$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer (raw, json) Hash identifier: rVEAMDOtqXCINZteMtUoZeJ7GXU5P7uOVWAqSI8+4fs= Subject key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6CF28D0A5B566305F4B6ABB0F4C09E99780395EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft caRepository: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Feb 2024 10:59:02 +0000 Certificate not after: Fri 07 Feb 2025 11:04:02 +0000 Subordinate resources: IP: 103.184.128.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f2:8d:0a:5b:56:63:05:f4:b6:ab:b0:f4:c0:9e:99:78:03:95:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 9 10:59:02 2024 GMT Not After : Feb 7 11:04:02 2025 GMT Subject: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:9a:02:30:1b:82:bd:e7:d0:2a:a5:04:b6: 37:2d:9b:85:e2:62:0a:ec:d4:8a:fb:46:fc:8c:fe: 51:17:0d:01:d6:96:96:47:50:66:bb:14:6e:53:50: ad:a0:70:dc:de:fc:e5:9f:f2:a6:cb:65:57:f0:06: 06:88:27:21:a1:37:36:f4:83:a4:05:a0:b2:31:52: 1c:c0:ba:6e:d3:a4:a4:47:51:2a:13:2a:14:99:20: 26:aa:ce:d4:10:c4:5e:94:93:78:03:31:c1:7d:aa: 21:9a:71:f7:be:60:90:3b:b9:a1:6b:43:67:96:5e: e2:0e:4d:b9:40:d8:a7:bd:4f:ba:10:57:ad:13:c6: 17:51:15:8c:3c:e6:a6:d2:10:16:00:58:79:12:c0: 0d:da:0f:4a:2b:27:21:a4:62:1a:f1:62:97:d0:9b: 63:be:2d:63:26:d5:73:85:05:6d:4b:93:eb:33:c3: 5c:84:9e:8c:4f:4d:17:02:93:59:00:56:6a:30:c9: 18:34:06:a2:2d:ae:28:21:46:a2:9e:df:49:3c:50: 0b:ec:40:06:f0:71:e2:3e:62:83:09:e3:2b:8b:df: 70:1e:35:7d:56:04:27:f1:ab:e2:1b:a4:39:1c:50: ba:93:96:88:8b:02:41:97:13:2e:be:d8:8f:0b:d2: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.128.0/24 Signature Algorithm: sha256WithRSAEncryption 23:81:ff:2d:a7:a0:16:7e:8f:ed:04:2b:7a:d4:36:3e:33:dd: c6:4d:3d:77:ec:81:3f:ac:ed:27:bf:2c:44:52:52:2a:e0:f5: 7e:62:7a:3b:2b:5b:95:34:cc:d3:73:da:41:86:da:f4:27:22: 30:c7:d5:62:0f:20:ac:bd:37:0a:18:4b:69:2d:46:8d:4f:6b: 2c:76:c0:a5:69:e2:dd:45:d7:00:89:e7:3d:f2:62:fe:30:db: 68:11:54:c7:b1:9a:5b:44:c7:f9:e5:4a:2c:98:59:3c:2a:c0: 60:5c:81:63:68:e7:6b:88:cf:e7:24:f3:90:0a:56:e3:6d:e2: 02:68:bf:12:27:e5:2c:75:a9:54:57:d5:20:e6:4e:85:f6:52: 53:f1:ef:30:d6:89:f6:3f:7a:13:b3:18:79:a0:b5:a3:51:fa: ff:9d:d2:23:15:6a:e2:ce:44:1f:65:d8:06:e2:af:b2:5e:49: 55:36:4c:7d:d8:aa:27:37:9b:54:2b:51:ac:95:7c:f3:ad:57: 3c:77:af:22:b9:77:ef:83:b9:96:94:65:8a:10:b2:86:34:cd: 01:29:c3:ec:d7:e1:54:3c:59:e1:97:f9:70:d3:42:06:73:cc: 55:dc:95:be:ca:08:68:9c:8d:f6:ff:e8:6c:46:2a:df:a7:fc: b1:a4:b4:e4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbPKNCltWYwX0tquw9MCemXgDleowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwOTEwNTkwMloX DTI1MDIwNzExMDQwMlowMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMz QzJFM0VGODAyRUExRTVDRDc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL24mgIwG4K959AqpQS2Ny2bheJiCuzUivtG/Iz+URcNAdaWlkdQZrsUblNQ raBw3N785Z/ypstlV/AGBognIaE3NvSDpAWgsjFSHMC6btOkpEdRKhMqFJkgJqrO 1BDEXpSTeAMxwX2qIZpx975gkDu5oWtDZ5Ze4g5NuUDYp71PuhBXrRPGF1EVjDzm ptIQFgBYeRLADdoPSisnIaRiGvFil9CbY74tYybVc4UFbUuT6zPDXISejE9NFwKT WQBWajDJGDQGoi2uKCFGop7fSTxQC+xABvBx4j5igwnjK4vfcB41fVYEJ/Gr4huk ORxQupOWiIsCQZcTLr7YjwvS5l8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKM/90llqWCNnlw8Lj74AuoeXNeUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5M2UzZDI2 LTRhYWYtNGU5Ni1hZDQ5LTUyNzNmMGE0ZTZlZC8wL0EzM0ZGNzQ5NjVBOTYwOEQ5 RTVDM0MyRTNFRjgwMkVBMUU1Q0Q3OTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuIAwDQYJKoZIhvcNAQELBQADggEBACOB/y2noBZ+j+0EK3rUNj4z3cZNPXfs gT+s7Se/LERSUirg9X5iejsrW5U0zNNz2kGG2vQnIjDH1WIPIKy9NwoYS2ktRo1P ayx2wKVp4t1F1wCJ5z3yYv4w22gRVMexmltEx/nlSiyYWTwqwGBcgWNo52uIz+ck 85AKVuNt4gJovxIn5Sx1qVRX1SDmToX2UlPx7zDWifY/ehOzGHmgtaNR+v+d0iMV auLORB9l2Abir7JeSVU2TH3Yqic3m1QrUayVfPOtVzx3ryK5d++DuZaUZYoQsoY0 zQEpw+zX4VQ8WeGX+XDTQgZzzFXclb7KCGicjfb/6GxGKt+n/LGktOQ= -----END CERTIFICATE-----Generated at Wed May 8 17:45:20 2024 by rpki-client on console-ams.rpki-client.org