$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer File: D2EF21DBD545255BED30EEC34623F204A3E12D23.cer (raw, json) Hash identifier: r3kokeC0/MNHSmtI/rK4HXgoWYjMpXvXeOFoWPsJ32g= Subject key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C53805B401A7572CDF3012B2DA3BA332D03D905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft caRepository: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:31:22 +0000 Certificate not after: Mon 29 Jul 2024 00:36:22 +0000 Subordinate resources: IP: 103.104.204.0/22 IP: 2402:1a40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:53:80:5b:40:1a:75:72:cd:f3:01:2b:2d:a3:ba:33:2d:03:d9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:31:22 2023 GMT Not After : Jul 29 00:36:22 2024 GMT Subject: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:64:9b:60:00:92:a4:33:76:ca:93:ca:b9: b6:e5:e8:25:92:68:4f:2e:79:b3:dc:be:a1:f1:3a: 00:fa:dd:f3:0c:64:c8:e9:8a:9b:19:ff:26:e3:ef: 9b:07:96:b0:3a:ff:52:6b:b5:98:c9:b0:5e:c9:d5: 79:72:b9:95:24:b8:38:9d:02:ea:c3:c4:a8:68:46: 39:bc:09:0a:01:41:85:5e:a2:62:5a:96:c6:4f:b0: 44:6f:e8:eb:07:24:ff:20:56:15:eb:eb:03:96:70: 65:f1:0f:af:39:8e:2b:fb:b4:21:06:84:89:84:70: 84:5d:e0:47:1b:1d:e0:c6:e1:79:f5:46:79:5e:0a: 58:eb:e8:30:e5:af:68:05:23:87:c2:1e:41:e4:57: 88:24:12:61:d9:ff:ba:db:1c:0c:f2:49:a4:71:8d: 3f:f4:46:40:5c:bd:c4:dc:52:41:1a:7a:17:ff:9c: 8d:e6:6f:4e:d5:2d:31:1c:f9:75:0f:38:7c:a1:c3: da:01:49:eb:c3:47:ed:5c:52:cc:c2:b3:b7:4f:33: a3:5a:cf:63:5e:07:3c:24:48:5a:85:22:58:25:57: 9e:fa:2c:4c:0c:ba:55:ce:02:a2:bb:7d:44:8a:d3: 96:0f:eb:44:37:70:e6:82:de:97:af:67:6c:81:e9: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.204.0/22 IPv6: 2402:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 13:45:a0:2d:54:b4:8f:ed:59:34:85:57:ff:49:9b:29:5a:50: c9:dc:f3:fe:73:aa:48:95:33:94:12:58:5f:5e:c2:2e:4e:d6: 13:aa:02:f9:51:64:c3:49:4c:3f:7d:71:4b:65:94:d0:b0:66: 82:6a:5a:95:7c:fb:36:d0:c6:0b:09:5a:a3:02:18:ef:99:9a: d0:73:20:c0:c8:01:e9:07:51:6b:23:e9:86:f3:4b:71:5b:7e: 58:0a:af:6e:2b:a7:58:19:b0:4b:ab:57:9a:29:26:7e:de:46: 2a:3d:9f:0e:8e:bc:0d:b1:47:16:0b:fb:91:bf:88:fb:44:49: eb:a9:5a:ce:d9:55:25:42:63:67:44:6b:4a:25:7d:c7:12:cb: c2:0b:a5:09:47:65:fc:f8:8e:aa:ed:ea:45:bb:75:bd:02:ce: ed:50:67:3b:47:45:25:9c:fe:ce:02:95:ce:bb:ed:1d:f2:7b: 2f:57:63:d0:2d:11:25:69:9c:89:aa:ad:f8:fd:14:5b:68:34: 91:f8:69:11:cb:d7:30:63:5a:e2:52:6a:f8:62:4a:58:1c:74: 49:24:18:94:31:a0:69:2e:fe:b7:ec:0c:3a:e9:0b:b9:2d:9a: a1:3b:4a:b9:57:3f:b2:30:73:a1:ef:a4:4e:ad:a1:b4:5e:e3: fe:d1:cb:9f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbFOAW0AadXLN8wErLaO6My0D2QUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwMzEyMloX DTI0MDcyOTAwMzYyMlowMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBF RUMzNDYyM0YyMDRBM0UxMkQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANulZJtgAJKkM3bKk8q5tuXoJZJoTy55s9y+ofE6APrd8wxkyOmKmxn/JuPv mweWsDr/Umu1mMmwXsnVeXK5lSS4OJ0C6sPEqGhGObwJCgFBhV6iYlqWxk+wRG/o 6wck/yBWFevrA5ZwZfEPrzmOK/u0IQaEiYRwhF3gRxsd4MbhefVGeV4KWOvoMOWv aAUjh8IeQeRXiCQSYdn/utscDPJJpHGNP/RGQFy9xNxSQRp6F/+cjeZvTtUtMRz5 dQ84fKHD2gFJ68NH7VxSzMKzt08zo1rPY14HPCRIWoUiWCVXnvosTAy6Vc4Cort9 RIrTlg/rRDdw5oLel69nbIHpnd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNLvIdvVRSVb7TDuw0Yj8gSj4S0jMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIx LTE4NDEtNDc2ZC1iNDZiLWI0NGI5Y2I5NjhiMC8wL0QyRUYyMURCRDU0NTI1NUJF RDMwRUVDMzQ2MjNGMjA0QTNFMTJEMjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnaMwwDQQCAAIwBwMFACQCGkAwDQYJKoZIhvcNAQELBQADggEBABNFoC1UtI/t WTSFV/9JmylaUMnc8/5zqkiVM5QSWF9ewi5O1hOqAvlRZMNJTD99cUtllNCwZoJq WpV8+zbQxgsJWqMCGO+ZmtBzIMDIAekHUWsj6YbzS3FbflgKr24rp1gZsEurV5op Jn7eRio9nw6OvA2xRxYL+5G/iPtESeupWs7ZVSVCY2dEa0olfccSy8ILpQlHZfz4 jqrt6kW7db0Czu1QZztHRSWc/s4Clc677R3yey9XY9AtESVpnImqrfj9FFtoNJH4 aRHL1zBjWuJSavhiSlgcdEkkGJQxoGku/rfsDDrpC7ktmqE7SrlXP7Iwc6HvpE6t obRe4/7Ry58= -----END CERTIFICATE-----Generated at Wed May 8 22:46:45 2024 by rpki-client on console-ams.rpki-client.org