$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer (raw, json) Hash identifier: 3DenoKP+OvrIdCejMUp22rOm7HwAunHN292VKnvHiG0= Subject key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63399B9EBB9FC02911456E6D9476F427ED4F5E5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft caRepository: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Dec 2023 05:27:36 +0000 Certificate not after: Mon 16 Dec 2024 05:32:36 +0000 Subordinate resources: IP: 103.191.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:39:9b:9e:bb:9f:c0:29:11:45:6e:6d:94:76:f4:27:ed:4f:5e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 05:27:36 2023 GMT Not After : Dec 16 05:32:36 2024 GMT Subject: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:15:25:84:08:53:d6:47:36:8a:75:47:3e: 12:9a:24:37:1b:83:c8:cc:b6:33:9e:25:ab:ce:cc: 9a:04:d3:c1:96:45:2e:51:18:e6:6a:27:ab:54:32: 00:87:26:a6:50:29:76:66:28:23:30:e6:4d:77:5a: 43:fe:ff:26:26:08:1a:70:32:77:89:29:ee:ab:68: 56:24:c7:00:43:0f:e2:8b:97:c0:c8:02:f5:c1:60: 9b:fc:4a:ac:71:17:ff:5a:fb:4e:d9:d4:30:bc:3d: 21:40:4c:89:53:36:b6:76:56:4d:28:50:df:4e:a2: 44:ca:79:85:94:0f:43:5b:e2:cf:22:25:80:1e:95: 3e:dd:9f:dd:c5:50:c4:40:93:c7:a2:c9:68:8e:70: c9:87:b9:25:cd:fd:82:0e:ce:6d:ad:67:8d:00:65: 74:61:1c:97:8c:80:1f:21:58:13:e1:62:2d:d6:30: 4a:02:a2:3e:c0:f4:c8:32:77:ec:78:7e:ca:21:6b: 32:2d:d8:c8:01:95:d2:82:f4:02:0a:86:25:4f:6d: 0b:e6:93:93:94:d5:17:fa:58:c0:b6:2d:a4:62:f1: e2:d4:68:79:2c:cc:c7:31:04:84:05:7f:ce:0c:80: e1:87:e5:b4:b1:5f:14:03:3c:00:4b:52:19:47:fc: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.200.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:99:f2:ca:32:3d:98:14:82:70:3b:58:74:b4:f7:00:a2:02: a9:7f:64:3e:2d:46:e5:b2:29:2c:c5:1f:95:83:a5:f4:ee:ab: 61:4d:02:5b:e6:76:ac:64:c5:1e:ac:dc:30:e8:ad:e9:c5:6a: ec:1c:fb:d6:6e:c6:91:fc:94:64:a6:6e:d1:54:68:16:fe:aa: 49:59:66:17:6f:a4:9c:e7:ae:45:cf:32:1b:83:82:20:56:65: 57:bd:ec:2a:0a:60:49:c2:eb:0f:dd:de:1f:6e:45:f1:69:75: 58:4c:fc:9a:20:f8:88:08:2b:19:91:bb:f7:12:67:6e:c0:65: ef:0b:8e:28:e6:bc:e4:31:ea:e8:29:d3:e9:a3:5c:43:8e:52: 25:e6:39:77:3f:54:d6:87:22:ab:26:67:6d:db:62:20:e6:26: 11:84:1e:59:4f:07:3d:93:48:7d:f0:ca:12:88:8d:b6:fd:f5: f6:0f:f8:f0:ae:b3:e5:71:4b:28:ce:f9:c7:e5:06:2d:5a:23: 2a:e9:de:2a:ae:34:8c:fa:2c:d2:69:7c:8f:08:d9:8c:80:f8: 34:c5:7b:c6:7a:4d:0f:d4:51:48:0c:59:dc:50:11:87:7a:e8: 66:95:ed:ae:d2:e9:6c:63:67:49:7c:72:7a:39:8e:15:a2:9b: 2e:1d:bc:ce -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYzmbnrufwCkRRW5tlHb0J+1PXl8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxODA1MjczNloX DTI0MTIxNjA1MzIzNlowMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVE RTRDRTk5NDYzMkMwRDNBMjUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4hFSWECFPWRzaKdUc+EpokNxuDyMy2M54lq87MmgTTwZZFLlEY5monq1Qy AIcmplApdmYoIzDmTXdaQ/7/JiYIGnAyd4kp7qtoViTHAEMP4ouXwMgC9cFgm/xK rHEX/1r7TtnUMLw9IUBMiVM2tnZWTShQ306iRMp5hZQPQ1vizyIlgB6VPt2f3cVQ xECTx6LJaI5wyYe5Jc39gg7Oba1njQBldGEcl4yAHyFYE+FiLdYwSgKiPsD0yDJ3 7Hh+yiFrMi3YyAGV0oL0AgqGJU9tC+aTk5TVF/pYwLYtpGLx4tRoeSzMxzEEhAV/ zgyA4YfltLFfFAM8AEtSGUf8z5sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNgHtadxbLVtA27eTOmUYywNOiUBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwM2U3MWZl LWFkMzMtNGQxMi04NzIwLTQzMTQzZmYwMWRiZi8wL0Q4MDdCNUE3NzE2Q0I1NkQw MzZFREU0Q0U5OTQ2MzJDMEQzQTI1MDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8gwDQYJKoZIhvcNAQELBQADggEBAAyZ8soyPZgUgnA7WHS09wCiAql/ZD4t RuWyKSzFH5WDpfTuq2FNAlvmdqxkxR6s3DDorenFauwc+9ZuxpH8lGSmbtFUaBb+ qklZZhdvpJznrkXPMhuDgiBWZVe97CoKYEnC6w/d3h9uRfFpdVhM/Jog+IgIKxmR u/cSZ27AZe8LjijmvOQx6ugp0+mjXEOOUiXmOXc/VNaHIqsmZ23bYiDmJhGEHllP Bz2TSH3wyhKIjbb99fYP+PCus+VxSyjO+cflBi1aIyrp3iquNIz6LNJpfI8I2YyA +DTFe8Z6TQ/UUUgMWdxQEYd66GaV7a7S6WxjZ0l8cno5jhWimy4dvM4= -----END CERTIFICATE-----Generated at Wed May 8 18:12:21 2024 by rpki-client on console-fra.rpki-client.org