$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer (raw, json) Hash identifier: y4Zx6rm4XOH0BkgeStIlhsEfZ8r7z3n8ZsVdq0eOBNE= Subject key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 311DEBE5260BA6ECA92ED6E3FD44F864C4715927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft caRepository: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Sep 2023 17:18:28 +0000 Certificate not after: Wed 11 Sep 2024 17:23:28 +0000 Subordinate resources: IP: 103.227.252.0/22 IP: 2001:df4:3d00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1d:eb:e5:26:0b:a6:ec:a9:2e:d6:e3:fd:44:f8:64:c4:71:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 17:18:28 2023 GMT Not After : Sep 11 17:23:28 2024 GMT Subject: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:5c:b3:bd:61:85:7f:29:b4:bf:00:ba:cb: d1:82:c9:47:22:e8:c4:60:10:9d:96:05:97:0c:75: 60:ad:ff:c8:f1:35:18:1d:ef:dd:dc:d2:83:9f:f3: e6:15:96:dd:dd:8f:46:06:ba:67:c1:dd:41:fe:3c: 88:3b:f0:a2:43:e6:23:ca:46:f3:8a:6a:e2:70:e6: 15:51:32:fe:70:15:e3:d4:98:c0:e3:9d:79:c8:a5: 71:c9:f0:f5:8b:59:2a:79:d8:29:df:57:58:37:77: eb:25:85:77:a4:24:13:55:f4:10:fc:cd:eb:c7:88: 91:55:49:e9:d9:1e:21:f9:48:23:d7:57:55:d7:ac: c2:27:b1:a8:29:f9:c7:4e:d6:0c:59:d9:ab:18:e6: 7a:49:27:47:43:8a:90:d2:8d:d0:05:b6:2d:58:65: b9:d3:5e:52:fc:d4:d5:a7:21:6a:05:e1:e1:7e:4c: 54:89:69:ca:71:8c:71:ad:c8:17:15:2a:39:83:a9: 28:74:9b:a9:63:1a:78:f3:4f:3b:a0:81:e7:3a:00: 44:67:b9:38:5f:b9:91:48:b0:18:48:59:06:c5:4f: 5b:33:db:6d:a0:9e:da:2d:ae:57:a6:39:70:a1:14: 9e:11:70:60:73:da:02:21:7c:65:33:93:98:46:6c: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.252.0/22 IPv6: 2001:df4:3d00::/48 Signature Algorithm: sha256WithRSAEncryption 89:cd:37:5b:b1:1e:a3:eb:c6:31:5e:d5:d4:40:a4:2f:a5:9a: a3:5f:fb:a8:f0:90:af:3c:d1:ca:60:cc:d0:60:a5:cf:54:c5: bc:7b:48:2d:92:16:87:57:e6:ac:c9:a8:53:18:13:92:4b:23: 2c:30:f9:83:3e:46:48:83:b3:ac:ef:6b:62:41:f7:64:6a:cf: 9c:d8:56:dd:92:18:cb:42:bb:9d:3f:af:9e:e2:6c:36:d0:30: 51:97:2a:a0:44:79:fe:5f:b4:61:17:2e:0b:b2:7c:f6:b6:2e: 15:29:9a:ec:a9:93:f6:d6:cf:e8:7a:17:54:b7:3a:24:bf:d3: f3:78:5a:61:e8:bf:95:a2:90:7c:f4:e8:26:54:e6:32:3f:e4: d2:00:ab:3e:4e:81:68:65:c0:f2:05:c7:81:91:6a:92:2e:2f: fc:42:74:a1:54:7a:4b:eb:88:22:2f:4b:d1:11:8b:6f:4d:f1: 26:8f:42:60:0a:32:5a:e7:c4:74:1b:3d:d1:76:0c:35:65:14: c2:0f:cf:26:e6:be:7a:a5:98:8d:66:ee:14:1a:a3:e2:a8:f3: ce:7c:f1:81:a2:a3:c0:5b:8f:e5:c6:e6:0a:86:2c:73:35:8e: 4a:4c:d8:73:7c:69:c6:d4:d8:68:fe:fe:41:8c:68:ce:60:b4: be:ae:4b:f8 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMR3r5SYLpuypLtbj/UT4ZMRxWScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMzE3MTgyOFoX DTI0MDkxMTE3MjMyOFowMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZF MUI4MkI0RTc5MTcwQUU4NzY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdjXLO9YYV/KbS/ALrL0YLJRyLoxGAQnZYFlwx1YK3/yPE1GB3v3dzSg5/z 5hWW3d2PRga6Z8HdQf48iDvwokPmI8pG84pq4nDmFVEy/nAV49SYwOOdecilccnw 9YtZKnnYKd9XWDd36yWFd6QkE1X0EPzN68eIkVVJ6dkeIflII9dXVdeswiexqCn5 x07WDFnZqxjmekknR0OKkNKN0AW2LVhludNeUvzU1achagXh4X5MVIlpynGMca3I FxUqOYOpKHSbqWMaePNPO6CB5zoARGe5OF+5kUiwGEhZBsVPWzPbbaCe2i2uV6Y5 cKEUnhFwYHPaAiF8ZTOTmEZsjbMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnrz4FY6rscFu/huCtOeRcK6HaDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZmZmYzJk LWNjYTctNDhlNi05Y2Q2LTU2NWMxMWM0NTQ0MC8wL0E5RUJDRjgxNThFQUJCMUMx NkVGRTFCODJCNEU3OTE3MEFFODc2ODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn4/wwDwQCAAIwCQMHACABDfQ9ADANBgkqhkiG9w0BAQsFAAOCAQEAic03W7Ee o+vGMV7V1ECkL6Wao1/7qPCQrzzRymDM0GClz1TFvHtILZIWh1fmrMmoUxgTkksj LDD5gz5GSIOzrO9rYkH3ZGrPnNhW3ZIYy0K7nT+vnuJsNtAwUZcqoER5/l+0YRcu C7J89rYuFSma7KmT9tbP6HoXVLc6JL/T83haYei/laKQfPToJlTmMj/k0gCrPk6B aGXA8gXHgZFqki4v/EJ0oVR6S+uIIi9L0RGLb03xJo9CYAoyWufEdBs90XYMNWUU wg/PJua+eqWYjWbuFBqj4qjzznzxgaKjwFuP5cbmCoYsczWOSkzYc3xpxtTYaP7+ QYxozmC0vq5L+A== -----END CERTIFICATE-----Generated at Wed May 8 07:45:26 2024 by rpki-client on console-ams.rpki-client.org