$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer (raw, json) Hash identifier: qQDCydiJjtPo+w+AQwHtzf776s5IfE1KFvHRq3FaVhA= Subject key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53B07E1DFEA6E99FB71865811A58B975D6D2336A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft caRepository: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Nov 2023 02:30:57 +0000 Certificate not after: Wed 30 Oct 2024 02:35:57 +0000 Subordinate resources: IP: 103.182.78.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b0:7e:1d:fe:a6:e9:9f:b7:18:65:81:1a:58:b9:75:d6:d2:33:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 02:30:57 2023 GMT Not After : Oct 30 02:35:57 2024 GMT Subject: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:e3:c6:16:6f:ff:27:17:0d:bb:a6:2c:0d: 9f:88:c9:e8:aa:f6:16:12:7e:c1:70:9b:1d:0f:bc: 1f:0a:a0:f9:3a:82:37:c4:a2:26:97:8b:c1:76:0a: 65:0e:c2:d3:35:41:0d:f7:b3:d3:32:b7:b4:4b:83: 23:90:8f:36:59:67:bd:71:db:e5:c5:0e:24:f4:8c: 70:72:47:fa:34:ac:9f:0b:5e:9b:14:76:fa:d9:a4: 99:4a:92:6d:e6:b9:b2:6d:b8:1b:92:2c:81:7a:cb: 0d:61:9d:6d:b0:a2:3f:4a:12:f5:06:7c:7d:23:38: d6:c6:31:1e:0b:29:6e:f7:c5:0b:5a:0d:1e:cc:4d: a5:28:d0:5f:f8:e7:d8:58:5c:df:ed:e2:c1:99:35: 5d:5b:5e:3c:2f:f8:14:e3:a2:63:f2:53:88:b3:1d: c2:f7:04:b1:fe:f8:c9:fe:0e:cf:a6:6e:ae:df:b9: 71:74:d3:b5:e3:d5:78:55:c5:0a:cb:2e:5b:27:4c: 03:44:44:b0:73:02:ea:c4:92:b7:35:18:e3:6d:be: 4e:9a:72:ec:b3:e1:89:ee:f0:16:be:28:76:7d:27: a5:7a:2e:70:a6:e9:a3:7a:79:57:07:e2:f5:b3:4f: af:54:ca:12:67:83:fb:d5:13:ab:96:13:09:ea:57: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.78.0/23 Signature Algorithm: sha256WithRSAEncryption 56:fe:d5:bc:15:5e:1d:19:59:2d:19:bb:31:a9:00:d2:eb:bb: d6:af:c4:2c:48:e9:91:16:b3:2b:ff:cb:cb:25:17:09:e5:62: f6:b9:3c:6b:32:8e:04:fe:6d:60:39:19:03:aa:b2:46:8f:2f: d7:f4:df:3f:ab:70:c3:f3:f4:f3:9b:9b:72:bf:7e:02:d7:6b: 1c:8c:ad:57:78:25:fe:eb:95:af:77:24:37:53:1a:9f:36:d5: dd:f6:1e:46:8b:ab:04:0e:0b:5b:1e:46:fb:64:a3:9c:28:82: d0:c2:fa:8c:ad:bb:90:dd:f0:16:be:77:c0:d1:9d:a9:fa:59: e9:dd:5a:d6:c3:a9:a0:2c:57:78:9b:a5:b6:ae:b4:75:ff:51: a4:6d:ab:6c:8f:49:5c:b6:2e:93:e4:a6:c0:5c:6d:64:82:72: 93:1d:1d:ce:42:d1:5d:17:d3:fb:cf:d7:b7:4e:4e:0a:f2:c7: 84:c3:17:29:df:c9:99:dc:db:5a:0f:0d:87:18:33:18:c2:b9: 2d:4b:e9:a6:8b:ae:ac:5f:27:f5:fd:b7:d9:3d:cc:98:6e:36: 81:91:ab:c1:87:ea:59:c4:05:50:e8:e9:72:e3:ca:91:cc:dd: 2f:08:e7:82:d2:51:94:00:78:56:74:9c:5b:86:06:08:36:f9: 82:b0:80:95 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU7B+Hf6m6Z+3GGWBGli5ddbSM2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwMTAyMzA1N1oX DTI0MTAzMDAyMzU1N1owMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZB NDIwNEVBOTkzQUU5M0QxOTZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzr48YWb/8nFw27piwNn4jJ6Kr2FhJ+wXCbHQ+8Hwqg+TqCN8SiJpeLwXYK ZQ7C0zVBDfez0zK3tEuDI5CPNllnvXHb5cUOJPSMcHJH+jSsnwtemxR2+tmkmUqS bea5sm24G5IsgXrLDWGdbbCiP0oS9QZ8fSM41sYxHgspbvfFC1oNHsxNpSjQX/jn 2Fhc3+3iwZk1XVtePC/4FOOiY/JTiLMdwvcEsf74yf4Oz6Zurt+5cXTTtePVeFXF CssuWydMA0REsHMC6sSStzUY422+Tppy7LPhie7wFr4odn0npXoucKbpo3p5Vwfi 9bNPr1TKEmeD+9UTq5YTCepXH3UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNH3LmfanM4JBE+kIE6pk66T0ZbWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGMzM2I4 LTlkNDItNDIwOC04YWM0LWYxNzJhMTQ0ZDg2OC8wL0QxRjcyRTY3REE5Q0NFMDkw NDRGQTQyMDRFQTk5M0FFOTNEMTk2RDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntk4wDQYJKoZIhvcNAQELBQADggEBAFb+1bwVXh0ZWS0ZuzGpANLru9avxCxI 6ZEWsyv/y8slFwnlYva5PGsyjgT+bWA5GQOqskaPL9f03z+rcMPz9PObm3K/fgLX axyMrVd4Jf7rla93JDdTGp821d32HkaLqwQOC1seRvtko5wogtDC+oytu5Dd8Ba+ d8DRnan6WendWtbDqaAsV3ibpbautHX/UaRtq2yPSVy2LpPkpsBcbWSCcpMdHc5C 0V0X0/vP17dOTgryx4TDFynfyZnc21oPDYcYMxjCuS1L6aaLrqxfJ/X9t9k9zJhu NoGRq8GH6lnEBVDo6XLjypHM3S8I54LSUZQAeFZ0nFuGBgg2+YKwgJU= -----END CERTIFICATE-----Generated at Wed May 8 09:50:44 2024 by rpki-client on console-fra.rpki-client.org