$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer (raw, json) Hash identifier: ibJantDOvzIZRiDgsrCZrSlEmj36qtcv3ySW0eycqV4= Subject key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 726B5118434961BC3084DD7E3224FBB29BE1EF87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Aug 2023 11:29:37 +0000 Certificate not after: Sat 10 Aug 2024 11:34:37 +0000 Subordinate resources: IP: 103.164.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6b:51:18:43:49:61:bc:30:84:dd:7e:32:24:fb:b2:9b:e1:ef:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 11:29:37 2023 GMT Not After : Aug 10 11:34:37 2024 GMT Subject: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:3e:6f:2e:ea:d4:64:4d:06:08:4b:72:d1: 31:fd:53:90:e3:aa:82:24:03:3d:13:ce:61:2c:b1: 1e:94:b0:7f:cf:06:b1:9c:cd:fa:32:0b:50:b0:21: e4:ca:52:d7:e1:f5:5e:fe:f3:f4:37:34:98:91:a2: ed:86:85:1b:a9:7a:d3:c7:8f:87:53:80:1d:e1:a3: e7:6e:8a:04:41:af:28:bd:8c:eb:b2:1a:d6:80:9c: 04:8d:06:ad:40:9b:06:4e:0b:76:4f:bc:48:9b:f2: ca:3e:1e:b6:7b:61:9d:f0:ed:c0:88:02:4f:11:d1: 92:92:11:10:bd:5a:f8:9a:de:6a:ee:67:ea:dd:39: a7:79:d4:71:9f:85:13:55:ae:86:9a:fd:7c:57:e6: 51:95:d5:18:f3:d8:b4:7b:f0:71:97:65:f9:56:03: af:15:be:20:26:6a:93:ef:7d:35:9e:03:ad:f8:c0: 61:11:0d:39:2c:99:d9:b2:10:d5:c4:fd:f2:1e:1e: 5b:f1:81:51:e6:d9:0b:34:e9:8e:9e:6b:fb:d2:0a: 67:f3:be:53:ce:da:b8:72:f5:5c:12:98:21:f4:3b: 21:dd:d6:a6:6d:a5:9f:ee:f8:6e:6a:c5:e8:36:2b: b1:14:11:92:e2:ca:46:31:aa:03:ef:5f:4b:8a:00: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.172.0/23 Signature Algorithm: sha256WithRSAEncryption 70:22:65:d0:b5:6f:f5:10:09:c7:a9:09:80:12:b2:5b:dc:52: 7f:5a:78:b2:84:a3:ae:f4:96:e7:53:6d:6e:20:6d:02:96:90: 68:b3:a6:c5:12:ee:89:2f:a9:7a:f6:60:04:31:35:c2:c4:c4: 98:fa:3f:92:f7:bb:8f:07:93:8b:35:96:57:a0:00:51:c6:b9: 36:b4:5d:6d:5b:ce:f8:db:86:92:99:85:72:2f:b9:b2:a5:93: 94:8e:f6:cc:d9:b3:2f:8c:b8:52:69:ae:ff:f6:10:51:d8:f6: cb:08:47:bb:e7:98:8c:58:91:05:03:75:27:d2:7e:b5:79:df: 45:16:eb:cb:79:e2:64:88:28:29:41:17:8c:ce:ea:68:0f:ec: 94:95:49:b6:ed:6f:10:13:98:26:b3:dd:b3:bb:b1:90:5b:60: 1e:fc:4b:28:af:40:78:68:87:c8:08:d9:55:6d:b5:bd:2a:a5: 67:fe:29:bb:16:76:22:a2:22:22:86:7b:c3:07:38:b6:3c:3f: 78:49:6d:45:33:f4:27:be:9e:66:65:b2:a2:20:40:de:2d:98: 4f:cb:42:5d:98:c0:7d:4c:ee:6f:75:94:c2:8b:6f:25:0e:e7: 5b:35:7e:f5:bf:d0:56:dd:b5:55:fe:42:92:8f:ab:e4:41:82: d8:21:fa:79 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcmtRGENJYbwwhN1+MiT7spvh74cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxMjExMjkzN1oX DTI0MDgxMDExMzQzN1owMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZB MzczOTlGMjBERUExOUMyRUYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/dPm8u6tRkTQYIS3LRMf1TkOOqgiQDPRPOYSyxHpSwf88GsZzN+jILULAh 5MpS1+H1Xv7z9Dc0mJGi7YaFG6l608ePh1OAHeGj526KBEGvKL2M67Ia1oCcBI0G rUCbBk4Ldk+8SJvyyj4etnthnfDtwIgCTxHRkpIREL1a+Jreau5n6t05p3nUcZ+F E1Wuhpr9fFfmUZXVGPPYtHvwcZdl+VYDrxW+ICZqk+99NZ4DrfjAYRENOSyZ2bIQ 1cT98h4eW/GBUebZCzTpjp5r+9IKZ/O+U87auHL1XBKYIfQ7Id3Wpm2ln+74bmrF 6DYrsRQRkuLKRjGqA+9fS4oACXkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNeFKvBd+7l6zUajc5nyDeoZwu8sMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODlmMWI0 LWVmNjMtNDUzOS04NDU1LTk4YzY3MTk5NWNjZi8wL0Q3ODUyQUYwNURGQkI5N0FD RDQ2QTM3Mzk5RjIwREVBMTlDMkVGMkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpKwwDQYJKoZIhvcNAQELBQADggEBAHAiZdC1b/UQCcepCYASslvcUn9aeLKE o670ludTbW4gbQKWkGizpsUS7okvqXr2YAQxNcLExJj6P5L3u48Hk4s1llegAFHG uTa0XW1bzvjbhpKZhXIvubKlk5SO9szZsy+MuFJprv/2EFHY9ssIR7vnmIxYkQUD dSfSfrV530UW68t54mSIKClBF4zO6mgP7JSVSbbtbxATmCaz3bO7sZBbYB78Syiv QHhoh8gI2VVttb0qpWf+KbsWdiKiIiKGe8MHOLY8P3hJbUUz9Ce+nmZlsqIgQN4t mE/LQl2YwH1M7m91lMKLbyUO51s1fvW/0FbdtVX+QpKPq+RBgtgh+nk= -----END CERTIFICATE-----Generated at Thu May 9 00:29:18 2024 by rpki-client on console-ams.rpki-client.org