$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer File: DBF597EA29EF8A70656446AF75CF33F0618E8282.cer (raw, json) Hash identifier: IC99mwsTL6az0Y4uAy3fNPZssx/kcP3Y8EOea7WEREI= Subject key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 06EA6CF7E00B7464C1E15D648B5088EC59D14908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:52:56 +0000 Certificate not after: Mon 29 Jul 2024 09:57:56 +0000 Subordinate resources: IP: 103.242.204.0/22 IP: 117.102.224.0/19 IP: 150.107.132.0/22 IP: 202.6.224.0/20 IP: 2406:6200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ea:6c:f7:e0:0b:74:64:c1:e1:5d:64:8b:50:88:ec:59:d1:49:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:52:56 2023 GMT Not After : Jul 29 09:57:56 2024 GMT Subject: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:35:f0:3b:46:56:d1:8f:0d:f2:9a:47:29: 63:6c:19:92:64:cf:45:12:91:ce:2f:f3:67:40:27: 56:56:f3:a3:74:1a:ec:da:d0:da:6a:8f:a0:f6:3e: e9:47:99:9b:fb:ae:f1:36:4b:cd:e5:b2:fd:c5:ef: 61:d8:ac:77:21:6f:ac:7f:4c:31:99:43:2e:49:f2: 71:69:8b:9d:98:5d:24:86:3d:01:f5:a7:13:44:79: 1d:12:d2:8b:10:c9:ad:1d:f0:4b:b6:ea:f6:3c:61: b5:4c:94:88:a2:b8:c9:7f:6b:37:53:f5:57:60:0e: 66:2a:41:f4:76:31:b7:b3:e9:95:47:01:5c:8f:7c: 03:9a:2d:d4:e3:82:75:b9:2b:d4:f2:c5:84:80:ef: 95:38:cb:67:ba:84:99:36:58:94:f9:70:54:3b:c5: 72:c8:61:aa:a8:42:22:ef:c1:25:71:4b:01:5d:4d: c8:0f:36:a1:6c:43:38:01:7d:21:36:c5:c2:b4:94: 76:e2:d9:3c:81:f3:94:31:ae:11:7b:ca:51:6f:8b: 75:c5:f3:10:41:d3:66:6d:77:0a:40:6c:52:12:4c: ea:56:78:89:aa:34:20:a5:9d:15:17:0e:48:93:c6: a2:69:03:86:fa:6a:28:eb:5a:e9:3a:97:7c:d6:cd: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.204.0/22 117.102.224.0/19 150.107.132.0/22 202.6.224.0/20 IPv6: 2406:6200::/32 Signature Algorithm: sha256WithRSAEncryption 09:d8:6f:58:3c:bd:37:e3:f8:4d:cd:e9:31:44:be:2e:48:07: 3a:d7:2c:f3:b7:0c:f4:07:67:1b:8f:46:41:6a:a1:0d:cc:50: ba:d4:0b:59:25:04:a7:51:2f:8a:a9:b6:5e:b8:49:51:9b:be: 60:28:09:6a:de:ea:e3:5a:9d:07:e8:8f:80:b3:ef:b1:1d:b7: 53:cf:bc:31:20:4e:17:8d:69:41:16:7b:1d:cd:8d:90:ff:4a: 29:ec:55:ea:0e:4c:f7:66:8c:d4:a7:80:d6:53:e9:38:f6:07: e8:d6:94:6d:61:c8:79:83:e2:71:ef:16:49:0b:b6:d1:ef:00: 6d:66:97:8d:42:a9:97:75:a2:04:28:68:65:26:51:b7:33:f9: 2e:35:89:9e:44:8b:b9:f8:74:f9:7e:ee:bf:10:2f:ce:62:44: db:fe:5d:61:f3:e8:02:75:60:d1:a8:a9:7a:94:d0:79:12:a3: 01:71:7f:ad:3a:9d:82:f3:ee:d2:9b:9c:da:33:51:b8:d0:73: b2:74:c6:7e:5b:ee:ca:b9:92:cd:b6:4c:a5:16:ee:6e:63:ab: df:3c:56:b9:70:30:8a:2c:65:7b:9d:63:8b:bd:4d:33:49:ed: 28:da:4e:08:a4:0d:80:11:ae:b0:f8:83:cf:d4:9e:a3:ca:e3: 7f:36:d1:dc -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUBups9+ALdGTB4V1ki1CI7FnRSQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5NTI1NloX DTI0MDcyOTA5NTc1NlowMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0 NkFGNzVDRjMzRjA2MThFODI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALISNfA7RlbRjw3ymkcpY2wZkmTPRRKRzi/zZ0AnVlbzo3Qa7NrQ2mqPoPY+ 6UeZm/uu8TZLzeWy/cXvYdisdyFvrH9MMZlDLknycWmLnZhdJIY9AfWnE0R5HRLS ixDJrR3wS7bq9jxhtUyUiKK4yX9rN1P1V2AOZipB9HYxt7PplUcBXI98A5ot1OOC dbkr1PLFhIDvlTjLZ7qEmTZYlPlwVDvFcshhqqhCIu/BJXFLAV1NyA82oWxDOAF9 ITbFwrSUduLZPIHzlDGuEXvKUW+LdcXzEEHTZm13CkBsUhJM6lZ4iao0IKWdFRcO SJPGomkDhvpqKOta6TqXfNbNxosCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNv1l+op74pwZWRGr3XPM/BhjoKCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkMGYxYTZl LTgzYjYtNDUzNC05NjdkLWY4ZGIzYzM3MTFmNC8wL0RCRjU5N0VBMjlFRjhBNzA2 NTY0NDZBRjc1Q0YzM0YwNjE4RTgyODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJn8swDBAV1ZuADBAKWa4QDBATKBuAwDQQCAAIwBwMFACQGYgAwDQYJKoZIhvcN AQELBQADggEBAAnYb1g8vTfj+E3N6TFEvi5IBzrXLPO3DPQHZxuPRkFqoQ3MULrU C1klBKdRL4qptl64SVGbvmAoCWre6uNanQfoj4Cz77Edt1PPvDEgTheNaUEWex3N jZD/SinsVeoOTPdmjNSngNZT6Tj2B+jWlG1hyHmD4nHvFkkLttHvAG1ml41CqZd1 ogQoaGUmUbcz+S41iZ5Ei7n4dPl+7r8QL85iRNv+XWHz6AJ1YNGoqXqU0HkSowFx f606nYLz7tKbnNozUbjQc7J0xn5b7sq5ks22TKUW7m5jq988VrlwMIosZXudY4u9 TTNJ7SjaTgikDYARrrD4g8/UnqPK43820dw= -----END CERTIFICATE-----Generated at Wed May 8 17:45:30 2024 by rpki-client on console-ams.rpki-client.org