$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer (raw, json) Hash identifier: SvffPHnsrpL8pFEi9Rpa8PoqNkSgb7RVq0r4KMsgd3E= Subject key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2BA186BF507EFAC5171112AA3FBF06A7D1F00705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft caRepository: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Dec 2023 20:04:17 +0000 Certificate not after: Sat 07 Dec 2024 20:09:17 +0000 Subordinate resources: IP: 103.108.240.0/22 IP: 2001:df4:2300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a1:86:bf:50:7e:fa:c5:17:11:12:aa:3f:bf:06:a7:d1:f0:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 20:04:17 2023 GMT Not After : Dec 7 20:09:17 2024 GMT Subject: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:96:e8:8a:b6:e5:23:51:dd:43:d8:01:01: 0d:57:6d:4f:35:29:60:13:a6:a7:a2:e0:c9:44:03: db:94:45:84:e6:af:47:5d:1e:9f:13:c4:c5:ef:9a: 05:d3:ab:89:ad:cb:ff:92:a0:dc:f4:ca:34:d7:3c: 1f:93:01:f6:a5:96:4b:e6:10:d9:f4:5b:c9:41:88: 19:8f:7d:9c:15:d8:49:02:a3:7f:a5:72:18:30:ea: b6:57:80:31:c5:26:44:69:53:09:c6:42:05:19:f6: 3a:a7:70:79:6c:ef:c8:8c:b6:3b:0b:f4:fb:13:81: 1c:ab:54:81:76:c9:6d:86:3f:f5:b6:52:64:54:f1: 4a:c0:66:3c:d2:5c:77:44:fe:f9:43:07:72:9c:d1: f4:a4:14:87:b9:f9:aa:f6:ad:72:e8:99:65:d8:63: 49:5f:bf:54:b4:d2:9a:db:6c:e9:7c:e5:af:ae:4f: 26:01:83:fe:bf:68:14:c4:19:20:2a:8f:8e:d8:03: c5:f3:2d:bd:08:35:e1:0f:4c:90:ac:e9:c3:7d:c1: 75:60:de:e6:43:3a:ef:4c:8d:79:2d:c8:db:c4:56: 9c:c4:b2:9d:52:9a:5d:a0:56:a4:db:2e:2c:cc:7f: 3f:aa:32:06:3a:35:64:4d:d4:df:0f:86:07:ce:06: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.240.0/22 IPv6: 2001:df4:2300::/48 Signature Algorithm: sha256WithRSAEncryption 69:30:34:a5:6f:73:2d:a7:ec:c9:58:cd:a5:13:9a:99:4f:77: 31:01:50:8b:3a:37:82:29:ca:59:e4:6e:93:26:ed:ae:ed:44: cc:16:c8:b1:77:60:19:b3:a3:5f:dc:a8:9a:fc:01:d8:1e:b0: eb:70:55:47:6b:17:1a:dc:8a:44:f6:3c:d2:3b:8e:b6:3b:c4: d4:93:64:2a:9f:6c:94:a8:12:7c:6a:81:b6:8f:1c:7b:0f:b6: 27:0a:eb:38:00:ad:b8:d5:7c:8c:03:f2:9c:d7:6e:ee:7e:17: 0b:39:ab:c8:67:36:5b:84:fd:72:76:24:c5:c5:f7:f2:d1:9e: 5b:9d:f7:37:66:2d:4b:1e:44:78:e7:d0:e4:00:34:cd:e0:09: b3:a8:6e:03:7d:89:40:9e:68:c1:40:63:a3:6f:5e:a0:9e:a5: d5:96:53:92:a9:6d:01:7c:4c:f1:d4:5e:a7:52:94:b4:54:cd: a0:39:1a:d8:bc:9a:40:a2:c2:43:ac:00:f9:c6:a9:91:a9:b1: ab:d3:42:9b:bc:0f:a8:95:ad:e1:8d:7e:50:7f:40:d5:18:08: 36:17:62:30:1a:a7:62:f4:0c:17:29:86:8d:41:c3:e8:58:6e: 12:3b:05:11:26:27:bb:b6:1b:3a:5a:41:02:54:65:75:da:e1: be:c9:57:d5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUK6GGv1B++sUXERKqP78Gp9HwBwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwOTIwMDQxN1oX DTI0MTIwNzIwMDkxN1owMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhC QzlCRjcyNzI0QUU5NDc5OUFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHmluiKtuUjUd1D2AEBDVdtTzUpYBOmp6LgyUQD25RFhOavR10enxPExe+a BdOria3L/5Kg3PTKNNc8H5MB9qWWS+YQ2fRbyUGIGY99nBXYSQKjf6VyGDDqtleA McUmRGlTCcZCBRn2OqdweWzvyIy2Owv0+xOBHKtUgXbJbYY/9bZSZFTxSsBmPNJc d0T++UMHcpzR9KQUh7n5qvatcuiZZdhjSV+/VLTSmtts6Xzlr65PJgGD/r9oFMQZ ICqPjtgDxfMtvQg14Q9MkKzpw33BdWDe5kM670yNeS3I28RWnMSynVKaXaBWpNsu LMx/P6oyBjo1ZE3U3w+GB84GIYcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMpHum2XgGEa6mi8m/cnJK6UeZqmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViODFiY2Vh LWI3MGYtNDM3NC05MjRiLWI2Yzc3ODEwOTgzNy8wL0NBNDdCQTZEOTc4MDYxMUFF QTY4QkM5QkY3MjcyNEFFOTQ3OTlBQTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnbPAwDwQCAAIwCQMHACABDfQjADANBgkqhkiG9w0BAQsFAAOCAQEAaTA0pW9z LafsyVjNpROamU93MQFQizo3ginKWeRukybtru1EzBbIsXdgGbOjX9yomvwB2B6w 63BVR2sXGtyKRPY80juOtjvE1JNkKp9slKgSfGqBto8cew+2JwrrOACtuNV8jAPy nNdu7n4XCzmryGc2W4T9cnYkxcX38tGeW533N2YtSx5EeOfQ5AA0zeAJs6huA32J QJ5owUBjo29eoJ6l1ZZTkqltAXxM8dRep1KUtFTNoDka2LyaQKLCQ6wA+capkamx q9NCm7wPqJWt4Y1+UH9A1RgINhdiMBqnYvQMFymGjUHD6FhuEjsFESYnu7YbOlpB AlRlddrhvslX1Q== -----END CERTIFICATE-----Generated at Wed May 8 05:33:23 2024 by rpki-client on console-ams.rpki-client.org