$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer (raw, json) Hash identifier: bBwImgONtHxrJ2+WkLI0icLElBqoy+UpSU0DmYF2rnM= Subject key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C397554F27E2891D44D04C4F17D7EA26D9C0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft caRepository: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 15:35:26 +0000 Certificate not after: Mon 29 Jul 2024 15:40:26 +0000 Subordinate resources: IP: 103.160.160.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:39:75:54:f2:7e:28:91:d4:4d:04:c4:f1:7d:7e:a2:6d:9c:03:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 15:35:26 2023 GMT Not After : Jul 29 15:40:26 2024 GMT Subject: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:26:3f:83:46:a0:01:e3:73:57:3d:a3:6b: 58:7f:21:ca:46:55:38:ea:0a:b4:e9:99:27:f5:db: 2b:f6:5c:ea:67:9e:4f:cc:ab:04:db:05:ae:89:49: 5a:ee:42:18:33:e0:cc:0e:c3:45:9a:89:39:64:35: 55:1b:ea:0f:31:b4:29:69:e6:d3:f7:72:6d:1b:1e: 72:d2:8a:12:e2:7b:a6:40:bd:91:c5:b9:bb:96:44: 94:84:ca:8d:3e:88:c9:79:71:b0:74:fa:a5:85:2b: 51:b1:e4:4b:44:cf:8b:79:85:63:3a:35:f6:16:e3: 44:01:4f:fa:88:99:a2:4e:59:36:5d:5a:a0:7a:c7: 8f:4a:79:51:86:58:8b:81:d8:98:40:05:a6:56:d3: 9d:a1:80:cc:46:3e:24:df:4b:de:cb:4b:c8:de:ea: 82:77:02:fe:56:5c:c2:2f:9e:34:c4:7f:c8:82:81: 05:b1:6f:1d:50:ed:ce:65:3a:f2:e8:f8:da:98:26: c4:8e:0d:99:18:83:ea:ca:b2:ab:cc:38:50:b4:96: d9:f5:0e:76:f1:68:cb:93:72:54:75:36:72:f8:cb: 33:18:b0:f8:5f:6d:0e:4e:72:a6:1d:3b:24:83:86: 20:72:4c:00:ea:bb:d5:a5:33:58:31:d5:0f:fa:2d: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.160.0/23 Signature Algorithm: sha256WithRSAEncryption 61:06:5e:da:a9:26:d6:50:25:48:99:41:59:45:29:9a:f0:7b: d5:0e:ed:df:c9:94:03:47:c1:30:2b:54:90:82:81:e6:d2:64: 68:de:8f:08:11:b0:79:c9:5f:cf:81:ea:b6:3f:61:64:f1:f1: f1:14:39:f7:7d:5e:4c:b5:d0:bd:61:f8:8b:73:55:ab:fe:c5: d2:5f:3f:a8:82:eb:59:ad:98:7e:75:3f:e5:8c:a1:d1:3d:8c: e7:db:60:d7:0d:2d:1d:0f:9c:5d:69:31:7a:eb:d4:40:a6:db: aa:2a:2c:10:ec:28:48:a5:f4:b9:34:2d:32:f0:7d:0b:c5:82: 50:c7:b4:50:e1:6b:02:ab:ac:52:c0:8a:08:83:38:38:01:5c: 81:63:66:22:42:96:30:c0:83:b2:1e:8e:0b:f7:82:00:88:56: e2:6c:39:e1:b4:85:b0:2c:54:37:da:19:b8:53:f3:fb:a6:84: 55:5e:62:1f:c0:61:59:0d:2f:62:64:27:44:7f:52:50:02:3f: 73:42:26:58:35:46:0f:27:05:66:24:14:99:18:e7:94:33:23: 4e:52:64:b5:1a:09:a7:1e:de:5c:8c:47:0d:6f:0f:22:9f:2e: ab:da:c7:ba:ba:bc:ac:aa:e3:7a:d8:0d:1e:eb:7b:2e:91:21: b0:e5:be:43 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbDl1VPJ+KJHUTQTE8X1+om2cAxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTE1MzUyNloX DTI0MDcyOTE1NDAyNlowMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNB MTBGOUQ1N0FFOTMxRjlBOUZDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0PJj+DRqAB43NXPaNrWH8hykZVOOoKtOmZJ/XbK/Zc6meeT8yrBNsFrolJ Wu5CGDPgzA7DRZqJOWQ1VRvqDzG0KWnm0/dybRsectKKEuJ7pkC9kcW5u5ZElITK jT6IyXlxsHT6pYUrUbHkS0TPi3mFYzo19hbjRAFP+oiZok5ZNl1aoHrHj0p5UYZY i4HYmEAFplbTnaGAzEY+JN9L3stLyN7qgncC/lZcwi+eNMR/yIKBBbFvHVDtzmU6 8uj42pgmxI4NmRiD6sqyq8w4ULSW2fUOdvFoy5NyVHU2cvjLMxiw+F9tDk5yph07 JIOGIHJMAOq71aUzWDHVD/otDhkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMknaf1dl6RncOOhD51XrpMfmp/CMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZDc3ODQw LTYwOGUtNDQ5YS1iMjJmLTM2YTZlMjUyZmIyMy8wL0M5Mjc2OUZENUQ5N0E0Njc3 MEUzQTEwRjlENTdBRTkzMUY5QTlGQzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoKAwDQYJKoZIhvcNAQELBQADggEBAGEGXtqpJtZQJUiZQVlFKZrwe9UO7d/J lANHwTArVJCCgebSZGjejwgRsHnJX8+B6rY/YWTx8fEUOfd9Xky10L1h+ItzVav+ xdJfP6iC61mtmH51P+WModE9jOfbYNcNLR0PnF1pMXrr1ECm26oqLBDsKEil9Lk0 LTLwfQvFglDHtFDhawKrrFLAigiDODgBXIFjZiJCljDAg7Iejgv3ggCIVuJsOeG0 hbAsVDfaGbhT8/umhFVeYh/AYVkNL2JkJ0R/UlACP3NCJlg1Rg8nBWYkFJkY55Qz I05SZLUaCace3lyMRw1vDyKfLqvax7q6vKyq43rYDR7rey6RIbDlvkM= -----END CERTIFICATE-----Generated at Wed May 8 21:02:27 2024 by rpki-client on console-fra.rpki-client.org