$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer (raw, json) Hash identifier: 1ofxEZ9h6r89SWdpSemedDPREgZ5umBXmbDs3sMsnoU= Subject key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47EBD2AE63658D99C3563D3E5CF181556B5C4B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Dec 2023 08:24:22 +0000 Certificate not after: Wed 11 Dec 2024 08:29:22 +0000 Subordinate resources: IP: 103.160.182.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:eb:d2:ae:63:65:8d:99:c3:56:3d:3e:5c:f1:81:55:6b:5c:4b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 13 08:24:22 2023 GMT Not After : Dec 11 08:29:22 2024 GMT Subject: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:2d:ae:ab:09:31:6b:17:5e:23:72:d3:87: bc:c5:d3:0e:fc:0d:0c:6e:5a:3c:fc:f3:0d:d1:79: c9:94:06:b2:6c:f7:df:ee:14:05:a4:ba:30:57:f8: 22:d8:b2:85:88:e5:cb:26:01:6b:3b:66:ee:36:4c: 2b:8e:04:ba:3f:b4:3c:16:b1:e6:c3:02:03:66:08: 68:34:a6:43:7e:4f:03:a8:ca:25:b4:a9:a5:83:76: d3:44:db:fd:7a:76:94:0f:45:ad:b3:60:08:1d:16: a2:57:64:44:de:31:39:e8:93:0b:b5:91:d9:47:a9: 47:7b:07:27:0f:b4:10:73:f4:30:ef:f7:a3:d7:0b: fc:25:bc:e5:6b:b3:df:73:7e:61:69:69:7b:b2:bb: 49:8a:77:2f:57:e6:6d:1c:d7:d7:a7:df:63:23:37: 79:d2:c9:ce:e3:df:5a:09:7c:ed:8d:0e:45:cb:4e: c6:f0:88:7d:75:fb:22:87:cc:85:28:8b:6a:6b:8f: 31:9c:ac:d4:38:dd:46:73:94:03:3e:50:98:9a:19: 6f:2b:71:a3:f8:f3:33:79:3e:57:a7:2e:de:98:fe: f1:25:45:b7:f8:f8:e3:a0:4a:f6:89:bc:4a:53:0d: 58:e7:7c:27:70:ff:37:7e:fe:2e:2c:64:58:29:1b: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.182.0/23 Signature Algorithm: sha256WithRSAEncryption 34:79:2c:7e:f4:e4:26:3f:6a:d9:96:fc:40:6c:56:4b:19:f8: 68:df:bb:23:70:88:11:3d:cd:54:50:37:a7:ae:75:21:6a:2f: fd:e2:5d:cb:46:d6:9d:d2:dc:8e:cb:bd:37:f1:67:f6:0d:ae: 52:6a:2e:06:a1:d3:fc:ed:35:38:0e:62:91:9e:71:c9:3e:a9: c5:26:32:2f:c5:9e:79:33:7a:54:84:c3:29:b1:e3:fa:42:15: 5e:3a:19:35:1b:69:1f:2c:b5:a0:f8:87:7b:20:60:f1:a9:2d: de:e2:a7:6a:ea:bd:4a:d1:86:59:b3:04:ad:04:25:8b:5f:0d: 4c:a8:0b:35:fc:33:8b:83:0c:af:8d:f5:c9:59:10:f3:ce:8b: 5a:c0:7e:b2:7d:ba:65:31:0e:cf:25:aa:51:80:9b:c4:6c:d7: 86:5e:6c:44:76:ad:1c:dc:73:00:e2:96:c2:f0:de:1c:54:8e: 66:78:65:96:f5:b9:3b:ff:1b:6b:79:a4:07:4c:fd:ba:6f:09: 07:79:ff:1c:2e:ae:12:0a:59:b8:33:25:38:84:61:bf:cc:22: b6:5e:25:d7:46:0d:f9:82:2d:d8:45:3f:1f:53:39:30:64:92: 30:45:40:7a:13:66:5c:93:0e:09:6e:1e:6a:42:1e:ae:c5:8c: e8:41:87:68 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR+vSrmNljZnDVj0+XPGBVWtcS3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxMzA4MjQyMloX DTI0MTIxMTA4MjkyMlowMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2 MzJBODkyM0ZFNThBODE4NzkyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTBLa6rCTFrF14jctOHvMXTDvwNDG5aPPzzDdF5yZQGsmz33+4UBaS6MFf4 ItiyhYjlyyYBaztm7jZMK44Euj+0PBax5sMCA2YIaDSmQ35PA6jKJbSppYN200Tb /Xp2lA9FrbNgCB0WoldkRN4xOeiTC7WR2UepR3sHJw+0EHP0MO/3o9cL/CW85Wuz 33N+YWlpe7K7SYp3L1fmbRzX16ffYyM3edLJzuPfWgl87Y0ORctOxvCIfXX7IofM hSiLamuPMZys1DjdRnOUAz5QmJoZbytxo/jzM3k+V6cu3pj+8SVFt/j446BK9om8 SlMNWOd8J3D/N37+LixkWCkbDgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP3mq+4blS9N+F1jKokj/lioGHkqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNzQ0ZGRl LTdjMWYtNGNiYS05M2MwLTlmMDY2OWVlZWQ5Mi8wL0ZERTZBQkVFMUI5NTJGNERG ODVENjMyQTg5MjNGRTU4QTgxODc5MkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoLYwDQYJKoZIhvcNAQELBQADggEBADR5LH705CY/atmW/EBsVksZ+GjfuyNw iBE9zVRQN6eudSFqL/3iXctG1p3S3I7LvTfxZ/YNrlJqLgah0/ztNTgOYpGecck+ qcUmMi/FnnkzelSEwymx4/pCFV46GTUbaR8staD4h3sgYPGpLd7ip2rqvUrRhlmz BK0EJYtfDUyoCzX8M4uDDK+N9clZEPPOi1rAfrJ9umUxDs8lqlGAm8Rs14ZebER2 rRzccwDilsLw3hxUjmZ4ZZb1uTv/G2t5pAdM/bpvCQd5/xwurhIKWbgzJTiEYb/M IrZeJddGDfmCLdhFPx9TOTBkkjBFQHoTZlyTDgluHmpCHq7FjOhBh2g= -----END CERTIFICATE-----Generated at Wed May 8 21:02:29 2024 by rpki-client on console-fra.rpki-client.org