$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer (raw, json) Hash identifier: CXVs9wT1tLLO0LxviDxRY5kw+lxbcXIB0RjX1pU/O6Y= Subject key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E4B940EE5079A4A7C821731CFF63E979AF9225A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft caRepository: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 May 2024 05:35:56 +0000 Certificate not after: Thu 15 May 2025 05:40:56 +0000 Subordinate resources: IP: 103.161.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4b:94:0e:e5:07:9a:4a:7c:82:17:31:cf:f6:3e:97:9a:f9:22:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 16 05:35:56 2024 GMT Not After : May 15 05:40:56 2025 GMT Subject: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:9b:fa:a6:af:f0:85:9a:be:14:6a:2c:d8: c2:45:f3:3b:70:cd:71:8e:ca:d8:57:f0:5d:65:33: ef:60:e3:60:d7:ec:4a:43:5e:c0:1d:bd:70:e7:82: 03:2b:96:44:64:c5:99:ac:b2:5d:5d:99:37:78:ac: ab:05:b9:f7:b8:e2:d1:d6:75:ac:a3:69:c8:11:1e: 9e:b8:4a:cf:f5:8c:a8:55:00:09:66:72:98:98:9f: 97:10:d9:9c:b9:5e:af:4c:7f:c7:45:6b:a9:9a:24: 85:2e:b0:9b:a6:77:4e:b7:fd:0b:8f:47:ca:f6:5f: 90:db:05:c9:67:02:00:05:ad:87:61:b7:2d:54:24: 09:c0:ca:8a:36:97:22:39:a8:83:d4:da:b2:3a:e9: 3a:04:fd:86:fa:63:20:af:cf:cf:60:64:9c:03:ca: e9:6b:c5:6f:11:a9:f0:82:d8:a0:56:27:d1:4b:f7: 6d:ec:55:37:4a:e9:05:3f:89:cc:19:e7:0c:6b:22: 34:df:bd:ca:3b:21:37:5f:43:2e:b1:28:97:38:28: 28:54:f0:8f:46:02:90:e7:44:15:46:f4:1c:ff:eb: 08:87:0b:79:85:d6:41:9c:42:09:25:e4:6a:30:7a: 0a:81:99:21:27:53:90:b6:af:68:ce:4b:00:7c:e4: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:2e:c9:36:33:0a:de:e4:f8:9d:77:46:32:e3:18:94:ef:54: 04:cf:7d:ce:58:36:63:e2:54:98:d4:b6:55:be:56:9c:15:e8: ee:4b:59:f4:f9:13:cf:53:bf:7a:9d:b4:17:13:7c:bb:ad:2c: 4d:96:50:e7:ed:0e:a8:b6:4b:90:c3:83:aa:74:97:f0:cb:58: 62:fc:7c:a0:b1:87:bc:4a:43:fa:30:5a:e6:25:b7:f1:98:03: 66:7f:01:1c:16:7d:31:71:96:33:fe:16:21:9a:64:4b:bd:9e: b5:3e:c5:30:a9:00:aa:57:7b:8c:9f:ae:a7:d2:6e:c4:6b:27: 34:45:3c:43:d9:86:45:51:80:06:53:61:32:47:ea:be:01:95: ca:f6:81:30:70:33:df:7a:9b:6d:44:fb:ad:ab:cf:1a:19:de: c2:b1:44:63:22:2e:68:b4:4e:99:83:e0:02:91:15:a8:49:c4: 71:46:50:0d:ea:e1:56:be:5f:ed:db:b8:06:25:85:88:ad:b3: 31:9a:0a:d1:ce:53:e6:7f:5d:b7:2d:ff:d2:01:fe:b6:e2:43: 0a:66:9e:6e:bd:bf:10:99:54:5b:57:c5:49:3b:97:4d:3c:f5: 03:a7:42:1d:ac:3d:1a:8c:8f:35:51:bb:5d:6f:c9:97:86:34: d0:b4:d3:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDkuUDuUHmkp8ghcxz/Y+l5r5IlowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxNjA1MzU1NloX DTI1MDUxNTA1NDA1NlowMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQy QTkzNDMzRkEyMzlDOTAzRUFDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0Ym/qmr/CFmr4UaizYwkXzO3DNcY7K2FfwXWUz72DjYNfsSkNewB29cOeC AyuWRGTFmayyXV2ZN3isqwW597ji0dZ1rKNpyBEenrhKz/WMqFUACWZymJiflxDZ nLler0x/x0VrqZokhS6wm6Z3Trf9C49HyvZfkNsFyWcCAAWth2G3LVQkCcDKijaX Ijmog9TasjrpOgT9hvpjIK/Pz2BknAPK6WvFbxGp8ILYoFYn0Uv3bexVN0rpBT+J zBnnDGsiNN+9yjshN19DLrEolzgoKFTwj0YCkOdEFUb0HP/rCIcLeYXWQZxCCSXk ajB6CoGZISdTkLavaM5LAHzkFzMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFND/bwk9Der7XLQqk0M/ojnJA+rAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3ZjlmNTYy LTcyOTItNDRmMS04ZTJjLTQ0MGEwNTMxYzM5Ni8wL0QwRkY2RjA5M0QwREVBRkI1 Q0I0MkE5MzQzM0ZBMjM5QzkwM0VBQzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnocowDQYJKoZIhvcNAQELBQADggEBAEwuyTYzCt7k+J13RjLjGJTvVATPfc5Y NmPiVJjUtlW+VpwV6O5LWfT5E89Tv3qdtBcTfLutLE2WUOftDqi2S5DDg6p0l/DL WGL8fKCxh7xKQ/owWuYlt/GYA2Z/ARwWfTFxljP+FiGaZEu9nrU+xTCpAKpXe4yf rqfSbsRrJzRFPEPZhkVRgAZTYTJH6r4Blcr2gTBwM996m21E+62rzxoZ3sKxRGMi Lmi0TpmD4AKRFahJxHFGUA3q4Va+X+3buAYlhYitszGaCtHOU+Z/Xbct/9IB/rbi Qwpmnm69vxCZVFtXxUk7l0089QOnQh2sPRqMjzVRu11vyZeGNNC00wo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org