$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer File: D9B568DACE796AFC606BD299D9DA57F714CD7970.cer (raw, json) Hash identifier: PswKXIm1nfm3xlQrOh//cs9O60eDm7TCsSd+d5pNyIw= Subject key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2EB56882C2FD368DF258AFA1E500A1A46375F165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft caRepository: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jan 2024 06:23:59 +0000 Certificate not after: Tue 31 Dec 2024 06:28:59 +0000 Subordinate resources: IP: 103.105.196.0/23 IP: 2001:df3:8700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b5:68:82:c2:fd:36:8d:f2:58:af:a1:e5:00:a1:a4:63:75:f1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 2 06:23:59 2024 GMT Not After : Dec 31 06:28:59 2024 GMT Subject: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:d1:4f:5e:6e:8d:9c:22:17:90:06:f0:c0: aa:3a:00:64:04:bc:9c:7d:3f:47:a0:83:1b:2d:52: af:7f:8c:43:31:81:fd:75:80:4e:99:c3:39:ce:1d: 32:a3:41:6b:23:ab:13:9c:e8:61:3b:43:ec:3c:a2: 70:44:3e:2b:73:85:b5:e5:85:d5:a2:c6:93:de:8f: e0:7d:3a:fb:f6:d3:8d:50:d9:cc:0c:34:98:6b:93: 5c:e4:25:63:24:9c:dd:89:d4:6c:6d:08:d0:77:a9: 20:43:59:37:70:79:a2:b7:3f:3c:48:f6:3e:f6:d0: 8d:10:af:3d:47:bd:18:81:c6:2e:9a:f6:5f:02:d9: 52:a5:2e:74:4b:39:5b:43:a7:b2:bd:34:24:d8:d0: 74:76:15:b2:c7:a1:f1:83:97:0c:15:fa:de:a6:53: ed:5e:98:c4:5f:5e:80:18:99:3c:3c:93:4a:1e:02: f8:d8:d2:b7:de:23:0c:bd:7d:ae:61:32:0f:d7:eb: 51:15:f0:7f:66:8d:43:23:53:24:20:87:d5:45:cc: e1:7f:2f:e3:31:83:bb:c4:84:2e:b5:ed:d3:88:2a: 6f:84:a7:55:ee:19:88:83:b5:18:c8:ae:aa:ab:f9: c4:6f:80:b6:f8:06:f8:b3:e6:03:86:9b:97:4b:cc: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.196.0/23 IPv6: 2001:df3:8700::/48 Signature Algorithm: sha256WithRSAEncryption 5b:ce:34:a8:79:c6:c5:87:24:be:f8:6a:dc:28:d4:37:86:ed: 32:57:96:31:6f:1d:be:f6:4a:ae:6e:a9:fd:55:00:78:88:cd: e7:da:39:e7:83:e6:87:ab:76:7b:c8:4b:6e:a2:f1:81:13:6f: 2b:82:a7:10:3f:0d:1c:db:02:6e:25:72:6f:bd:b4:e9:b6:42: 15:aa:df:fa:8f:a8:68:f7:cf:d5:3a:4a:c5:8b:a3:7b:cd:14: 0a:56:f2:96:f7:af:1b:e2:74:82:1c:9d:00:30:d3:d9:10:f6: 59:d0:9d:82:8e:12:cd:e1:2f:2b:72:ee:31:24:30:cf:e6:12: 83:c4:89:6a:4e:70:1c:42:23:a4:14:7c:af:1c:40:a0:a7:d8: fd:3b:a0:a2:81:1e:17:2c:47:14:3f:44:16:49:9b:1d:64:7f: 26:5c:37:a6:ca:b6:a2:01:d3:8a:9d:5e:36:0e:ae:cc:0c:1b: d8:3d:60:aa:9b:d5:4a:2a:68:15:dc:d8:01:ac:f2:81:cb:49: 4a:2e:45:8e:83:20:5b:d0:51:92:a6:ed:25:a0:0d:93:fd:4a: 85:65:46:cb:7d:b3:6f:7f:21:87:8f:28:fa:7d:af:93:fc:db: 66:39:98:ae:a1:ed:d0:f2:0e:bc:79:a1:b1:dc:f0:56:c3:66: 9f:14:17:00 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULrVogsL9No3yWK+h5QChpGN18WUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMjA2MjM1OVoX DTI0MTIzMTA2Mjg1OVowMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJE Mjk5RDlEQTU3RjcxNENENzk3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtY0U9ebo2cIheQBvDAqjoAZAS8nH0/R6CDGy1Sr3+MQzGB/XWATpnDOc4d MqNBayOrE5zoYTtD7DyicEQ+K3OFteWF1aLGk96P4H06+/bTjVDZzAw0mGuTXOQl YySc3YnUbG0I0HepIENZN3B5orc/PEj2PvbQjRCvPUe9GIHGLpr2XwLZUqUudEs5 W0Onsr00JNjQdHYVsseh8YOXDBX63qZT7V6YxF9egBiZPDyTSh4C+NjSt94jDL19 rmEyD9frURXwf2aNQyNTJCCH1UXM4X8v4zGDu8SELrXt04gqb4SnVe4ZiIO1GMiu qqv5xG+AtvgG+LPmA4abl0vMdfUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNm1aNrOeWr8YGvSmdnaV/cUzXlwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2FiOWRm LTAzYjUtNDhiMy1hODcyLWEwZmUxMmE2NzQyNi8wL0Q5QjU2OERBQ0U3OTZBRkM2 MDZCRDI5OUQ5REE1N0Y3MTRDRDc5NzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnacQwDwQCAAIwCQMHACABDfOHADANBgkqhkiG9w0BAQsFAAOCAQEAW840qHnG xYckvvhq3CjUN4btMleWMW8dvvZKrm6p/VUAeIjN59o554Pmh6t2e8hLbqLxgRNv K4KnED8NHNsCbiVyb7206bZCFarf+o+oaPfP1TpKxYuje80UClbylvevG+J0ghyd ADDT2RD2WdCdgo4SzeEvK3LuMSQwz+YSg8SJak5wHEIjpBR8rxxAoKfY/TugooEe FyxHFD9EFkmbHWR/Jlw3psq2ogHTip1eNg6uzAwb2D1gqpvVSipoFdzYAazygctJ Si5FjoMgW9BRkqbtJaANk/1KhWVGy32zb38hh48o+n2vk/zbZjmYrqHt0PIOvHmh sdzwVsNmnxQXAA== -----END CERTIFICATE-----Generated at Wed May 8 04:38:01 2024 by rpki-client on console-fra.rpki-client.org