$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer (raw, json) Hash identifier: IvCQPkYz8FdzQp2Ie5/XD1j6DX9wDoBDXV9hqgbPF0E= Subject key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B7E5FDCEBAE3E2027CDDB4E1ABEBE70E1CB8B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:30:41 +0000 Certificate not after: Mon 29 Jul 2024 00:35:41 +0000 Subordinate resources: IP: 103.112.223.0/24 IP: 2001:df4:bd00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7e:5f:dc:eb:ae:3e:20:27:cd:db:4e:1a:be:be:70:e1:cb:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:30:41 2023 GMT Not After : Jul 29 00:35:41 2024 GMT Subject: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:ea:fa:4c:80:31:61:27:5d:1b:f3:f5:48: f1:75:86:95:e2:be:36:dd:3c:8d:2f:78:96:cd:b0: 51:c5:e8:d6:fc:87:e9:8e:3e:c3:b5:cf:d9:15:81: 28:fe:ac:d9:ff:6b:4b:3d:37:e0:9b:21:5e:54:18: 84:b5:4a:1a:3a:e8:51:f6:58:d9:36:97:c7:d0:19: 9a:2a:2f:21:5d:50:0d:40:7c:8e:14:32:2e:38:1a: a1:5a:7e:7d:40:65:70:4b:24:7e:45:e9:02:a3:1c: 44:84:27:f7:bb:29:72:d3:dd:f8:83:3f:93:ee:c6: ac:d6:84:fa:0d:55:7f:1f:bb:d3:35:4e:93:eb:38: 97:21:97:1c:f5:94:da:42:09:22:32:d7:cc:49:76: be:ed:f3:2c:f6:de:db:b1:ec:23:29:47:bb:7a:c9: 31:aa:f7:e3:aa:63:ee:29:02:a6:61:1a:09:9c:6b: 49:3f:7f:a1:4f:45:92:dd:41:b5:6c:38:da:49:ac: bf:8a:73:cc:de:b4:d4:fc:53:24:b1:b6:34:76:70: 5c:d0:17:5e:e4:e7:07:fc:e8:64:5f:25:5d:36:1a: d5:94:cd:19:78:3d:51:54:81:e9:19:b6:b1:63:d0: 2f:83:88:d5:88:06:3c:1b:ff:0b:31:fb:66:8b:92: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.223.0/24 IPv6: 2001:df4:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 3c:e9:9b:1c:26:12:68:6c:08:8e:5c:4c:f2:35:fc:c6:93:c7: fb:e6:7c:4d:9b:1c:1a:79:1f:e2:3e:4f:74:3b:ba:f0:1c:8f: b7:53:21:3f:1a:09:76:10:89:30:01:8a:c3:76:b9:64:fc:98: c2:e6:e6:e4:d4:6f:41:88:5f:4b:cf:28:af:32:c7:ba:2b:97: af:98:3a:87:a7:d6:23:b7:86:95:9e:50:5f:64:05:21:9e:48: 84:37:79:8a:0c:7e:af:62:36:4c:60:55:ac:12:ab:8f:cb:30: 08:7a:f4:49:15:35:7d:89:72:17:dc:e4:a2:a5:d5:52:02:40: 22:4a:f9:93:40:e4:15:fa:63:50:1d:01:f7:5c:a4:19:81:d3: b3:1e:ef:89:b1:d1:ad:f3:c4:49:5f:9a:14:e8:ab:43:02:02: 77:fc:2c:6d:51:c6:a8:66:dd:39:3b:75:82:d1:65:5d:80:13: 97:d8:09:f0:27:2d:33:39:b7:6c:95:e5:28:62:96:43:ff:d8: 0c:9a:4e:f7:84:4f:f5:f5:22:1b:a7:88:f2:46:1e:cf:aa:01: fc:21:cd:d0:d1:f1:22:87:27:aa:d2:ed:16:cb:84:ce:78:77: 50:46:e0:40:a9:65:0a:4e:fc:72:e4:ae:da:be:77:d9:8e:9e: dd:6b:6e:54 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUS35f3OuuPiAnzdtOGr6+cOHLi4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwMzA0MVoX DTI0MDcyOTAwMzU0MVowMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0Ey Qjk5QTRDNkJGNEZGMzA2OTQ1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnF6vpMgDFhJ10b8/VI8XWGleK+Nt08jS94ls2wUcXo1vyH6Y4+w7XP2RWB KP6s2f9rSz034JshXlQYhLVKGjroUfZY2TaXx9AZmiovIV1QDUB8jhQyLjgaoVp+ fUBlcEskfkXpAqMcRIQn97spctPd+IM/k+7GrNaE+g1Vfx+70zVOk+s4lyGXHPWU 2kIJIjLXzEl2vu3zLPbe27HsIylHu3rJMar346pj7ikCpmEaCZxrST9/oU9Fkt1B tWw42kmsv4pzzN601PxTJLG2NHZwXNAXXuTnB/zoZF8lXTYa1ZTNGXg9UVSB6Rm2 sWPQL4OI1YgGPBv/CzH7ZouS2fECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMUJYC6EkuHvL3ormaTGv0/zBpRdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDZkMGRm LWMyMWUtNDkxYy1iMTE2LTRhMWQ5YTJjNzRiZS8wL0M1MDk2MDJFODQ5MkUxRUYy RjdBMkI5OUE0QzZCRjRGRjMwNjk0NUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABncN8wDwQCAAIwCQMHACABDfS9ADANBgkqhkiG9w0BAQsFAAOCAQEAPOmbHCYS aGwIjlxM8jX8xpPH++Z8TZscGnkf4j5PdDu68ByPt1MhPxoJdhCJMAGKw3a5ZPyY wubm5NRvQYhfS88orzLHuiuXr5g6h6fWI7eGlZ5QX2QFIZ5IhDd5igx+r2I2TGBV rBKrj8swCHr0SRU1fYlyF9zkoqXVUgJAIkr5k0DkFfpjUB0B91ykGYHTsx7vibHR rfPESV+aFOirQwICd/wsbVHGqGbdOTt1gtFlXYATl9gJ8CctMzm3bJXlKGKWQ//Y DJpO94RP9fUiG6eI8kYez6oB/CHN0NHxIocnqtLtFsuEznh3UEbgQKllCk78cuSu 2r532Y6e3WtuVA== -----END CERTIFICATE-----Generated at Wed May 8 22:46:45 2024 by rpki-client on console-ams.rpki-client.org