$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer File: A70723C87D2C27B95BE6227C631E7D85EF89D513.cer (raw, json) Hash identifier: cTqhuwJkBbAtjXQYF4YRtvK8PiUrd7sVK14jiDImHTw= Subject key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65952565D769EAEB774A2BFB65E3B448D5AF4E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:01:37 +0000 Certificate not after: Mon 29 Jul 2024 09:06:37 +0000 Subordinate resources: IP: 103.48.128.0/22 IP: 2001:df2:2400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:95:25:65:d7:69:ea:eb:77:4a:2b:fb:65:e3:b4:48:d5:af:4e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:01:37 2023 GMT Not After : Jul 29 09:06:37 2024 GMT Subject: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:7f:05:54:ad:ea:5b:85:01:51:1c:35:e9: 91:df:4f:25:2b:f2:cf:04:b0:68:99:f6:93:90:2b: df:43:64:a8:5b:43:83:48:ad:45:56:bb:c1:3a:39: ae:25:b3:da:4f:f0:79:58:ed:c8:01:bd:c8:36:51: 7b:56:6b:4d:49:a3:4c:2c:ad:60:a5:d5:1b:78:0a: 04:b2:00:30:7e:7f:10:be:08:db:e7:99:e5:61:37: f5:7b:9f:bb:01:fb:91:a0:28:77:82:bc:e1:2a:af: 38:0c:3d:f8:9d:c0:b9:9e:34:63:1a:99:7e:66:c5: 73:1c:78:81:89:6f:52:4e:c0:1d:d2:ba:c4:2c:20: 2d:24:4f:b7:1a:05:a5:28:1b:5b:34:f9:f9:5a:17: 2c:10:e0:e3:d0:8d:60:28:4e:75:38:40:17:4d:63: 4d:96:0e:70:b9:86:62:ba:b8:35:2b:a0:04:ab:7a: 00:70:3a:12:7f:2f:5e:0b:17:62:94:f4:f9:c0:a3: 72:7c:ec:aa:43:ef:b8:f1:24:8d:47:36:f3:4b:a6: de:42:40:e3:83:1a:10:19:5a:97:56:8a:55:52:07: 38:87:9d:35:24:cf:83:b0:37:86:64:d2:d4:ba:a5: 6d:90:f8:01:67:b4:69:e5:cf:93:5e:36:6c:d3:cf: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.128.0/22 IPv6: 2001:df2:2400::/48 Signature Algorithm: sha256WithRSAEncryption 7f:60:2f:a3:89:ec:23:a0:ac:73:a8:bf:80:c5:78:45:26:c2: e8:11:3a:5a:67:99:03:91:26:8f:18:a8:49:26:a9:10:97:e2: c5:44:34:99:f2:ef:40:f6:12:87:79:a7:2b:b9:79:79:0b:33: 9b:38:ba:52:d8:d9:20:34:b9:9a:ac:e6:f1:75:a8:83:c6:69: 79:14:61:87:f7:e4:d6:85:8e:05:39:92:2a:14:bf:d3:cd:8c: 6d:d3:e1:99:61:91:4e:d8:67:5a:ee:9b:93:3e:f3:2d:3f:47: e5:2d:e5:82:38:77:85:53:6e:fa:33:f1:e7:10:20:e4:7a:be: e5:f7:1f:a1:0c:3a:b6:55:56:23:00:fa:23:d9:11:9a:8b:2a: 5e:8e:42:a1:7f:a3:c5:71:b9:ab:be:34:7f:80:fa:a7:6a:ef: 8e:c1:18:20:6b:36:03:09:e8:51:67:50:a8:19:5a:ed:3b:b2: 95:b0:ad:d0:45:ab:08:5c:a5:4c:1c:c9:d6:47:85:14:f5:fc: 09:bc:5d:77:7d:69:f2:c7:d6:8c:e6:8f:19:96:88:d6:b3:e4: 42:da:0e:25:f4:10:6b:a0:70:00:c6:e4:c6:92:4b:ce:ce:d0: e4:8b:cd:5f:c1:c6:7d:27:4c:29:d6:a9:c2:ce:19:ec:72:2a: 77:9b:52:10 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZZUlZddp6ut3Siv7ZeO0SNWvTmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5MDEzN1oX DTI0MDcyOTA5MDYzN1owMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYy MjdDNjMxRTdEODVFRjg5RDUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxOfwVUrepbhQFRHDXpkd9PJSvyzwSwaJn2k5Ar30NkqFtDg0itRVa7wTo5 riWz2k/weVjtyAG9yDZRe1ZrTUmjTCytYKXVG3gKBLIAMH5/EL4I2+eZ5WE39Xuf uwH7kaAod4K84SqvOAw9+J3AuZ40YxqZfmbFcxx4gYlvUk7AHdK6xCwgLSRPtxoF pSgbWzT5+VoXLBDg49CNYChOdThAF01jTZYOcLmGYrq4NSugBKt6AHA6En8vXgsX YpT0+cCjcnzsqkPvuPEkjUc280um3kJA44MaEBlal1aKVVIHOIedNSTPg7A3hmTS 1LqlbZD4AWe0aeXPk142bNPP+bMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcHI8h9LCe5W+YifGMefYXvidUTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzA5MDQ0 LTU3MTgtNGYxZC1hNmQwLTg3NjZlYTczZWFmNC8wL0E3MDcyM0M4N0QyQzI3Qjk1 QkU2MjI3QzYzMUU3RDg1RUY4OUQ1MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnMIAwDwQCAAIwCQMHACABDfIkADANBgkqhkiG9w0BAQsFAAOCAQEAf2Avo4ns I6Csc6i/gMV4RSbC6BE6WmeZA5EmjxioSSapEJfixUQ0mfLvQPYSh3mnK7l5eQsz mzi6UtjZIDS5mqzm8XWog8ZpeRRhh/fk1oWOBTmSKhS/082MbdPhmWGRTthnWu6b kz7zLT9H5S3lgjh3hVNu+jPx5xAg5Hq+5fcfoQw6tlVWIwD6I9kRmosqXo5CoX+j xXG5q740f4D6p2rvjsEYIGs2AwnoUWdQqBla7TuylbCt0EWrCFylTBzJ1keFFPX8 Cbxdd31p8sfWjOaPGZaI1rPkQtoOJfQQa6BwAMbkxpJLzs7Q5IvNX8HGfSdMKdap ws4Z7HIqd5tSEA== -----END CERTIFICATE-----Generated at Wed May 8 10:06:51 2024 by rpki-client on console-ams.rpki-client.org