$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer (raw, json) Hash identifier: 0sL04mknpe6DvuKjoi7CzzL/guzykhDih0cINN0QWoU= Subject key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 727957B48432B8F5C73587BE9CA1FC2633618A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft caRepository: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 06 Feb 2024 07:55:39 +0000 Certificate not after: Tue 04 Feb 2025 08:00:39 +0000 Subordinate resources: IP: 103.147.10.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:79:57:b4:84:32:b8:f5:c7:35:87:be:9c:a1:fc:26:33:61:8a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 07:55:39 2024 GMT Not After : Feb 4 08:00:39 2025 GMT Subject: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:eb:16:5d:e7:93:58:35:b4:07:85:19:f8: 30:81:81:18:20:e1:e2:9f:df:13:d8:98:bb:66:6f: ac:83:19:cf:1d:c6:bd:f6:59:84:68:52:ba:54:4b: 96:77:59:d5:cc:89:98:f5:03:43:66:1d:2e:d3:f3: 62:58:ad:97:e1:46:ce:c3:1d:3d:34:14:a5:9a:30: 19:8b:75:fb:88:18:2e:d5:84:a7:08:91:e8:08:21: 21:fc:b5:22:8a:ad:0e:12:45:96:8c:28:d6:41:23: 6d:6e:41:22:cd:ea:c6:4f:10:4e:49:56:6e:1e:3f: 1d:e5:44:4a:d2:1d:21:4f:59:c1:01:7d:6d:95:51: 1c:5b:36:de:b8:7b:9d:4b:97:f2:de:16:ab:1b:50: fd:9d:9d:b5:32:93:a5:94:34:8c:f6:e9:ce:9f:f6: 80:39:eb:40:16:cd:3b:b9:3c:ad:c5:dd:c5:a3:d6: a9:87:fd:9d:29:35:5c:6d:1c:5c:96:31:27:7b:c4: 84:a0:16:af:5d:a1:a4:56:5b:99:4e:c8:7a:bf:1a: 0b:94:a0:16:ef:aa:12:7b:57:d8:8f:ec:82:1b:79: d3:01:6e:3c:39:ff:b5:55:42:d3:cf:9e:9b:20:05: cb:83:d3:3a:2e:36:10:4f:80:a0:98:22:14:16:8a: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.10.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:5f:5f:16:54:6c:90:97:d4:97:e2:7a:a0:da:bb:11:a0:79: ee:a7:91:7b:4c:e4:32:7c:0d:a2:a9:e3:f6:ba:24:d0:79:54: 64:33:57:c0:8d:97:2a:86:2e:df:5d:bf:d5:27:3b:05:0c:bc: ef:cc:63:2b:57:fe:40:a4:e5:42:c5:77:88:d0:c9:11:48:66: 91:81:19:84:08:96:0b:23:7a:e8:03:0f:0f:80:5a:5b:9d:be: 7c:f5:97:f6:50:cb:f4:1a:ca:5c:27:b0:93:e9:3f:be:00:ba: 32:28:9f:6c:ec:47:44:4d:bc:28:09:5a:63:0a:c3:b0:47:e5: ca:23:3d:10:ae:93:84:86:28:b3:74:b1:e5:f4:04:3b:04:bc: 0a:10:1c:d9:54:d6:a9:41:3c:b1:f4:74:6f:26:c7:57:5b:99: aa:66:1c:bb:b1:b2:af:a5:ab:54:f9:15:77:8e:2a:78:49:f6: 62:76:20:15:39:23:a8:54:55:b8:66:7d:a2:95:e5:15:59:5a: 8f:25:ab:98:6e:0d:e4:ee:a7:33:41:07:3b:5a:73:3e:d0:5d: e3:19:63:94:96:71:fe:a6:70:83:ae:a9:62:f8:8d:ed:77:63: 54:e1:d1:a5:95:c0:d3:b6:93:01:f1:70:b4:3b:88:2c:14:d7: 91:16:00:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcnlXtIQyuPXHNYe+nKH8JjNhinwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNjA3NTUzOVoX DTI1MDIwNDA4MDAzOVowMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNF MUNBMzhBM0JGOTA5ODc5QzA1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUj6xZd55NYNbQHhRn4MIGBGCDh4p/fE9iYu2ZvrIMZzx3GvfZZhGhSulRL lndZ1cyJmPUDQ2YdLtPzYlitl+FGzsMdPTQUpZowGYt1+4gYLtWEpwiR6AghIfy1 IoqtDhJFlowo1kEjbW5BIs3qxk8QTklWbh4/HeVEStIdIU9ZwQF9bZVRHFs23rh7 nUuX8t4WqxtQ/Z2dtTKTpZQ0jPbpzp/2gDnrQBbNO7k8rcXdxaPWqYf9nSk1XG0c XJYxJ3vEhKAWr12hpFZbmU7Ier8aC5SgFu+qEntX2I/sght50wFuPDn/tVVC08+e myAFy4PTOi42EE+AoJgiFBaKPQ8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM8jYukhabx8W5Phyjijv5CYecBaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1NjJjZjNk LWQ5ZjctNDhhOS05MTU5LTlmMGQ3YTQ3Njc5MC8wL0NGMjM2MkU5MjE2OUJDN0M1 QjkzRTFDQTM4QTNCRjkwOTg3OUMwNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkwowDQYJKoZIhvcNAQELBQADggEBAH5fXxZUbJCX1JfieqDauxGgee6nkXtM 5DJ8DaKp4/a6JNB5VGQzV8CNlyqGLt9dv9UnOwUMvO/MYytX/kCk5ULFd4jQyRFI ZpGBGYQIlgsjeugDDw+AWludvnz1l/ZQy/QaylwnsJPpP74AujIon2zsR0RNvCgJ WmMKw7BH5cojPRCuk4SGKLN0seX0BDsEvAoQHNlU1qlBPLH0dG8mx1dbmapmHLux sq+lq1T5FXeOKnhJ9mJ2IBU5I6hUVbhmfaKV5RVZWo8lq5huDeTupzNBBztacz7Q XeMZY5SWcf6mcIOuqWL4je13Y1Th0aWVwNO2kwHxcLQ7iCwU15EWAOo= -----END CERTIFICATE-----Generated at Wed May 8 18:12:21 2024 by rpki-client on console-fra.rpki-client.org