$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer (raw, json) Hash identifier: joXTlPl8FkQGpb1JBpEKQGC+m3gUS9vD1dZHG0R2ZLE= Subject key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B0AC60EE4815755BDB06BD2D8950B6FDA3BCFBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jun 2023 13:11:30 +0000 Certificate not after: Fri 28 Jun 2024 13:16:30 +0000 Subordinate resources: IP: 103.169.130.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0a:c6:0e:e4:81:57:55:bd:b0:6b:d2:d8:95:0b:6f:da:3b:cf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 13:11:30 2023 GMT Not After : Jun 28 13:16:30 2024 GMT Subject: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:9f:bf:da:f3:f0:34:3d:0d:d4:de:9b:c5: fd:cf:e5:93:ec:4c:8e:07:98:17:b2:95:9d:66:8a: 17:2d:58:d4:3c:4e:bc:71:b7:84:19:d1:3d:3a:3e: 9a:3d:3a:cb:53:9a:70:61:30:10:0a:56:39:58:f5: d6:f3:84:7c:55:9c:a9:ba:88:ee:0e:ba:7c:96:02: 7e:b2:20:d4:e4:99:65:cb:d2:f2:84:37:92:9b:a2: 92:77:38:c9:52:f5:28:c1:20:60:59:38:91:ff:14: 53:12:f8:cc:51:3a:80:57:c1:27:6c:48:5a:ca:96: 01:eb:35:d3:58:43:fa:f7:2f:16:cc:56:4a:a1:19: 65:b0:3c:2e:fc:d2:ec:0d:5a:54:93:13:f0:cf:33: 20:2f:80:3f:50:fa:3f:10:e5:04:a7:42:b6:51:47: 50:31:98:3a:8d:f7:13:91:c5:ed:92:0f:19:f6:de: 89:aa:3b:40:47:02:2e:c1:2b:2a:58:40:31:57:e8: 71:af:2b:f9:5a:a8:e1:cc:33:c7:40:7b:2c:6d:87: 82:88:42:9b:69:97:5e:dd:3d:28:2e:4c:0a:8b:03: cb:32:f2:b7:93:96:d0:5c:e9:a5:16:0f:a1:7f:89: f7:83:fe:c6:d0:d1:a4:43:84:c9:4b:ef:87:e5:50: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.130.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:a0:12:50:10:1a:eb:ee:c0:11:d8:c7:c0:f4:b2:b6:d0:c9: 34:b9:48:d7:03:d5:32:c3:f2:19:18:75:17:21:50:d9:ec:75: e9:ba:50:97:12:e2:d4:ce:47:1e:b8:71:1a:fc:12:bd:33:e1: 3b:20:35:3a:b7:3c:cc:93:55:e4:dc:2a:90:ea:8b:32:3f:de: f4:bc:c6:b6:28:2a:3e:96:05:1e:4f:01:cd:49:67:54:1d:5a: 12:ac:d4:9d:9b:6c:07:3f:bc:ef:cb:2c:8d:08:76:b7:f5:6e: 0e:b0:1d:8b:6e:62:6e:fb:ba:f9:4a:4c:ff:76:22:57:cb:5f: 1c:bf:74:16:cc:32:ca:fb:b8:44:d5:1b:c4:65:67:9b:52:0d: f7:ef:1b:da:6a:9e:39:a7:10:fc:05:18:c0:c2:88:3e:01:57: 59:38:36:6d:a3:91:a7:ef:f1:4c:08:60:e4:3e:b7:5b:a1:69: 81:6b:9f:f1:d9:90:2b:3e:bb:f6:ae:46:f7:df:9a:47:b2:04: 6a:ba:ec:86:1f:ed:14:b0:6c:f9:f2:e9:be:84:9e:85:bf:92: 43:ce:c2:93:49:51:f0:c8:53:9f:35:f7:e8:ad:e1:dd:52:f5: d8:36:e8:57:9f:b5:73:b7:20:f4:85:ae:44:36:23:b9:27:99: ce:33:c9:82 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOwrGDuSBV1W9sGvS2JULb9o7z7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYzMDEzMTEzMFoX DTI0MDYyODEzMTYzMFowMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIx OURFN0Q2ODFCM0UwRjE4QTg0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkBn7/a8/A0PQ3U3pvF/c/lk+xMjgeYF7KVnWaKFy1Y1DxOvHG3hBnRPTo+ mj06y1OacGEwEApWOVj11vOEfFWcqbqI7g66fJYCfrIg1OSZZcvS8oQ3kpuiknc4 yVL1KMEgYFk4kf8UUxL4zFE6gFfBJ2xIWsqWAes101hD+vcvFsxWSqEZZbA8LvzS 7A1aVJMT8M8zIC+AP1D6PxDlBKdCtlFHUDGYOo33E5HF7ZIPGfbeiao7QEcCLsEr KlhAMVfoca8r+Vqo4cwzx0B7LG2HgohCm2mXXt09KC5MCosDyzLyt5OW0FzppRYP oX+J94P+xtDRpEOEyUvvh+VQKUMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnMW6Hgf5WAqrIZ3n1oGz4PGKhLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllM2Y2NmE4 LWEwZmYtNDRmYS1iZGE2LThlNWYyN2Q2MWIzZi8wL0E5Q0M1QkExRTA3Rjk1ODBB QUIyMTlERTdENjgxQjNFMEYxOEE4NEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqYIwDQYJKoZIhvcNAQELBQADggEBAI+gElAQGuvuwBHYx8D0srbQyTS5SNcD 1TLD8hkYdRchUNnsdem6UJcS4tTORx64cRr8Er0z4TsgNTq3PMyTVeTcKpDqizI/ 3vS8xrYoKj6WBR5PAc1JZ1QdWhKs1J2bbAc/vO/LLI0Idrf1bg6wHYtuYm77uvlK TP92IlfLXxy/dBbMMsr7uETVG8RlZ5tSDffvG9pqnjmnEPwFGMDCiD4BV1k4Nm2j kafv8UwIYOQ+t1uhaYFrn/HZkCs+u/auRvffmkeyBGq67IYf7RSwbPny6b6EnoW/ kkPOwpNJUfDIU5819+it4d1S9dg26FeftXO3IPSFrkQ2I7knmc4zyYI= -----END CERTIFICATE-----Generated at Wed May 8 21:02:20 2024 by rpki-client on console-fra.rpki-client.org