$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer (raw, json) Hash identifier: wl5OYU/jrMp3vd+Na0rK9Sj95P7kvfxY9s0wV1qFzGo= Subject key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D3EBADB0FF41CB87943F941EDAB15C4BCF3C28A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft caRepository: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Aug 2023 11:51:49 +0000 Certificate not after: Thu 22 Aug 2024 11:56:49 +0000 Subordinate resources: IP: 103.211.4.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3e:ba:db:0f:f4:1c:b8:79:43:f9:41:ed:ab:15:c4:bc:f3:c2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 11:51:49 2023 GMT Not After : Aug 22 11:56:49 2024 GMT Subject: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:aa:26:a3:5e:ff:ec:6a:91:41:7a:b9:aa: 4e:3f:9d:70:63:9a:ea:1c:11:c1:ce:0e:51:c9:89: a3:ee:a7:7e:27:88:a3:b5:eb:cc:e4:e0:e1:f6:53: 69:e7:80:7d:3f:72:37:7a:10:7f:17:e8:3f:78:67: 33:91:d8:f5:0f:57:2c:ed:8b:d8:44:72:99:ea:6e: 88:16:3b:23:d8:ee:0a:61:fa:74:a3:8f:bd:21:15: f8:df:db:18:59:19:cd:d9:68:4c:a2:9f:d5:04:fb: ea:d7:dc:61:86:18:a7:70:97:04:62:ff:d2:9a:04: 54:32:d4:b3:03:04:80:9d:f4:af:e9:ec:9e:d2:ed: 2f:fc:8f:6d:18:ad:5d:f8:d6:87:ce:05:da:65:09: 39:0e:9a:ce:6a:bb:de:42:e4:2b:f2:d2:f2:0a:10: 62:0b:46:5b:b2:59:b7:f8:9a:86:5a:86:58:d0:15: c1:4a:9f:71:77:e2:ef:d8:5b:08:ee:ac:c1:b6:ee: 67:ea:b2:69:d3:46:0f:38:f5:dd:bc:95:80:3b:f9: 02:30:67:0e:c8:65:e9:43:50:cc:05:82:26:ab:29: 82:b2:75:6a:be:3b:cc:d1:83:93:c5:ea:74:28:8a: 92:d6:52:c3:7a:da:21:37:ea:58:b6:1e:d2:a5:d3: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:6d:a9:e0:6f:b6:6b:c2:86:33:32:39:24:10:96:58:f9:a8: d2:a4:f1:b2:4f:25:3e:c4:77:24:c8:b6:15:c9:b0:dc:c9:52: f6:8e:11:66:8a:90:e6:5f:7e:d4:7b:21:e8:9d:89:15:1f:ba: ef:5b:aa:d0:c7:e2:6c:57:97:88:4a:16:8c:a5:bf:d5:4f:66: a2:98:2f:74:5b:f0:5b:a6:c0:bc:5c:89:ca:f5:5f:6f:22:65: 46:a7:8c:75:89:c2:2b:41:83:f2:44:7c:00:69:29:a4:ed:4f: 63:e1:14:c7:18:47:dc:e0:b7:4c:0e:14:5f:27:38:4c:6c:48: a2:d3:7a:de:90:f9:4e:f4:be:14:cb:8e:47:be:0c:9a:f7:39: a0:8b:59:c6:d1:66:e3:e2:8b:45:8b:e1:e7:ae:ea:f3:7b:31: 1c:c3:fb:7d:11:79:b1:1b:35:c4:4a:a5:30:0b:2a:47:d9:be: 4c:70:32:13:e1:ac:f3:ac:17:e3:5e:24:a9:8c:18:e8:5f:89: 3b:03:7e:13:0e:65:e7:d7:64:f1:fe:42:e9:6a:f8:c1:55:c2: 75:e4:a8:6f:32:2a:93:55:eb:5c:8f:34:51:70:48:59:b8:2e: f7:ab:cb:e3:94:02:96:6f:74:6f:f8:37:b8:22:a5:bc:c6:76: a5:32:08:59 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHT662w/0HLh5Q/lB7asVxLzzwoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNDExNTE0OVoX DTI0MDgyMjExNTY0OVowMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEz MkYxQUU2QzE5MzRCMDIzNUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALunqiajXv/sapFBermqTj+dcGOa6hwRwc4OUcmJo+6nfieIo7XrzOTg4fZT aeeAfT9yN3oQfxfoP3hnM5HY9Q9XLO2L2ERymepuiBY7I9juCmH6dKOPvSEV+N/b GFkZzdloTKKf1QT76tfcYYYYp3CXBGL/0poEVDLUswMEgJ30r+nsntLtL/yPbRit XfjWh84F2mUJOQ6azmq73kLkK/LS8goQYgtGW7JZt/iahlqGWNAVwUqfcXfi79hb CO6swbbuZ+qyadNGDzj13byVgDv5AjBnDshl6UNQzAWCJqspgrJ1ar47zNGDk8Xq dCiKktZSw3raITfqWLYe0qXTctMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNBDwqKzleanvIoy8a5sGTSwI1+nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzYWQzNzU3 LTkzYTAtNGIzMy05MTI4LTI0YWE2MTMwNGVmZi8wL0QwNDNDMkEyQjM5NUU2QTdC QzhBMzJGMUFFNkMxOTM0QjAyMzVGQTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0wQwDQYJKoZIhvcNAQELBQADggEBAGttqeBvtmvChjMyOSQQllj5qNKk8bJP JT7EdyTIthXJsNzJUvaOEWaKkOZfftR7IeidiRUfuu9bqtDH4mxXl4hKFoylv9VP ZqKYL3Rb8FumwLxcicr1X28iZUanjHWJwitBg/JEfABpKaTtT2PhFMcYR9zgt0wO FF8nOExsSKLTet6Q+U70vhTLjke+DJr3OaCLWcbRZuPii0WL4eeu6vN7MRzD+30R ebEbNcRKpTALKkfZvkxwMhPhrPOsF+NeJKmMGOhfiTsDfhMOZefXZPH+Qulq+MFV wnXkqG8yKpNV61yPNFFwSFm4Lvery+OUApZvdG/4N7gipbzGdqUyCFk= -----END CERTIFICATE-----Generated at Wed May 8 04:38:01 2024 by rpki-client on console-fra.rpki-client.org