$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer File: A9DD956A549689BA0A3E2FC62291352AAABD591B.cer (raw, json) Hash identifier: zpP66cqHns8frQkq5vsgNnf6saPV+ZTurg63RUxZHRs= Subject key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D47DD0C88E1430F9EB01370E8879BB43899E991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Sep 2024 06:12:55 +0000 Certificate not after: Sat 27 Sep 2025 06:17:55 +0000 Subordinate resources: IP: 103.175.240.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:47:dd:0c:88:e1:43:0f:9e:b0:13:70:e8:87:9b:b4:38:99:e9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 28 06:12:55 2024 GMT Not After : Sep 27 06:17:55 2025 GMT Subject: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:6e:02:26:83:d5:e4:f2:1a:af:97:37:27: 51:d1:32:aa:f3:c6:29:12:56:34:04:40:9d:21:b1: 23:ff:5e:25:3e:46:12:d7:45:83:29:15:f3:53:bd: 77:cc:3c:77:39:85:4b:9e:ec:5b:31:3d:2e:a3:87: 7f:b4:cd:e4:16:b6:92:d1:f2:b4:4b:4d:10:e5:0d: ef:d6:63:b3:08:7a:b3:ad:97:58:49:b5:ae:1e:c1: 6b:c3:95:0d:31:1d:9d:1e:36:d8:0d:50:e5:e9:0c: 75:0c:5d:88:58:85:35:f6:40:12:59:38:e4:e8:3b: 87:c3:ef:ad:16:ae:f4:e2:30:84:69:f9:03:2e:3f: 04:66:02:40:a6:af:f9:e5:75:07:7f:df:23:f0:40: ec:67:05:25:2b:e9:79:d6:82:85:ae:d6:e3:11:5f: 9d:44:aa:97:8d:8e:b9:85:78:53:ba:32:25:33:3c: 06:22:2b:b6:d5:7a:fd:ee:49:07:3e:76:8c:d1:0c: 1a:74:0e:e6:e2:bc:cd:e1:c1:08:9e:e3:77:28:82: 4c:93:41:ac:a8:42:72:cd:35:90:9e:79:e1:de:4b: 75:15:3f:d0:58:20:01:ff:fa:ea:9d:e7:d8:e1:ea: 94:40:6b:1f:04:99:d8:5f:e4:b1:ca:c9:88:ac:a3: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.240.0/23 Signature Algorithm: sha256WithRSAEncryption 27:57:7d:5b:f8:4b:41:bc:f9:d0:68:19:78:16:e7:fc:b5:83: d3:73:be:4d:71:68:6a:21:a2:1e:05:85:ef:4d:2a:49:03:28: a9:30:fd:15:b6:dd:f8:d2:6f:06:d4:fe:fb:51:bd:bc:b2:e5: 9d:a4:4e:cc:bf:aa:d9:bd:4d:79:b6:64:56:e5:94:28:05:91: 01:0c:47:44:ea:39:86:a2:ef:8f:42:d6:61:93:c0:05:dd:aa: a2:04:8d:9e:a8:fd:ea:07:3e:6c:4a:99:bb:7c:15:27:7c:a5: e4:fd:91:39:54:03:9c:23:b1:17:51:c2:68:27:aa:5b:f1:b1: 3a:a3:ee:bb:f0:44:9f:be:5e:e8:59:f6:44:ad:4f:92:4d:fb: 8d:37:e9:b3:86:40:34:e1:28:a9:1a:f9:2c:c6:89:1b:ac:c1: 2e:d8:74:45:d3:b0:8a:06:fe:dd:a5:30:dd:e2:b4:d0:aa:82: a7:cf:fb:46:a7:28:25:d1:07:8d:24:8e:c6:27:18:fa:7d:2e: 61:46:64:31:29:79:04:0e:03:97:ff:e8:57:f2:f3:de:d8:02: a9:71:b0:3a:b7:cd:1c:c5:52:01:d5:43:7d:f7:12:0f:65:76: ed:3d:75:68:f3:62:ff:97:9d:43:dd:ce:5e:25:61:f5:b5:0e: 24:ad:09:01 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTUfdDIjhQw+esBNw6IebtDiZ6ZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyODA2MTI1NVoX DTI1MDkyNzA2MTc1NVowMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0Uy RkM2MjI5MTM1MkFBQUJENTkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANT1bgImg9Xk8hqvlzcnUdEyqvPGKRJWNARAnSGxI/9eJT5GEtdFgykV81O9 d8w8dzmFS57sWzE9LqOHf7TN5Ba2ktHytEtNEOUN79Zjswh6s62XWEm1rh7Ba8OV DTEdnR422A1Q5ekMdQxdiFiFNfZAElk45Og7h8PvrRau9OIwhGn5Ay4/BGYCQKav +eV1B3/fI/BA7GcFJSvpedaCha7W4xFfnUSql42OuYV4U7oyJTM8BiIrttV6/e5J Bz52jNEMGnQO5uK8zeHBCJ7jdyiCTJNBrKhCcs01kJ554d5LdRU/0FggAf/66p3n 2OHqlEBrHwSZ2F/kscrJiKyjnxkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKndlWpUlom6Cj4vxiKRNSqqvVkbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYzFjNDlj LWQ0MDQtNDVhMS05ZTdkLTg2ZjVmODUyZTI3Ni8wL0E5REQ5NTZBNTQ5Njg5QkEw QTNFMkZDNjIyOTEzNTJBQUFCRDU5MUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr/AwDQYJKoZIhvcNAQELBQADggEBACdXfVv4S0G8+dBoGXgW5/y1g9Nzvk1x aGohoh4Fhe9NKkkDKKkw/RW23fjSbwbU/vtRvbyy5Z2kTsy/qtm9TXm2ZFbllCgF kQEMR0TqOYai749C1mGTwAXdqqIEjZ6o/eoHPmxKmbt8FSd8peT9kTlUA5wjsRdR wmgnqlvxsTqj7rvwRJ++XuhZ9kStT5JN+4036bOGQDThKKka+SzGiRuswS7YdEXT sIoG/t2lMN3itNCqgqfP+0anKCXRB40kjsYnGPp9LmFGZDEpeQQOA5f/6Ffy897Y AqlxsDq3zRzFUgHVQ333Eg9ldu09dWjzYv+XnUPdzl4lYfW1DiStCQE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org