$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer (raw, json) Hash identifier: XZqM4/4yRlHQHqVkB+oRvapb2TkoBcEd39xkAjsc+ec= Subject key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 042F6B71B3983265135C29FA74A90CA004AF0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft caRepository: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Mar 2024 09:43:27 +0000 Certificate not after: Mon 17 Mar 2025 09:48:27 +0000 Subordinate resources: IP: 103.130.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2f:6b:71:b3:98:32:65:13:5c:29:fa:74:a9:0c:a0:04:af:0b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 18 09:43:27 2024 GMT Not After : Mar 17 09:48:27 2025 GMT Subject: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:b6:b9:9b:14:1b:57:b5:ec:4c:e9:52:eb: 60:b1:7d:ad:51:75:89:ef:5a:48:06:e5:90:3a:03: 50:60:d8:31:f4:a1:30:0d:05:90:33:4a:d5:bb:24: b7:e4:e3:24:84:e2:f1:9d:f4:45:a0:7f:30:c1:c0: f5:61:70:71:97:0f:ff:b5:f5:83:ea:e8:74:8e:4b: e3:c1:f8:36:70:3a:af:f0:3a:e2:39:4e:29:93:7c: f5:83:cf:47:a4:fb:9e:1d:ad:01:ff:ac:7a:9a:a3: ec:09:a6:6b:66:79:b3:b5:ad:77:7a:7a:95:87:0e: d3:c2:22:34:3a:de:3c:7a:f4:1e:69:71:aa:14:32: 61:bb:ef:cd:df:de:f3:99:9f:ad:9d:77:13:f5:97: 89:bf:84:f4:b6:51:cf:a8:77:10:4e:65:e1:98:5f: a2:4a:af:c1:41:68:58:80:63:6a:13:97:c1:41:a3: 0a:cb:e0:60:e7:45:4c:64:d9:5e:10:b3:f5:e2:d2: d7:9c:4e:8f:1a:e4:97:a0:cf:64:5c:52:40:0a:6d: e6:55:b0:56:13:c2:aa:0c:0e:05:3b:57:4a:19:ac: 64:c1:ed:9c:04:c0:73:53:10:30:3b:50:15:09:48: 91:42:46:e9:68:01:e5:13:e5:1e:ea:94:45:c8:35: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 32:7e:4a:37:d7:fd:a9:b6:3a:61:61:6f:50:90:a8:c8:97:7e: 44:27:0f:98:6e:ab:8f:a4:5f:60:d1:8c:6e:92:a7:76:ad:23: 7b:b4:37:f3:b9:61:47:82:21:ef:6b:13:a9:11:88:44:4b:c2: 1d:23:5b:74:02:ca:a9:be:eb:c2:25:4a:13:bd:11:3d:00:08: cb:60:f7:46:b9:90:2c:7a:99:a0:d6:48:5c:ad:0f:47:a6:91: eb:e4:f7:88:50:d9:9f:8d:2c:90:4c:66:3e:8d:eb:c4:00:ab: 93:de:61:ce:03:15:47:49:59:b5:e5:22:b6:50:97:db:27:d2: 68:3d:25:d0:2b:92:25:f2:e3:e9:a4:33:25:67:90:62:c4:5c: 8b:84:5b:29:66:9a:78:78:25:c5:46:80:5f:be:9e:34:30:9f: ad:6a:ac:f8:a2:47:01:2e:d8:96:18:f5:3d:1f:02:32:76:d3: 44:80:08:e2:1c:b8:a2:15:cb:d2:3c:a1:69:d0:e8:b0:29:3d: c2:41:d1:46:65:62:90:7f:7f:ff:f4:b0:e5:3c:fb:c6:2d:bc: 0e:fb:a0:ca:55:b7:be:eb:49:05:81:05:71:52:7f:92:c5:d2: 99:3d:34:c8:af:30:90:5c:0c:47:88:b7:4a:c1:57:d4:b3:b3: dc:67:68:7d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBC9rcbOYMmUTXCn6dKkMoASvCzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxODA5NDMyN1oX DTI1MDMxNzA5NDgyN1owMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0 Q0Q0MTZEMzI4MkFEREZCQkZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnPtrmbFBtXtexM6VLrYLF9rVF1ie9aSAblkDoDUGDYMfShMA0FkDNK1bsk t+TjJITi8Z30RaB/MMHA9WFwcZcP/7X1g+rodI5L48H4NnA6r/A64jlOKZN89YPP R6T7nh2tAf+sepqj7Amma2Z5s7Wtd3p6lYcO08IiNDrePHr0HmlxqhQyYbvvzd/e 85mfrZ13E/WXib+E9LZRz6h3EE5l4ZhfokqvwUFoWIBjahOXwUGjCsvgYOdFTGTZ XhCz9eLS15xOjxrkl6DPZFxSQApt5lWwVhPCqgwOBTtXShmsZMHtnATAc1MQMDtQ FQlIkUJG6WgB5RPlHuqURcg1/0cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNlH6L6uAaZxDjJM1BbTKCrd+7/pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmZmRjMmI3 LWYzMDUtNGUwNy1hYWM1LTQ2OWU5MTEzYjBiNC8wL0Q5NDdFOEJFQUUwMUE2NzEw RTMyNENENDE2RDMyODJBRERGQkJGRTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFngnQwDQYJKoZIhvcNAQELBQADggEBADJ+SjfX/am2OmFhb1CQqMiXfkQnD5hu q4+kX2DRjG6Sp3atI3u0N/O5YUeCIe9rE6kRiERLwh0jW3QCyqm+68IlShO9ET0A CMtg90a5kCx6maDWSFytD0emkevk94hQ2Z+NLJBMZj6N68QAq5PeYc4DFUdJWbXl IrZQl9sn0mg9JdArkiXy4+mkMyVnkGLEXIuEWylmmnh4JcVGgF++njQwn61qrPii RwEu2JYY9T0fAjJ200SACOIcuKIVy9I8oWnQ6LApPcJB0UZlYpB/f//0sOU8+8Yt vA77oMpVt77rSQWBBXFSf5LF0pk9NMivMJBcDEeIt0rBV9Szs9xnaH0= -----END CERTIFICATE-----Generated at Wed May 8 10:06:57 2024 by rpki-client on console-ams.rpki-client.org