c4:3c:17:70:ec:9d:4f: cd:b5:03:6c:4b:18:f3:5d:8c:5e:b0:a6:d0:06:10: d0:5f:75:27:4d:57:0e:3a:de:34:da:1c:98:9a:82: 3e:bc:b4:7a:5b:11:29:a7:ae:d7:f1:af:7c:f8:a7: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption 86:81:e8:0d:61:d4:21:82:c4:23:d6:1f:65:67:72:0f:2d:5d: 38:1b:78:07:c2:52:ca:68:07:89:30:c1:98:83:20:08:96:6b: 6a:67:75:42:cf:e5:89:94:ac:02:0c:f7:df:cd:18:7d:4c:e9: e1:c8:fb:da:02:32:1a:80:76:51:ef:fc:a3:97:98:ca:94:e4: a4:f1:7a:3f:96:99:22:f3:c6:5f:63:7d:78:88:60:59:a8:ab: 47:60:b5:fe:1d:0b:e1:a0:ec:ae:b0:04:f5:22:71:86:65:ad: de:d1:b0:19:84:61:55:84:ad:d9:37:66:dd:cd:04:df:63:3f: bb:1b:6d:b3:2b:75:21:4c:39:43:6d:64:03:11:00:72:38:fa: 8e:66:27:8c:11:81:ab:b6:eb:42:16:bc:8f:e1:b6:1a:7d:df: dc:da:b9:35:7c:ea:af:01:a6:b0:1b:69:a6:36:2f:9b:c5:e7: 9d:37:ed:9b:ac:7d:ce:2b:6d:7d:4b:4e:4c:cd:c0:1b:53:d3: 47:ee:46:89:f7:71:08:af:1b:23:b9:02:4a:20:87:40:17:d7: 50:fd:b4:74:b2:99:62:c9:76:67:13:f2:28:e2:7a:e6:c1:5f: 7c:36:cb:3b:2a:61:55:a4:a7:0d:57:84:49:ea:2f:30:ce:5d: 4d:86:e2:c7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbZSMPz9WdKaF6zfGWhbGJXIo32owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAzMTA0MTcyOVoX DTI0MTAyOTA0MjIyOVowMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1 NEVCRDE2QURDNjgxMUNGMTRCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLwrlUV+LQmWcQtp4kKF3KUS5AxUZBHgeEKi3rNulBhLCfRMAya4CgKw7O9 lWOjmTh7F/K5gG+xZsBGQd4SUIXHw3ySfbnmYHPkeFupoU4S3ynW06A/nvJdD0NA XMz/dyCQRsHM61q101JbiOXJ2a/GsoP8hn2ePItm2oTrk3IgaO1nrpySCEIFNSG6 rTDDLLGJWH8p2vIuKIy8dD3WUOUSCfOrI+e7/HTOUHJemeFi0TMM7qGwixFCjhll chDJzE3r3+TWHtR6JR7EPBdw7J1PzbUDbEsY812MXrCm0AYQ0F91J01XDjreNNoc mJqCPry0elsRKaeu1/GvfPinYlUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKLXkCQ+1lCyfXpU69Fq3GgRzxS9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZjBhZjZh LWM2ODAtNDczMS05YjkyLTlhYTkzZDljMDE2Yy8wL0EyRDc5MDI0M0VENjUwQjI3 RDdBNTRFQkQxNkFEQzY4MTFDRjE0QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk44wDQYJKoZIhvcNAQELBQADggEBAIaB6A1h1CGCxCPWH2Vncg8tXTgbeAfC UspoB4kwwZiDIAiWa2pndULP5YmUrAIM99/NGH1M6eHI+9oCMhqAdlHv/KOXmMqU 5KTxej+WmSLzxl9jfXiIYFmoq0dgtf4dC+Gg7K6wBPUicYZlrd7RsBmEYVWErdk3 Zt3NBN9jP7sbbbMrdSFMOUNtZAMRAHI4+o5mJ4wRgau260IWvI/hthp939zauTV8 6q8BprAbaaY2L5vF55037Zusfc4rbX1LTkzNwBtT00fuRon3cQivGyO5Akogh0AX 11D9tHSymWLJdmcT8ijieubBX3w2yzsqYVWkpw1XhEnqLzDOXU2G4sc= -----END CERTIFICATE-----Generated at Wed May 8 10:06:51 2024 by rpki-client on console-ams.rpki-client.org