$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer File: C710954C7B301C60B82BA6372CACEB81DA08F190.cer (raw, json) Hash identifier: 7lFjLqD+2SJ8OJIzTjMc8/8Lih8GOad+VDqgnQCAg84= Subject key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26E48CC174773596A03AC8A251A8359AC3CD456F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft caRepository: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Sep 2023 10:38:52 +0000 Certificate not after: Sat 07 Sep 2024 10:43:52 +0000 Subordinate resources: IP: 103.58.111.0/24 IP: 2001:df4:4400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:8c:c1:74:77:35:96:a0:3a:c8:a2:51:a8:35:9a:c3:cd:45:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 10:38:52 2023 GMT Not After : Sep 7 10:43:52 2024 GMT Subject: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:1e:1b:4c:ee:43:6c:92:77:e4:7e:77:bf: 5e:9e:a4:73:6a:c7:57:fc:c1:b9:5e:d1:09:0d:d4: 4b:2f:49:98:16:d5:5e:cd:bf:0e:88:5e:8e:1b:50: 82:ce:e3:4b:6a:0a:15:09:87:5e:1e:6a:2b:69:49: 2e:fb:99:0d:af:76:23:cf:e3:d8:19:b4:58:f3:f5: ff:f1:c9:ce:a3:51:b6:5a:c0:43:c9:5a:06:47:f6: eb:20:6e:94:ad:6b:5b:eb:a5:47:7f:30:2b:eb:a4: 4a:05:59:32:a4:83:05:9f:3e:0e:29:63:f1:21:5e: 80:a2:ee:42:28:e8:7f:4b:7b:a7:21:84:fe:86:a2: ea:28:a7:80:9b:c5:75:34:5a:0a:6b:41:4f:26:86: 68:e1:49:b5:5f:d4:86:e4:94:68:72:7e:e8:70:ff: f6:4a:ea:30:fd:bf:24:41:e0:55:d6:d5:5f:eb:94: 40:86:15:54:b7:e8:e6:4e:14:6e:92:fd:b3:98:b7: cf:87:0d:b3:c1:51:0a:0b:4b:9f:22:8b:41:4f:ee: 9e:48:ba:6b:33:6f:d6:47:41:46:4f:01:73:d6:18: 61:51:48:a9:72:ca:40:f8:bc:81:04:a8:7b:81:d5: e9:8e:85:7f:1d:4b:9b:09:ee:eb:d9:fb:c0:95:80: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.111.0/24 IPv6: 2001:df4:4400::/48 Signature Algorithm: sha256WithRSAEncryption 1b:f5:63:31:1c:78:72:54:09:4e:c0:a4:59:f2:09:8b:f3:6a: 6e:4d:ac:80:38:1d:a5:8d:df:47:12:6b:5b:0e:89:87:40:b4: 20:e5:46:3e:ee:ea:0b:41:b0:9c:4d:b2:91:81:df:6b:45:6d: db:9e:8a:dd:1a:9a:b9:78:28:74:76:ad:51:3b:4d:b9:cf:1b: c8:9f:5b:a8:78:28:11:4b:12:75:27:e4:1f:cb:91:8a:90:98: 99:fe:f0:00:47:d0:9a:ac:1b:3c:58:5c:1c:16:71:f0:41:4a: 62:24:0a:02:84:79:f5:5a:94:73:c4:d7:ed:d7:93:40:8a:a9: e9:79:f9:f9:e2:fe:41:1a:e8:46:34:b3:f4:0a:b1:8b:6b:a0: 7d:be:cc:83:14:6e:29:87:63:46:88:18:bb:59:e5:48:bf:af: 11:1a:59:c6:1c:c2:9a:86:38:68:af:a1:93:ea:99:1f:27:93: 65:8d:f4:4e:f0:53:c9:42:53:ca:c3:cb:7e:6b:53:19:5e:c9: 59:92:34:93:12:99:71:d7:fc:55:5f:67:01:67:3a:31:9c:b4: af:7d:95:5e:91:67:ea:12:5c:29:21:20:74:b1:d5:6a:2d:fc: 09:93:8a:70:16:de:bd:6f:ef:7d:aa:df:a2:b5:11:df:a9:73: db:57:39:d6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJuSMwXR3NZagOsiiUag1msPNRW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwOTEwMzg1MloX DTI0MDkwNzEwNDM1MlowMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJB NjM3MkNBQ0VCODFEQTA4RjE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbBHhtM7kNsknfkfne/Xp6kc2rHV/zBuV7RCQ3USy9JmBbVXs2/DohejhtQ gs7jS2oKFQmHXh5qK2lJLvuZDa92I8/j2Bm0WPP1//HJzqNRtlrAQ8laBkf26yBu lK1rW+ulR38wK+ukSgVZMqSDBZ8+Dilj8SFegKLuQijof0t7pyGE/oai6iingJvF dTRaCmtBTyaGaOFJtV/UhuSUaHJ+6HD/9krqMP2/JEHgVdbVX+uUQIYVVLfo5k4U bpL9s5i3z4cNs8FRCgtLnyKLQU/unki6azNv1kdBRk8Bc9YYYVFIqXLKQPi8gQSo e4HV6Y6Ffx1Lmwnu69n7wJWAFgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMcQlUx7MBxguCumNyys64HaCPGQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzZTQxNzdk LTgwOTMtNDQ3Yy04N2I1LWM3OWM4Y2I0YzczMy8wL0M3MTA5NTRDN0IzMDFDNjBC ODJCQTYzNzJDQUNFQjgxREEwOEYxOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnOm8wDwQCAAIwCQMHACABDfREADANBgkqhkiG9w0BAQsFAAOCAQEAG/VjMRx4 clQJTsCkWfIJi/Nqbk2sgDgdpY3fRxJrWw6Jh0C0IOVGPu7qC0GwnE2ykYHfa0Vt 256K3RqauXgodHatUTtNuc8byJ9bqHgoEUsSdSfkH8uRipCYmf7wAEfQmqwbPFhc HBZx8EFKYiQKAoR59VqUc8TX7deTQIqp6Xn5+eL+QRroRjSz9Aqxi2ugfb7MgxRu KYdjRogYu1nlSL+vERpZxhzCmoY4aK+hk+qZHyeTZY30TvBTyUJTysPLfmtTGV7J WZI0kxKZcdf8VV9nAWc6MZy0r32VXpFn6hJcKSEgdLHVai38CZOKcBbevW/vfarf orUR36lz21c51g== -----END CERTIFICATE-----Generated at Wed May 8 15:17:47 2024 by rpki-client on console-fra.rpki-client.org