$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer (raw, json) Hash identifier: cPbhEIdtHtFo9VhrQlNYDqB16ioO9KvVa8qWax6Yhqs= Subject key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45D3E54171FFD5FE2BB49FCC652648EDFF26A046 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft caRepository: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 06 Nov 2023 15:59:58 +0000 Certificate not after: Mon 04 Nov 2024 16:04:58 +0000 Subordinate resources: IP: 103.35.154.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d3:e5:41:71:ff:d5:fe:2b:b4:9f:cc:65:26:48:ed:ff:26:a0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 15:59:58 2023 GMT Not After : Nov 4 16:04:58 2024 GMT Subject: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:28:cd:65:11:dd:21:68:4a:1f:fe:6c:51: 93:a9:64:b7:f0:ad:eb:ae:80:23:3f:e4:d9:14:55: 2f:99:72:35:fc:a1:1a:4b:d4:44:3e:c7:ed:cf:b9: 62:e7:e2:4d:f2:ac:b7:56:61:99:0a:87:20:95:9a: 4b:43:84:ca:52:7b:5c:32:fc:eb:1a:1a:b9:f4:88: 3a:ee:7b:11:4c:e1:4c:0f:97:1c:f1:63:fb:5f:c7: ea:ad:a6:f3:7e:b2:0a:9e:e4:94:23:00:27:24:fe: 6e:a2:57:d8:8e:a4:93:2a:cc:32:cb:e4:28:ec:86: a8:0b:4f:90:1c:ae:5a:09:c2:d9:fb:dd:d6:f8:c1: 69:95:17:9e:e3:03:61:a4:e7:64:1f:bc:49:f7:39: 29:51:12:6c:fa:3d:9a:fc:c6:2d:5d:5f:b2:68:df: 8b:9c:dc:c7:bd:a2:95:62:f4:71:95:d8:2c:41:36: df:6d:50:29:2f:2c:0e:f0:71:d6:84:36:c2:9e:61: cc:9b:9b:8b:28:72:0d:9a:04:16:e9:f6:3f:0d:39: 6a:50:4b:d2:00:db:62:60:60:89:69:28:75:7b:f5: 32:b9:bf:7e:78:0c:4f:fb:e1:54:d9:bf:6c:ec:ba: 3f:e2:b4:8f:2c:f7:02:48:4c:c1:c2:eb:8a:6e:75: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.154.0/23 Signature Algorithm: sha256WithRSAEncryption 91:0f:6f:84:19:7b:ea:12:b7:eb:45:31:41:6a:79:ef:bc:3d: d1:8a:0d:34:f6:52:f2:a5:e9:b7:fe:f0:55:a7:00:37:8b:c6: f7:ff:29:e6:3e:19:32:66:c2:58:b9:73:b1:0f:93:60:24:77: 92:76:ec:6b:c2:9e:75:5f:8a:3f:4f:7b:8c:b9:fd:cd:05:91: 27:d3:4d:fd:9f:43:87:09:4c:af:81:5e:32:98:f7:91:8e:c1: aa:2e:8c:ab:64:c4:1e:61:03:d2:10:f0:0d:b1:e1:9c:f9:37: cd:f7:1d:12:41:6b:5e:32:e4:9e:14:94:af:c5:b9:09:bf:02: 14:b2:c5:83:8f:e2:29:5f:a7:c3:f5:ad:57:29:3a:8e:26:cb: 70:ba:77:b1:be:90:a6:84:ff:3e:84:30:77:cf:5d:f3:08:ee: cd:fa:f5:d9:b2:b3:27:83:78:12:05:ca:5e:60:cf:b5:54:f7: d7:b3:83:41:01:63:e9:5d:4e:ea:f4:ee:f0:b5:65:c5:20:dc: 43:88:aa:09:08:26:a2:fe:d0:e3:6a:4e:f6:18:c6:50:83:72: 2e:b1:cd:87:04:9a:66:44:75:be:00:58:96:69:cb:25:2e:7e: df:af:ef:46:d0:f2:cd:0a:35:b6:cd:ab:27:39:71:d8:e2:0f: d3:a5:9f:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURdPlQXH/1f4rtJ/MZSZI7f8moEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNjE1NTk1OFoX DTI0MTEwNDE2MDQ1OFowMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQy RjYzQTdFMDg4MEIzNUY2ODM3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKP5KM1lEd0haEof/mxRk6lkt/Ct666AIz/k2RRVL5lyNfyhGkvURD7H7c+5 YufiTfKst1ZhmQqHIJWaS0OEylJ7XDL86xoaufSIOu57EUzhTA+XHPFj+1/H6q2m 836yCp7klCMAJyT+bqJX2I6kkyrMMsvkKOyGqAtPkByuWgnC2fvd1vjBaZUXnuMD YaTnZB+8Sfc5KVESbPo9mvzGLV1fsmjfi5zcx72ilWL0cZXYLEE2321QKS8sDvBx 1oQ2wp5hzJubiyhyDZoEFun2Pw05alBL0gDbYmBgiWkodXv1Mrm/fngMT/vhVNm/ bOy6P+K0jyz3AkhMwcLrim51mwECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNDR3ZIlMh4dTR0vY6fgiAs19oN+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyOTMyOWNm LTMxMjMtNGNlMC1hNjg3LTBhMDNjZDc1ODczOC8wL0QwRDFERDkyMjUzMjFFMUQ0 RDFEMkY2M0E3RTA4ODBCMzVGNjgzN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnI5owDQYJKoZIhvcNAQELBQADggEBAJEPb4QZe+oSt+tFMUFqee+8PdGKDTT2 UvKl6bf+8FWnADeLxvf/KeY+GTJmwli5c7EPk2Akd5J27GvCnnVfij9Pe4y5/c0F kSfTTf2fQ4cJTK+BXjKY95GOwaoujKtkxB5hA9IQ8A2x4Zz5N833HRJBa14y5J4U lK/FuQm/AhSyxYOP4ilfp8P1rVcpOo4my3C6d7G+kKaE/z6EMHfPXfMI7s369dmy syeDeBIFyl5gz7VU99ezg0EBY+ldTur07vC1ZcUg3EOIqgkIJqL+0ONqTvYYxlCD ci6xzYcEmmZEdb4AWJZpyyUuft+v70bQ8s0KNbbNqyc5cdjiD9Olny4= -----END CERTIFICATE-----Generated at Wed May 8 22:46:45 2024 by rpki-client on console-ams.rpki-client.org