$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer (raw, json) Hash identifier: +Aq2/27lqv/FvBS618tH8b3vJAi6O2pRvBDtVsAyJCo= Subject key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23144DB495A2B61BCFFCBF65EBB5A9375345AC17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft caRepository: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Jun 2024 03:28:34 +0000 Certificate not after: Thu 19 Jun 2025 03:33:34 +0000 Subordinate resources: IP: 103.186.192.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:4d:b4:95:a2:b6:1b:cf:fc:bf:65:eb:b5:a9:37:53:45:ac:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jun 20 03:28:34 2024 GMT Not After : Jun 19 03:33:34 2025 GMT Subject: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:7f:84:19:1b:0c:43:49:31:35:42:1b:3f: 0b:bc:74:a8:59:3e:c8:bf:52:48:e4:b7:01:43:6f: 41:cc:0d:e8:d2:09:89:95:26:af:7a:0c:75:1e:3b: cc:01:23:a8:83:5c:41:86:b6:77:a6:b6:1e:f7:53: 9c:e5:d8:9a:83:47:10:ba:01:be:a5:11:2b:70:e8: e6:9f:74:09:fb:6e:75:37:cb:95:49:e2:03:cc:1f: 2e:83:a8:bd:2a:94:f6:b8:5d:fc:d2:39:89:fc:48: 14:66:ce:36:16:53:a1:9e:f7:e8:e3:b3:03:2c:d9: 42:12:70:c2:2d:c8:20:61:db:bd:74:18:83:78:ae: 31:5f:c5:4d:9b:64:43:66:8f:bf:24:4c:ec:bf:89: 98:19:ed:c7:f4:0e:aa:08:37:7b:32:95:31:1b:cc: 7e:55:58:4a:5a:ae:da:a6:22:fd:2c:08:cb:6b:96: da:a2:d2:ef:52:13:10:47:6e:54:ef:e9:80:7d:8d: 80:59:e2:a2:12:b5:58:e3:0c:f3:96:6b:ec:6f:a4: 3a:24:6a:f5:28:93:93:d6:06:0f:8b:8b:c3:89:a9: ff:80:09:2d:b8:db:43:fe:de:81:7b:0a:9b:38:02: fa:2f:a7:e3:48:f2:58:c2:78:92:a7:2e:12:9c:17: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.192.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:1c:33:cb:0b:5a:86:f8:e9:3b:15:db:4c:b3:0b:44:78:fe: 38:dc:68:d9:b0:2d:ff:49:af:10:d7:c4:61:3d:a3:1f:49:82: 82:a6:43:f8:5d:b7:57:a2:f7:6a:45:6d:d1:77:c8:f1:1c:71: 82:6b:43:17:53:9c:ad:81:52:e2:43:29:6f:ee:51:d6:f3:bc: 85:df:b3:bc:bd:cb:00:24:35:3b:ca:49:32:4c:6f:d7:99:24: 3a:22:03:54:3f:b5:90:45:58:28:3e:e1:48:91:ee:ae:e7:6b: 68:82:38:c6:21:30:a4:55:52:c5:4b:e9:e6:04:33:82:3d:b8: 80:6e:e2:3a:d7:eb:cd:98:c9:ed:09:d1:a7:ef:35:ec:09:bd: 00:1e:9f:90:38:a3:47:f6:80:4a:d4:38:7e:bd:5d:9d:25:90: 1f:28:ba:84:2e:a0:56:3e:52:c4:d6:ff:b5:3c:de:99:2a:79: f3:3e:34:00:1a:de:3a:d2:98:91:6c:01:39:7b:89:dd:8a:46: 47:78:ec:e9:1e:7b:ef:41:69:02:d4:4e:75:04:cd:7b:5b:b4: bd:94:ce:60:bd:75:73:53:13:a4:ee:03:fa:1a:ea:2c:05:cb: 75:eb:e8:37:5f:85:dd:dd:d7:37:36:30:86:43:8c:9e:31:06: 67:b3:e5:fe -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIxRNtJWithvP/L9l67WpN1NFrBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyMDAzMjgzNFoX DTI1MDYxOTAzMzMzNFowMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5 NkZGQjNBMkZEOThDQTQyNzk2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcbf4QZGwxDSTE1Qhs/C7x0qFk+yL9SSOS3AUNvQcwN6NIJiZUmr3oMdR47 zAEjqINcQYa2d6a2HvdTnOXYmoNHELoBvqURK3Do5p90CftudTfLlUniA8wfLoOo vSqU9rhd/NI5ifxIFGbONhZToZ736OOzAyzZQhJwwi3IIGHbvXQYg3iuMV/FTZtk Q2aPvyRM7L+JmBntx/QOqgg3ezKVMRvMflVYSlqu2qYi/SwIy2uW2qLS71ITEEdu VO/pgH2NgFniohK1WOMM85Zr7G+kOiRq9SiTk9YGD4uLw4mp/4AJLbjbQ/7egXsK mzgC+i+n40jyWMJ4kqcuEpwXZvkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRHr8RUfc8Wok6W/7Oi/ZjKQnlqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzNWE5ZGRm LWMxMDktNGZjMS1hMzBkLThmMDRiODMzODFiZS8wL0M0NDdBRkM0NTQ3RENGMTZB MjRFOTZGRkIzQTJGRDk4Q0E0Mjc5NkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnusAwDQYJKoZIhvcNAQELBQADggEBAC4cM8sLWob46TsV20yzC0R4/jjcaNmw Lf9JrxDXxGE9ox9JgoKmQ/hdt1ei92pFbdF3yPEccYJrQxdTnK2BUuJDKW/uUdbz vIXfs7y9ywAkNTvKSTJMb9eZJDoiA1Q/tZBFWCg+4UiR7q7na2iCOMYhMKRVUsVL 6eYEM4I9uIBu4jrX682Yye0J0afvNewJvQAen5A4o0f2gErUOH69XZ0lkB8ouoQu oFY+UsTW/7U83pkqefM+NAAa3jrSmJFsATl7id2KRkd47Okee+9BaQLUTnUEzXtb tL2UzmC9dXNTE6TuA/oa6iwFy3Xr6Ddfhd3d1zc2MIZDjJ4xBmez5f4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:22 2025 by rpki-client