$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer (raw, json) Hash identifier: rxYIOdJeSu7c1xS0CeiRM68bMMnBiVhSuxuWBlegQIc= Subject key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33CD272A3347F1E73A7C9C48ECA241BEC0941C1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:26:40 +0000 Certificate not after: Thu 03 Apr 2025 19:31:40 +0000 Subordinate resources: IP: 103.186.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:27:2a:33:47:f1:e7:3a:7c:9c:48:ec:a2:41:be:c0:94:1c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 4 19:26:40 2024 GMT Not After : Apr 3 19:31:40 2025 GMT Subject: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:31:19:50:66:d6:5f:e3:89:e4:db:3f:48: 6f:40:c3:0e:53:c0:c6:d8:09:ea:6e:69:65:6e:91: 05:05:cf:d2:15:42:28:78:13:d5:50:96:43:fa:72: 5e:3a:2c:7a:08:49:43:bf:d8:da:2c:4e:99:7b:c8: 9c:92:85:ee:29:df:8c:ec:b7:6b:87:ca:b5:c8:31: 5a:a9:d1:0a:1b:10:f4:08:cf:1d:91:97:95:e7:d8: 67:7a:c5:01:45:77:45:ac:10:26:ae:dd:f6:c3:40: 04:e5:c3:02:67:ab:e7:e4:c3:62:a4:c0:70:9d:e1: e7:f4:42:80:70:03:99:b5:38:55:79:e6:9a:46:41: 68:9e:1d:2f:35:f2:99:f3:0f:63:b4:cf:77:ef:16: 60:17:76:a0:f3:24:1f:81:5e:a8:eb:83:22:a0:49: b3:5d:5e:b3:8a:dd:9a:e6:8b:22:00:30:ee:2c:e9: ac:55:52:c6:6d:4f:9f:68:69:3d:b4:94:e2:ee:14: 43:3c:52:ee:69:32:81:7e:76:14:ad:ec:a1:51:e1: aa:c7:11:df:b9:7c:bd:4a:6c:62:8d:0c:0e:fc:7e: fc:10:84:59:a1:15:9e:48:5d:bf:5f:39:92:0d:8e: 97:28:c4:85:81:2f:fe:46:90:5e:b6:54:a0:1b:1b: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.202.0/23 Signature Algorithm: sha256WithRSAEncryption 75:21:f1:dc:ee:42:8b:30:6f:ae:f4:16:12:f4:21:34:2b:05: 1f:f2:ac:74:aa:4d:de:87:53:40:7a:7c:3d:54:2e:50:40:9f: 74:e5:6f:75:cb:e1:d9:0a:dd:3a:ee:2f:04:43:bf:14:dd:78: 21:1d:23:3b:c5:cf:18:48:f0:a1:97:0e:73:84:55:64:ee:44: 96:1f:36:c2:fd:2a:d3:eb:a2:40:e2:f2:9d:d7:63:19:b6:78: 04:e4:85:4d:bd:e6:72:06:36:ff:3b:14:16:dc:fc:0c:ac:e4: 2d:62:01:8b:fe:f6:88:36:b3:4f:1c:8b:dd:c7:2b:31:30:10: 4f:33:3f:b1:3d:64:8a:7e:5c:93:b6:cd:75:57:6e:88:d2:5d: 00:ff:a7:35:c2:43:56:0e:23:48:86:d2:bc:80:0a:c5:db:85: 90:6f:1d:df:79:30:c6:1c:ff:a5:85:62:9b:38:bb:bb:81:a2: 04:64:83:14:e4:4a:7a:44:ec:b8:2a:5e:de:d4:be:53:86:80: 64:c0:bc:dc:26:3a:55:6f:3a:5f:b2:d2:e5:8c:65:04:7c:d0: 75:b2:96:8d:59:b6:ec:99:20:70:bd:59:f4:91:8c:bd:a4:9b: 2f:5f:b9:40:7d:57:c6:46:cb:11:d0:2f:d9:dd:c2:35:a8:a6: da:73:79:4e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM80nKjNH8ec6fJxI7KJBvsCUHB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwNDE5MjY0MFoX DTI1MDQwMzE5MzE0MFowMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3 RkYzMzRDMTY1RTlGRDIxRkE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG3MRlQZtZf44nk2z9Ib0DDDlPAxtgJ6m5pZW6RBQXP0hVCKHgT1VCWQ/py XjoseghJQ7/Y2ixOmXvInJKF7infjOy3a4fKtcgxWqnRChsQ9AjPHZGXlefYZ3rF AUV3RawQJq7d9sNABOXDAmer5+TDYqTAcJ3h5/RCgHADmbU4VXnmmkZBaJ4dLzXy mfMPY7TPd+8WYBd2oPMkH4FeqOuDIqBJs11es4rdmuaLIgAw7izprFVSxm1Pn2hp PbSU4u4UQzxS7mkygX52FK3soVHhqscR37l8vUpsYo0MDvx+/BCEWaEVnkhdv185 kg2OlyjEhYEv/kaQXrZUoBsb0j0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLNHu6a9Eb/F5V9/8zTBZen9IfpcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MTA2ODI3 LTg2NmUtNGFjMy04Zjc5LWE2ZTMyMGIyMGRlNy8wL0IzNDdCQkE2QkQxMUJGQzVF NTVGN0ZGMzM0QzE2NUU5RkQyMUZBNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnusowDQYJKoZIhvcNAQELBQADggEBAHUh8dzuQoswb670FhL0ITQrBR/yrHSq Td6HU0B6fD1ULlBAn3Tlb3XL4dkK3TruLwRDvxTdeCEdIzvFzxhI8KGXDnOEVWTu RJYfNsL9KtProkDi8p3XYxm2eATkhU295nIGNv87FBbc/Ays5C1iAYv+9og2s08c i93HKzEwEE8zP7E9ZIp+XJO2zXVXbojSXQD/pzXCQ1YOI0iG0ryACsXbhZBvHd95 MMYc/6WFYps4u7uBogRkgxTkSnpE7LgqXt7UvlOGgGTAvNwmOlVvOl+y0uWMZQR8 0HWylo1ZtuyZIHC9WfSRjL2kmy9fuUB9V8ZGyxHQL9ndwjWoptpzeU4= -----END CERTIFICATE-----Generated at Wed May 8 04:38:00 2024 by rpki-client on console-fra.rpki-client.org