$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer File: C85C49978E8023F2D58521524D4EC616244CDC14.cer (raw, json) Hash identifier: /j71WWSWZbQ+exphyUKD6uzINt0aaklDLFS+UTuuTCA= Subject key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B0206BDF52494DF1B5980F3D06714BC1D0AF2C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Aug 2023 11:08:25 +0000 Certificate not after: Thu 22 Aug 2024 11:13:25 +0000 Subordinate resources: IP: 103.239.214.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:02:06:bd:f5:24:94:df:1b:59:80:f3:d0:67:14:bc:1d:0a:f2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 11:08:25 2023 GMT Not After : Aug 22 11:13:25 2024 GMT Subject: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:06:fc:a1:8a:e6:c9:68:ad:0f:9f:fe:4f: 2b:87:c7:45:6b:ac:10:ac:85:fa:1c:f8:00:0c:13: 60:1b:1c:13:ac:c7:c8:97:88:fb:37:92:8b:4f:b7: fd:e1:86:0b:7b:5e:ed:72:1e:aa:6d:11:57:56:4e: a0:b9:1e:71:eb:ad:13:b8:0c:1d:c5:f4:98:7c:08: 16:30:fa:30:a4:99:ec:20:c1:52:96:93:95:ec:ff: 29:d7:ad:64:e8:12:9c:51:4a:6a:12:d6:b3:20:dd: 9a:f7:e6:73:46:af:d6:5b:6e:23:68:7c:f7:b2:d2: ea:06:75:5d:d4:ff:02:c5:39:4d:6c:b9:3b:37:58: 75:21:b9:d2:74:1d:5b:3c:4a:60:65:45:16:75:cd: 75:7d:4b:c1:35:7a:21:65:70:35:4c:d7:4a:34:35: 2e:fa:d8:2a:bb:4a:06:92:f1:ac:18:44:08:96:bb: ea:f0:3b:b1:28:eb:03:e9:18:83:70:fc:ef:2b:d2: a2:ce:53:cc:09:c7:02:5d:d9:3a:b3:da:ec:c2:4e: 9b:58:0b:a8:18:2a:ff:3c:ef:42:cb:77:d9:be:e9: c4:79:e8:d6:f8:b1:75:71:5d:a7:d7:30:22:7f:c2: 6a:94:93:25:14:73:25:d3:9b:83:82:9b:74:f1:fd: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.214.0/23 Signature Algorithm: sha256WithRSAEncryption 39:14:30:68:9f:82:e6:5f:b7:e6:30:b7:ba:fa:2f:fc:2b:83: 2e:6d:c2:11:85:6b:78:90:81:80:95:b5:58:6d:45:ff:43:3e: ae:12:2a:6d:d4:61:e9:e7:ca:4b:1c:80:f0:e4:48:83:e6:41: 3c:f2:ef:9d:4e:61:fc:bd:7d:cb:cd:12:c0:d1:0f:12:6d:b3: e5:4b:8f:36:ed:9f:ad:42:20:b6:3f:e1:23:67:07:eb:82:13: fb:46:74:38:b1:b1:11:08:5c:66:df:63:cc:3f:25:39:8f:bf: 9e:1c:6f:67:f4:c6:5a:a8:f1:88:a7:28:9f:30:ca:a5:1c:ef: 7c:de:d8:c2:81:43:09:7f:81:dd:05:61:72:f2:38:b3:1e:e5: 35:ef:e2:ea:01:46:67:c9:0d:b2:be:58:21:bd:c4:56:2e:51: a2:a4:04:cc:79:10:55:a7:be:8c:4c:e5:83:02:d5:68:6d:db: 16:d2:31:03:d0:e4:2e:08:12:aa:e4:30:ae:fd:da:5d:8d:dc: 54:f0:fb:cb:b7:c7:7d:fc:d0:0f:8d:eb:bb:7d:99:38:c0:14: f0:f1:94:b2:e3:1d:ff:7d:86:6f:8b:9f:2c:e3:5d:1b:3e:08: 18:22:39:3f:08:9c:e9:40:37:e9:35:cd:da:ab:de:18:1d:57: b5:5c:28:df -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSwIGvfUklN8bWYDz0GcUvB0K8scwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNDExMDgyNVoX DTI0MDgyMjExMTMyNVowMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUy MTUyNEQ0RUM2MTYyNDRDREMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPMBvyhiubJaK0Pn/5PK4fHRWusEKyF+hz4AAwTYBscE6zHyJeI+zeSi0+3 /eGGC3te7XIeqm0RV1ZOoLkeceutE7gMHcX0mHwIFjD6MKSZ7CDBUpaTlez/Kdet ZOgSnFFKahLWsyDdmvfmc0av1ltuI2h897LS6gZ1XdT/AsU5TWy5OzdYdSG50nQd WzxKYGVFFnXNdX1LwTV6IWVwNUzXSjQ1LvrYKrtKBpLxrBhECJa76vA7sSjrA+kY g3D87yvSos5TzAnHAl3ZOrPa7MJOm1gLqBgq/zzvQst32b7pxHno1vixdXFdp9cw In/CapSTJRRzJdObg4KbdPH9GskCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMhcSZeOgCPy1YUhUk1OxhYkTNwUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTE2ZTZl LWM2NzktNGU1MC1iN2FiLTFlNDA2NzkxMjVjZC8wL0M4NUM0OTk3OEU4MDIzRjJE NTg1MjE1MjRENEVDNjE2MjQ0Q0RDMTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn79YwDQYJKoZIhvcNAQELBQADggEBADkUMGifguZft+Ywt7r6L/wrgy5twhGF a3iQgYCVtVhtRf9DPq4SKm3UYennykscgPDkSIPmQTzy751OYfy9fcvNEsDRDxJt s+VLjzbtn61CILY/4SNnB+uCE/tGdDixsREIXGbfY8w/JTmPv54cb2f0xlqo8Yin KJ8wyqUc73ze2MKBQwl/gd0FYXLyOLMe5TXv4uoBRmfJDbK+WCG9xFYuUaKkBMx5 EFWnvoxM5YMC1Wht2xbSMQPQ5C4IEqrkMK792l2N3FTw+8u3x3380A+N67t9mTjA FPDxlLLjHf99hm+LnyzjXRs+CBgiOT8InOlAN+k1zdqr3hgdV7VcKN8= -----END CERTIFICATE-----Generated at Thu May 9 00:37:10 2024 by rpki-client on console-fra.rpki-client.org