$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer File: A70723C87D2C27B95BE6227C631E7D85EF89D513.cer (raw, json) Hash identifier: HcJ/chOnCoXOU2eiQbZ10QSWLe3pKDxr78fs27y6iog= Subject key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 278BBE88F7D8384B1BFA6B0B5C4C91BE4E4959FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 01:14:55 +0000 Certificate not after: Tue 01 Jul 2025 01:19:55 +0000 Subordinate resources: IP: 103.48.128.0/22 IP: 2001:df2:2400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8b:be:88:f7:d8:38:4b:1b:fa:6b:0b:5c:4c:91:be:4e:49:59:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 01:14:55 2024 GMT Not After : Jul 1 01:19:55 2025 GMT Subject: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:7f:05:54:ad:ea:5b:85:01:51:1c:35:e9: 91:df:4f:25:2b:f2:cf:04:b0:68:99:f6:93:90:2b: df:43:64:a8:5b:43:83:48:ad:45:56:bb:c1:3a:39: ae:25:b3:da:4f:f0:79:58:ed:c8:01:bd:c8:36:51: 7b:56:6b:4d:49:a3:4c:2c:ad:60:a5:d5:1b:78:0a: 04:b2:00:30:7e:7f:10:be:08:db:e7:99:e5:61:37: f5:7b:9f:bb:01:fb:91:a0:28:77:82:bc:e1:2a:af: 38:0c:3d:f8:9d:c0:b9:9e:34:63:1a:99:7e:66:c5: 73:1c:78:81:89:6f:52:4e:c0:1d:d2:ba:c4:2c:20: 2d:24:4f:b7:1a:05:a5:28:1b:5b:34:f9:f9:5a:17: 2c:10:e0:e3:d0:8d:60:28:4e:75:38:40:17:4d:63: 4d:96:0e:70:b9:86:62:ba:b8:35:2b:a0:04:ab:7a: 00:70:3a:12:7f:2f:5e:0b:17:62:94:f4:f9:c0:a3: 72:7c:ec:aa:43:ef:b8:f1:24:8d:47:36:f3:4b:a6: de:42:40:e3:83:1a:10:19:5a:97:56:8a:55:52:07: 38:87:9d:35:24:cf:83:b0:37:86:64:d2:d4:ba:a5: 6d:90:f8:01:67:b4:69:e5:cf:93:5e:36:6c:d3:cf: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.128.0/22 IPv6: 2001:df2:2400::/48 Signature Algorithm: sha256WithRSAEncryption 52:13:1e:01:f3:22:25:57:d3:04:66:4f:da:23:e9:13:8a:26: ed:6e:65:ef:17:3b:7b:36:ae:67:16:c0:61:68:37:4a:44:a7: 40:4d:f3:90:df:8d:07:7c:25:fc:5b:c4:fd:02:c3:31:84:b6: 9b:9f:5b:a0:a1:de:dd:0c:fe:8f:57:b3:c6:37:c9:23:d6:a1: 99:ce:16:ea:98:bc:e2:9b:7f:d0:f6:89:fe:2a:17:48:f0:92: 30:a6:94:80:d4:2b:e4:de:31:08:16:d0:1b:11:7e:f2:84:23: 86:53:48:04:1b:b4:46:4b:36:98:95:5c:5a:f5:db:8b:58:7c: 83:7f:5d:ef:d5:fd:70:8b:a1:97:2c:ef:53:f5:2c:29:3e:73: 76:a0:d3:e4:ac:ad:bc:73:ec:c4:39:d6:99:ff:e6:ff:88:6b: e2:d0:24:46:44:3e:cd:12:4b:fa:6f:35:f5:c6:71:7d:29:23: d8:20:b8:21:6d:2a:1c:0e:73:d9:53:e8:20:47:a9:cb:61:f9: 0e:c2:95:fe:d8:68:4d:10:d2:a6:b2:97:cb:37:af:98:8b:c2: e1:59:70:ed:06:1e:21:31:39:4d:4b:79:b0:c6:d5:61:95:4d: 74:6c:ef:b3:9c:8f:a1:ab:2e:e5:ea:6f:d6:62:90:f8:43:7e: 8f:fb:76:88 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJ4u+iPfYOEsb+msLXEyRvk5JWf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAxMTQ1NVoX DTI1MDcwMTAxMTk1NVowMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYy MjdDNjMxRTdEODVFRjg5RDUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxOfwVUrepbhQFRHDXpkd9PJSvyzwSwaJn2k5Ar30NkqFtDg0itRVa7wTo5 riWz2k/weVjtyAG9yDZRe1ZrTUmjTCytYKXVG3gKBLIAMH5/EL4I2+eZ5WE39Xuf uwH7kaAod4K84SqvOAw9+J3AuZ40YxqZfmbFcxx4gYlvUk7AHdK6xCwgLSRPtxoF pSgbWzT5+VoXLBDg49CNYChOdThAF01jTZYOcLmGYrq4NSugBKt6AHA6En8vXgsX YpT0+cCjcnzsqkPvuPEkjUc280um3kJA44MaEBlal1aKVVIHOIedNSTPg7A3hmTS 1LqlbZD4AWe0aeXPk142bNPP+bMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcHI8h9LCe5W+YifGMefYXvidUTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzA5MDQ0 LTU3MTgtNGYxZC1hNmQwLTg3NjZlYTczZWFmNC8wL0E3MDcyM0M4N0QyQzI3Qjk1 QkU2MjI3QzYzMUU3RDg1RUY4OUQ1MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnMIAwDwQCAAIwCQMHACABDfIkADANBgkqhkiG9w0BAQsFAAOCAQEAUhMeAfMi JVfTBGZP2iPpE4om7W5l7xc7ezauZxbAYWg3SkSnQE3zkN+NB3wl/FvE/QLDMYS2 m59boKHe3Qz+j1ezxjfJI9ahmc4W6pi84pt/0PaJ/ioXSPCSMKaUgNQr5N4xCBbQ GxF+8oQjhlNIBBu0Rks2mJVcWvXbi1h8g39d79X9cIuhlyzvU/UsKT5zdqDT5Kyt vHPsxDnWmf/m/4hr4tAkRkQ+zRJL+m819cZxfSkj2CC4IW0qHA5z2VPoIEepy2H5 DsKV/thoTRDSprKXyzevmIvC4Vlw7QYeITE5TUt5sMbVYZVNdGzvs5yPoasu5epv 1mKQ+EN+j/t2iA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org