$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer (raw, json) Hash identifier: 59SqgbHMuDzshiT7NWD1J2g5w7QJshXKFuELga2Md8w= Subject key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 750D9BC61A3D559A40847649C7618156CB2A7551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft caRepository: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Jul 2024 00:13:23 +0000 Certificate not after: Fri 25 Jul 2025 00:18:23 +0000 Subordinate resources: IP: 103.211.4.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0d:9b:c6:1a:3d:55:9a:40:84:76:49:c7:61:81:56:cb:2a:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 26 00:13:23 2024 GMT Not After : Jul 25 00:18:23 2025 GMT Subject: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:aa:26:a3:5e:ff:ec:6a:91:41:7a:b9:aa: 4e:3f:9d:70:63:9a:ea:1c:11:c1:ce:0e:51:c9:89: a3:ee:a7:7e:27:88:a3:b5:eb:cc:e4:e0:e1:f6:53: 69:e7:80:7d:3f:72:37:7a:10:7f:17:e8:3f:78:67: 33:91:d8:f5:0f:57:2c:ed:8b:d8:44:72:99:ea:6e: 88:16:3b:23:d8:ee:0a:61:fa:74:a3:8f:bd:21:15: f8:df:db:18:59:19:cd:d9:68:4c:a2:9f:d5:04:fb: ea:d7:dc:61:86:18:a7:70:97:04:62:ff:d2:9a:04: 54:32:d4:b3:03:04:80:9d:f4:af:e9:ec:9e:d2:ed: 2f:fc:8f:6d:18:ad:5d:f8:d6:87:ce:05:da:65:09: 39:0e:9a:ce:6a:bb:de:42:e4:2b:f2:d2:f2:0a:10: 62:0b:46:5b:b2:59:b7:f8:9a:86:5a:86:58:d0:15: c1:4a:9f:71:77:e2:ef:d8:5b:08:ee:ac:c1:b6:ee: 67:ea:b2:69:d3:46:0f:38:f5:dd:bc:95:80:3b:f9: 02:30:67:0e:c8:65:e9:43:50:cc:05:82:26:ab:29: 82:b2:75:6a:be:3b:cc:d1:83:93:c5:ea:74:28:8a: 92:d6:52:c3:7a:da:21:37:ea:58:b6:1e:d2:a5:d3: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.4.0/23 Signature Algorithm: sha256WithRSAEncryption 43:c3:c3:80:c4:84:51:57:60:b4:43:77:58:7d:10:67:ae:32: ee:ff:e2:66:f0:8f:ae:93:d7:76:72:4f:e0:4d:08:9a:31:5f: 47:4a:45:ad:70:7f:7a:ee:45:60:4c:54:7b:72:aa:fd:b7:d8: f8:69:90:8e:fe:7b:d1:80:57:ed:00:fc:a2:5d:b5:44:c2:8a: 16:7b:57:84:cb:51:98:ac:23:7c:c7:b6:6d:91:9c:9a:1d:87: ab:f1:23:b6:48:eb:d7:85:e6:7d:02:05:3e:3c:2f:4d:03:1a: 27:90:b7:5d:47:c6:1a:80:52:97:89:06:c8:e5:62:2c:60:51: dd:63:32:81:ba:e9:cb:22:c9:3a:55:3d:1d:55:21:2d:43:88: 6d:63:ff:5d:30:11:2d:aa:68:35:52:6f:c2:39:9f:47:6a:aa: 24:3a:2c:af:e9:e9:65:b8:98:91:7e:e0:fb:2a:ef:6b:5a:73: 5b:f7:bc:39:6b:d5:a3:0c:d8:51:09:0d:15:65:d3:3d:26:1c: 67:c5:88:e7:ab:c0:1c:b7:73:13:d3:35:23:9b:14:e0:a0:de: 8b:02:dc:d1:d3:51:7a:d0:8d:7d:bd:08:73:26:91:4f:da:2a: 1e:e4:3b:e3:d8:08:30:2e:88:3b:89:c9:0a:f0:35:8a:b5:6e: 68:e4:d1:82 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdQ2bxho9VZpAhHZJx2GBVssqdVEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNjAwMTMyM1oX DTI1MDcyNTAwMTgyM1owMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEz MkYxQUU2QzE5MzRCMDIzNUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALunqiajXv/sapFBermqTj+dcGOa6hwRwc4OUcmJo+6nfieIo7XrzOTg4fZT aeeAfT9yN3oQfxfoP3hnM5HY9Q9XLO2L2ERymepuiBY7I9juCmH6dKOPvSEV+N/b GFkZzdloTKKf1QT76tfcYYYYp3CXBGL/0poEVDLUswMEgJ30r+nsntLtL/yPbRit XfjWh84F2mUJOQ6azmq73kLkK/LS8goQYgtGW7JZt/iahlqGWNAVwUqfcXfi79hb CO6swbbuZ+qyadNGDzj13byVgDv5AjBnDshl6UNQzAWCJqspgrJ1ar47zNGDk8Xq dCiKktZSw3raITfqWLYe0qXTctMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNBDwqKzleanvIoy8a5sGTSwI1+nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzYWQzNzU3 LTkzYTAtNGIzMy05MTI4LTI0YWE2MTMwNGVmZi8wL0QwNDNDMkEyQjM5NUU2QTdC QzhBMzJGMUFFNkMxOTM0QjAyMzVGQTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0wQwDQYJKoZIhvcNAQELBQADggEBAEPDw4DEhFFXYLRDd1h9EGeuMu7/4mbw j66T13ZyT+BNCJoxX0dKRa1wf3ruRWBMVHtyqv232PhpkI7+e9GAV+0A/KJdtUTC ihZ7V4TLUZisI3zHtm2RnJodh6vxI7ZI69eF5n0CBT48L00DGieQt11HxhqAUpeJ BsjlYixgUd1jMoG66csiyTpVPR1VIS1DiG1j/10wES2qaDVSb8I5n0dqqiQ6LK/p 6WW4mJF+4Psq72tac1v3vDlr1aMM2FEJDRVl0z0mHGfFiOerwBy3cxPTNSObFOCg 3osC3NHTUXrQjX29CHMmkU/aKh7kO+PYCDAuiDuJyQrwNYq1bmjk0YI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org