$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer File: F33127B2252454B491C5DC9FE3937C56F28F8066.cer (raw, json) Hash identifier: TJZ07eqGImX8kdKBVO4Oald5KOj/ril/P35qD+bHbfY= Subject key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AF02B4322B0977F3F0E06A7B3EB5FA239E648E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft caRepository: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Mar 2024 20:58:43 +0000 Certificate not after: Fri 28 Feb 2025 21:03:43 +0000 Subordinate resources: IP: 103.71.224.0/22 IP: 202.95.128.0/19 IP: 202.182.160.0/19 IP: 2001:f20::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f0:2b:43:22:b0:97:7f:3f:0e:06:a7:b3:eb:5f:a2:39:e6:48:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 20:58:43 2024 GMT Not After : Feb 28 21:03:43 2025 GMT Subject: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:ea:d5:1c:36:d6:8d:51:21:28:43:10:70: ca:0b:c4:35:97:63:2c:2b:8d:d5:ac:e5:53:86:ab: 08:77:1b:79:17:13:08:4f:ed:d4:15:fc:66:45:9b: 02:a6:a9:5b:74:63:96:f7:26:e3:59:5d:3d:59:60: 16:ec:27:20:06:99:7a:f2:7b:89:3d:e0:b8:f9:f4: 7e:49:8d:67:a1:a0:d7:82:d2:75:62:9a:b5:6c:61: 39:47:b4:f2:16:9e:a3:0f:54:b9:fd:e8:09:95:74: 81:a6:27:ad:51:73:a3:ee:e5:c8:81:25:3b:14:2d: 12:0e:7d:4b:5f:23:51:af:69:dc:c4:a8:01:ad:24: 1f:56:86:44:51:cd:a5:d0:6f:a7:29:3d:b1:0e:43: 74:83:90:d5:10:9b:21:04:9f:a1:d0:ba:60:93:3b: e1:dc:6e:01:9c:26:9a:93:e4:12:84:a8:05:cb:33: 3a:2d:0e:31:ab:97:5d:f1:53:db:69:94:7d:f1:69: 13:f6:d8:e2:e0:90:7f:50:f8:c1:e2:7a:41:10:59: 00:0e:4a:a8:f7:c1:2b:4e:a7:b8:d9:e7:87:76:5f: 02:a7:5c:fd:1a:fc:66:c6:11:23:db:73:c0:ca:3f: bf:1a:03:88:12:5b:5c:1e:7d:83:43:3b:8d:35:70: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.224.0/22 202.95.128.0/19 202.182.160.0/19 IPv6: 2001:f20::/32 Signature Algorithm: sha256WithRSAEncryption 98:b4:d6:4e:a7:b3:26:58:42:a2:1d:77:62:d6:6a:60:81:dd: 68:d7:8c:47:67:9e:48:9a:96:a3:14:9b:01:6d:19:8b:48:d2: 44:86:e2:d5:b9:11:5c:cf:9e:dc:11:0d:c4:23:cc:ac:cf:89: 1b:53:df:0f:bd:40:11:37:cc:cd:59:d8:84:fb:25:b0:91:ee: c3:5e:44:ef:96:e7:0b:32:ad:5f:f5:39:fe:a5:bc:61:07:6d: 49:20:87:d8:c5:10:ef:c6:ae:33:1c:d0:91:df:66:55:6a:54: 2b:c9:46:fc:5f:4b:12:ac:1d:cc:c0:f4:bd:23:93:51:f9:30: c0:e9:85:5b:75:0d:3d:4c:88:db:9a:df:9e:26:2a:6c:19:55: 62:e0:0c:ac:17:a2:f6:dc:dc:2f:bb:6b:9a:98:71:c6:db:fb: 78:5b:e5:a9:ec:82:f9:b0:c4:be:7a:21:53:4f:3a:57:ed:10: 15:2f:4e:dc:6f:2d:b6:61:fa:c4:16:2a:c6:39:5f:be:c5:55: 28:a1:ff:d9:41:9b:19:d8:bf:1c:5d:07:2c:c0:b1:51:de:51: 44:3b:b1:cf:91:d8:f0:7b:cf:54:1d:32:e4:03:83:3c:91:8d: 92:cb:b9:06:28:16:ec:9d:a3:a8:a2:3f:3b:9d:fc:d5:7d:58: 4f:a0:be:38 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUevArQyKwl38/Dgans+tfojnmSOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwMTIwNTg0M1oX DTI1MDIyODIxMDM0M1owMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVE QzlGRTM5MzdDNTZGMjhGODA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF56tUcNtaNUSEoQxBwygvENZdjLCuN1azlU4arCHcbeRcTCE/t1BX8ZkWb AqapW3Rjlvcm41ldPVlgFuwnIAaZevJ7iT3guPn0fkmNZ6Gg14LSdWKatWxhOUe0 8haeow9Uuf3oCZV0gaYnrVFzo+7lyIElOxQtEg59S18jUa9p3MSoAa0kH1aGRFHN pdBvpyk9sQ5DdIOQ1RCbIQSfodC6YJM74dxuAZwmmpPkEoSoBcszOi0OMauXXfFT 22mUffFpE/bY4uCQf1D4weJ6QRBZAA5KqPfBK06nuNnnh3ZfAqdc/Rr8ZsYRI9tz wMo/vxoDiBJbXB59g0M7jTVwyGkCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMxJ7IlJFS0kcXcn+OTfFbyj4BmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2 LTAwYTMtNDc3Ni1iZjNmLTUyMTE5NDYxMDFjMy8wL0YzMzEyN0IyMjUyNDU0QjQ5 MUM1REM5RkUzOTM3QzU2RjI4RjgwNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAJnR+ADBAXKX4ADBAXKtqAwDQQCAAIwBwMFACABDyAwDQYJKoZIhvcNAQELBQAD ggEBAJi01k6nsyZYQqIdd2LWamCB3WjXjEdnnkialqMUmwFtGYtI0kSG4tW5EVzP ntwRDcQjzKzPiRtT3w+9QBE3zM1Z2IT7JbCR7sNeRO+W5wsyrV/1Of6lvGEHbUkg h9jFEO/GrjMc0JHfZlVqVCvJRvxfSxKsHczA9L0jk1H5MMDphVt1DT1MiNua354m KmwZVWLgDKwXovbc3C+7a5qYccbb+3hb5ansgvmwxL56IVNPOlftEBUvTtxvLbZh +sQWKsY5X77FVSih/9lBmxnYvxxdByzAsVHeUUQ7sc+R2PB7z1QdMuQDgzyRjZLL uQYoFuydo6iiPzud/NV9WE+gvjg= -----END CERTIFICATE-----Generated at Wed May 8 07:45:31 2024 by rpki-client on console-ams.rpki-client.org