$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer (raw, json) Hash identifier: K3oDdFfmTn0JsTCTDecZuZEmphTPySFxnA6P60ZtzMs= Subject key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AA76287C6C2DBFAB8A1476D6BF4BF232486AD1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Jan 2024 20:58:27 +0000 Certificate not after: Tue 21 Jan 2025 21:03:27 +0000 Subordinate resources: IP: 103.183.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a7:62:87:c6:c2:db:fa:b8:a1:47:6d:6b:f4:bf:23:24:86:ad:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 23 20:58:27 2024 GMT Not After : Jan 21 21:03:27 2025 GMT Subject: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:df:7a:74:b2:08:6f:fd:3c:2e:37:13:e6:0b: c1:48:ab:ec:72:c8:5d:25:70:c2:35:0b:2a:e4:68: ef:cd:73:c4:0a:cc:93:71:89:99:b6:d5:10:e3:56: f0:41:1b:96:f4:b3:57:02:29:3a:e1:52:94:cf:88: 30:fd:3c:0b:26:0f:de:f9:05:07:84:d6:ed:e8:00: a2:37:f7:21:26:a8:ef:06:92:3e:c1:77:d2:cf:6a: 82:d3:99:78:1e:f4:7c:ca:e4:6d:00:62:76:47:54: 1c:ac:d5:16:e1:72:31:4a:00:da:07:5f:b5:99:d3: 15:a7:2b:79:2e:80:28:94:7f:4f:56:b0:b4:18:cd: d0:b3:ce:bf:56:76:aa:70:74:ac:14:f2:7f:02:8b: c4:6d:f9:22:35:cb:c4:15:19:3f:44:50:34:ba:cc: d5:ae:81:02:74:d7:5e:3d:88:3d:98:84:7e:de:71: 25:4c:ac:fc:1d:44:c9:bb:8e:76:4e:33:af:25:a3: 38:40:f1:8f:e2:41:b5:51:47:98:28:11:7e:3c:60: 03:5c:d1:4f:94:5a:56:4e:79:83:8c:cf:c3:19:57: eb:f9:9b:5f:df:7f:62:be:45:ad:7b:fe:3f:4b:02: 24:62:fb:68:e5:6d:28:9a:1d:e9:c0:bc:c7:68:85: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.250.0/23 Signature Algorithm: sha256WithRSAEncryption 45:0b:65:c2:a3:c7:c1:d1:43:22:80:d3:14:03:e0:b6:5c:d8: 64:cd:ca:dd:65:a7:4e:98:94:bf:4e:19:9b:ea:0d:38:9e:0a: de:78:a7:8e:02:4e:db:b9:d4:d3:4f:fc:85:80:f5:00:ea:eb: fe:ea:e1:4f:f6:03:f3:dc:34:8f:4b:86:5a:e1:7c:3c:79:e3: 06:9d:38:e8:ac:b6:3c:75:a1:f6:13:89:4b:7a:b7:28:cc:b1: b6:26:30:36:39:31:96:1a:05:be:47:1f:03:23:92:10:85:f8: 71:d5:6d:a8:a4:63:5c:0a:d4:9b:3e:2f:37:06:b4:13:95:76: 6a:0d:ca:e4:d4:10:81:4b:45:e4:06:6c:20:6f:c6:8a:82:b9: 50:26:5f:02:fe:77:15:8d:55:3b:86:bb:76:87:02:16:8c:79: 18:da:d5:b3:77:16:be:08:00:f8:47:d3:7a:a3:10:29:f2:83: 7a:09:e6:3c:80:09:05:79:0b:1d:c0:57:80:32:5e:65:cf:b0: 0b:9e:59:e8:de:b7:31:72:16:79:81:2f:52:dd:89:11:bf:46: 05:8f:f9:70:9b:3e:8d:5e:ef:91:28:38:6d:02:07:f5:74:67: a2:ff:79:8d:e6:1d:61:f5:58:be:90:43:a3:a3:5a:26:06:f9: 38:2e:52:d1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeqdih8bC2/q4oUdta/S/IySGrR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyMzIwNTgyN1oX DTI1MDEyMTIxMDMyN1owMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0 ODBDREQ0MkI1RTg1MTdDOEZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnfenSyCG/9PC43E+YLwUir7HLIXSVwwjULKuRo781zxArMk3GJmbbVEONW 8EEblvSzVwIpOuFSlM+IMP08CyYP3vkFB4TW7egAojf3ISao7waSPsF30s9qgtOZ eB70fMrkbQBidkdUHKzVFuFyMUoA2gdftZnTFacreS6AKJR/T1awtBjN0LPOv1Z2 qnB0rBTyfwKLxG35IjXLxBUZP0RQNLrM1a6BAnTXXj2IPZiEft5xJUys/B1EybuO dk4zryWjOEDxj+JBtVFHmCgRfjxgA1zRT5RaVk55g4zPwxlX6/mbX99/Yr5FrXv+ P0sCJGL7aOVtKJod6cC8x2iFzyECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnQcw21EpX+xb1IDN1CtehRfI/bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJiOGIz LWRlYzgtNDFjZi1hMTZkLWUxMTcxNTYxZDcyNS8wL0Q5RDA3MzBEQjUxMjk1RkVD NUJENDgwQ0RENDJCNUU4NTE3QzhGREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnt/owDQYJKoZIhvcNAQELBQADggEBAEULZcKjx8HRQyKA0xQD4LZc2GTNyt1l p06YlL9OGZvqDTieCt54p44CTtu51NNP/IWA9QDq6/7q4U/2A/PcNI9LhlrhfDx5 4wadOOistjx1ofYTiUt6tyjMsbYmMDY5MZYaBb5HHwMjkhCF+HHVbaikY1wK1Js+ LzcGtBOVdmoNyuTUEIFLReQGbCBvxoqCuVAmXwL+dxWNVTuGu3aHAhaMeRja1bN3 Fr4IAPhH03qjECnyg3oJ5jyACQV5Cx3AV4AyXmXPsAueWejetzFyFnmBL1LdiRG/ RgWP+XCbPo1e75EoOG0CB/V0Z6L/eY3mHWH1WL6QQ6OjWiYG+TguUtE= -----END CERTIFICATE-----Generated at Thu May 9 00:37:11 2024 by rpki-client on console-fra.rpki-client.org