$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer File: F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.cer (raw, json) Hash identifier: qxkKUtzoZqFpMDtkB3CK4exMgvAiZF5FyClbyLnLJ90= Subject key identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2881C58C5BD8A6B6818A8BC58CC9D2AF6E1F51F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft caRepository: rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Sep 2023 08:22:53 +0000 Certificate not after: Tue 17 Sep 2024 08:27:53 +0000 Subordinate resources: IP: 103.169.136.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:81:c5:8c:5b:d8:a6:b6:81:8a:8b:c5:8c:c9:d2:af:6e:1f:51:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 08:22:53 2023 GMT Not After : Sep 17 08:27:53 2024 GMT Subject: CN=F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:f7:bc:fe:d5:c6:6c:3a:67:62:07:fd:48: 4a:35:5f:ce:9a:ab:b9:13:45:50:7b:e3:22:f4:f0: 1c:9c:06:5d:92:0a:99:25:32:5d:11:0e:b9:ce:59: 84:e8:52:07:e6:df:60:f3:23:be:cf:d3:50:f2:ed: 8f:20:bf:50:22:1c:05:ff:2f:02:7e:00:0b:6d:c0: 6f:d3:42:8f:63:99:12:15:18:aa:61:fa:9e:4e:09: 4d:73:88:db:90:03:d6:aa:ff:8c:60:99:30:f1:c0: 27:83:bd:6d:13:4a:3a:01:21:4c:3a:d5:dc:2d:51: 17:e2:2c:75:8c:67:88:dc:39:8a:2c:8f:bc:d1:e3: b3:ce:35:5c:e3:f3:18:35:a7:77:be:6c:70:5a:40: df:f9:d2:66:e5:a0:a8:e4:8c:fa:77:9b:53:92:f9: 6d:38:22:6a:b8:1d:3a:07:c1:6a:09:10:aa:66:d2: 8b:cd:b0:ec:12:03:b0:d7:ff:2c:f3:ee:53:7b:a0: 33:59:4a:6c:eb:01:4b:04:7a:d8:c8:74:6c:64:ab: d0:18:f5:8e:fb:93:1d:cf:03:7d:62:dc:91:ad:c5: 61:9a:33:83:e9:76:e7:3d:c2:2c:e6:08:27:04:1d: b4:6d:03:c5:35:e1:14:aa:53:d5:92:21:0e:ee:78: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:0D:F0:FD:3D:45:5B:BA:95:D0:CE:9E:AA:27:EE:38:3E:44:D6:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/F10DF0FD3D455BBA95D0CE9EAA27EE383E44D6AF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.136.0/23 Signature Algorithm: sha256WithRSAEncryption 76:c5:54:5e:71:2e:8e:76:ea:99:6f:c4:6d:5b:81:07:01:3f: ca:37:0f:99:f0:0c:04:69:3f:ad:cb:25:f4:48:67:37:11:df: 02:f5:a7:bf:bb:bf:59:41:13:72:26:9b:3a:b1:2f:aa:01:7c: 4e:1f:c3:d1:9a:23:bd:e1:9a:10:91:6b:09:57:8a:01:02:f7: 97:e6:7c:db:4b:8c:9b:bf:64:dd:79:07:05:e3:7a:a3:89:3d: c2:f5:c9:4a:e6:f4:86:35:d9:6c:93:44:d4:1f:74:1e:8a:d6: 64:12:6a:39:49:b7:6b:28:f4:d0:ca:a0:b6:df:23:72:99:82: 53:2a:2d:a9:61:82:ed:cf:39:fc:0a:66:6e:70:00:49:1a:5d: e1:f6:e4:a4:fd:0c:66:cb:c6:b4:20:3c:a8:fc:59:c0:4f:26: a7:c8:2e:0f:6e:93:ea:49:9a:34:67:9b:3e:de:24:63:c0:57: 47:fc:a2:85:0f:43:4b:07:6e:00:34:32:ac:4c:4c:10:42:43: 5f:d1:bd:23:d4:d1:ee:d0:32:75:03:56:ce:17:04:47:f5:05: a0:63:b4:ab:bb:19:47:a7:59:05:e5:fd:55:fb:90:b4:17:f5: df:c5:6a:a5:68:ec:34:58:6d:af:8e:ca:5d:f3:d1:d9:d9:c4: 8d:3c:14:18 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKIHFjFvYpraBiovFjMnSr24fUfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxOTA4MjI1M1oX DTI0MDkxNzA4Mjc1M1owMzExMC8GA1UEAxMoRjEwREYwRkQzRDQ1NUJCQTk1RDBD RTlFQUEyN0VFMzgzRTQ0RDZBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLU97z+1cZsOmdiB/1ISjVfzpqruRNFUHvjIvTwHJwGXZIKmSUyXREOuc5Z hOhSB+bfYPMjvs/TUPLtjyC/UCIcBf8vAn4AC23Ab9NCj2OZEhUYqmH6nk4JTXOI 25AD1qr/jGCZMPHAJ4O9bRNKOgEhTDrV3C1RF+IsdYxniNw5iiyPvNHjs841XOPz GDWnd75scFpA3/nSZuWgqOSM+nebU5L5bTgiargdOgfBagkQqmbSi82w7BIDsNf/ LPPuU3ugM1lKbOsBSwR62Mh0bGSr0Bj1jvuTHc8DfWLcka3FYZozg+l25z3CLOYI JwQdtG0DxTXhFKpT1ZIhDu544F8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPEN8P09RVu6ldDOnqon7jg+RNavMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMWNiMmU4ZS1hMWEyLTRjYTAtODBiMC0yMjU1MThmZmFlMTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxY2IyZThl LWExYTItNGNhMC04MGIwLTIyNTUxOGZmYWUxNC8wL0YxMERGMEZEM0Q0NTVCQkE5 NUQwQ0U5RUFBMjdFRTM4M0U0NEQ2QUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqYgwDQYJKoZIhvcNAQELBQADggEBAHbFVF5xLo526plvxG1bgQcBP8o3D5nw DARpP63LJfRIZzcR3wL1p7+7v1lBE3ImmzqxL6oBfE4fw9GaI73hmhCRawlXigEC 95fmfNtLjJu/ZN15BwXjeqOJPcL1yUrm9IY12WyTRNQfdB6K1mQSajlJt2so9NDK oLbfI3KZglMqLalhgu3POfwKZm5wAEkaXeH25KT9DGbLxrQgPKj8WcBPJqfILg9u k+pJmjRnmz7eJGPAV0f8ooUPQ0sHbgA0MqxMTBBCQ1/RvSPU0e7QMnUDVs4XBEf1 BaBjtKu7GUenWQXl/VX7kLQX9d/FaqVo7DRYba+Oyl3z0dnZxI08FBg= -----END CERTIFICATE-----Generated at Wed May 8 15:17:49 2024 by rpki-client on console-fra.rpki-client.org