$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer File: A9DD956A549689BA0A3E2FC62291352AAABD591B.cer (raw, json) Hash identifier: k0/sfX7d6Z+Sbk0dalpGH8kF+NQajQ7jLgxn5IfkjNA= Subject key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63B94B9D39D691848E78C7BCBCE0DB27FB38059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Oct 2023 02:18:04 +0000 Certificate not after: Sat 26 Oct 2024 02:23:04 +0000 Subordinate resources: IP: 103.175.240.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b9:4b:9d:39:d6:91:84:8e:78:c7:bc:bc:e0:db:27:fb:38:05:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 28 02:18:04 2023 GMT Not After : Oct 26 02:23:04 2024 GMT Subject: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:6e:02:26:83:d5:e4:f2:1a:af:97:37:27: 51:d1:32:aa:f3:c6:29:12:56:34:04:40:9d:21:b1: 23:ff:5e:25:3e:46:12:d7:45:83:29:15:f3:53:bd: 77:cc:3c:77:39:85:4b:9e:ec:5b:31:3d:2e:a3:87: 7f:b4:cd:e4:16:b6:92:d1:f2:b4:4b:4d:10:e5:0d: ef:d6:63:b3:08:7a:b3:ad:97:58:49:b5:ae:1e:c1: 6b:c3:95:0d:31:1d:9d:1e:36:d8:0d:50:e5:e9:0c: 75:0c:5d:88:58:85:35:f6:40:12:59:38:e4:e8:3b: 87:c3:ef:ad:16:ae:f4:e2:30:84:69:f9:03:2e:3f: 04:66:02:40:a6:af:f9:e5:75:07:7f:df:23:f0:40: ec:67:05:25:2b:e9:79:d6:82:85:ae:d6:e3:11:5f: 9d:44:aa:97:8d:8e:b9:85:78:53:ba:32:25:33:3c: 06:22:2b:b6:d5:7a:fd:ee:49:07:3e:76:8c:d1:0c: 1a:74:0e:e6:e2:bc:cd:e1:c1:08:9e:e3:77:28:82: 4c:93:41:ac:a8:42:72:cd:35:90:9e:79:e1:de:4b: 75:15:3f:d0:58:20:01:ff:fa:ea:9d:e7:d8:e1:ea: 94:40:6b:1f:04:99:d8:5f:e4:b1:ca:c9:88:ac:a3: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.240.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:df:43:bc:28:fd:27:53:a8:28:0d:3e:f7:97:87:e4:73:67: d3:44:d2:97:31:34:81:3f:01:4d:5f:c4:83:74:1f:4f:51:86: bb:5d:07:9d:9a:e1:5c:9c:b5:0c:1e:37:70:34:5b:f3:72:30: b6:a6:b5:1e:0d:08:51:2c:39:df:66:ce:bc:a2:ab:95:6a:2a: 61:0c:84:52:bc:bf:ef:26:34:eb:7e:f8:40:da:07:42:d8:bf: f7:d0:1d:20:fe:d9:a7:a5:a2:39:f0:cd:d4:1e:85:5a:fb:d1: 31:bd:41:16:b9:64:e3:73:7d:4a:17:6d:4a:f9:1c:36:1b:1a: eb:35:10:e8:79:a0:c8:65:dc:d9:cc:1c:c9:06:38:45:6d:8c: 5d:ac:d9:e0:0b:2c:13:c1:b4:f3:c5:04:d2:42:45:e3:ea:c8: 79:68:5d:89:17:92:dd:38:8b:6f:a6:75:9f:59:64:16:2b:47: 4d:6e:d2:22:84:f4:4c:ec:62:47:07:f0:e4:d8:a9:3f:f8:6f: bd:79:79:73:bf:6e:8d:5d:ae:d3:d0:00:28:46:09:a9:57:63: df:6a:02:93:39:53:bc:c6:fc:ad:0b:59:fa:9e:b5:e8:56:d6: c9:f9:79:58:69:03:0a:39:49:6e:5e:b3:dc:84:14:9e:c0:8c: 4e:ce:39:75 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY7lLnTnWkYSOeMe8vODbJ/s4BZowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyODAyMTgwNFoX DTI0MTAyNjAyMjMwNFowMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0Uy RkM2MjI5MTM1MkFBQUJENTkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANT1bgImg9Xk8hqvlzcnUdEyqvPGKRJWNARAnSGxI/9eJT5GEtdFgykV81O9 d8w8dzmFS57sWzE9LqOHf7TN5Ba2ktHytEtNEOUN79Zjswh6s62XWEm1rh7Ba8OV DTEdnR422A1Q5ekMdQxdiFiFNfZAElk45Og7h8PvrRau9OIwhGn5Ay4/BGYCQKav +eV1B3/fI/BA7GcFJSvpedaCha7W4xFfnUSql42OuYV4U7oyJTM8BiIrttV6/e5J Bz52jNEMGnQO5uK8zeHBCJ7jdyiCTJNBrKhCcs01kJ554d5LdRU/0FggAf/66p3n 2OHqlEBrHwSZ2F/kscrJiKyjnxkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKndlWpUlom6Cj4vxiKRNSqqvVkbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYzFjNDlj LWQ0MDQtNDVhMS05ZTdkLTg2ZjVmODUyZTI3Ni8wL0E5REQ5NTZBNTQ5Njg5QkEw QTNFMkZDNjIyOTEzNTJBQUFCRDU5MUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr/AwDQYJKoZIhvcNAQELBQADggEBAArfQ7wo/SdTqCgNPveXh+RzZ9NE0pcx NIE/AU1fxIN0H09RhrtdB52a4VyctQweN3A0W/NyMLamtR4NCFEsOd9mzryiq5Vq KmEMhFK8v+8mNOt++EDaB0LYv/fQHSD+2aelojnwzdQehVr70TG9QRa5ZONzfUoX bUr5HDYbGus1EOh5oMhl3NnMHMkGOEVtjF2s2eALLBPBtPPFBNJCRePqyHloXYkX kt04i2+mdZ9ZZBYrR01u0iKE9EzsYkcH8OTYqT/4b715eXO/bo1drtPQAChGCalX Y99qApM5U7zG/K0LWfqetehW1sn5eVhpAwo5SW5es9yEFJ7AjE7OOXU= -----END CERTIFICATE-----Generated at Wed May 8 17:45:21 2024 by rpki-client on console-ams.rpki-client.org