$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer File: FE47963FB6E13EFC318606E3CA31013421827343.cer (raw, json) Hash identifier: uu+xBMZNWoswMaAE2Q0ZqCf4EV+/cc5wExZa7CeVC2w= Subject key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5928ABA18C9E2903222418B2CF872DC133021479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft caRepository: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Dec 2023 06:00:10 +0000 Certificate not after: Wed 25 Dec 2024 06:05:10 +0000 Subordinate resources: IP: 103.67.49.0/24 IP: 103.162.252.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:28:ab:a1:8c:9e:29:03:22:24:18:b2:cf:87:2d:c1:33:02:14:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 27 06:00:10 2023 GMT Not After : Dec 25 06:05:10 2024 GMT Subject: CN=FE47963FB6E13EFC318606E3CA31013421827343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:af:aa:68:55:87:de:96:2f:29:60:d6:03: 5b:99:23:8f:50:5a:60:42:2b:3f:8a:50:65:a5:00: 8a:9e:cf:0d:70:ef:17:51:ad:3b:b9:35:8d:36:8f: b4:42:10:20:99:2c:ef:fe:f2:1b:40:a7:1d:6c:1b: 21:99:ca:2f:cf:fa:20:b1:b2:34:c8:ec:a9:9a:e9: 29:38:df:cb:aa:ac:d9:69:27:12:b9:17:da:c0:22: 5f:08:00:24:e7:ae:b3:df:f3:b3:df:88:0f:26:1c: 96:b6:e2:e2:6b:45:b4:36:02:ab:88:92:51:b5:03: 52:bf:3d:8e:6b:e3:66:c7:28:12:57:1f:38:54:6f: b3:cc:8d:f3:18:73:88:e7:05:f3:b9:d1:9e:2d:10: 70:08:38:fc:d9:bd:2b:2a:68:03:0f:c9:9e:2b:87: f4:a8:17:1e:50:25:8a:c0:d4:f7:06:89:25:29:8b: db:3e:fa:41:53:5f:a2:f1:0e:1f:10:47:31:2a:54: 6b:d8:a8:17:34:bc:fa:03:4f:bf:18:d2:3f:35:5e: 3a:ca:0f:cc:1d:fa:17:46:0d:96:a6:3d:07:99:41: 90:19:c8:33:ae:f3:68:57:b5:7d:ba:75:08:a1:5e: b6:c1:0f:87:36:c8:74:89:2b:b5:94:76:7a:f0:a1: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.49.0/24 103.162.252.0/24 Signature Algorithm: sha256WithRSAEncryption 82:3b:ee:c1:3e:5e:41:c1:be:d9:a0:59:aa:c5:bf:56:23:e8: 6f:9e:21:35:ef:3f:06:40:ca:02:42:c8:0e:79:27:a3:81:ba: 9d:46:87:ca:6d:29:77:d7:e4:fb:98:bd:5c:86:49:65:55:9e: ec:90:9d:09:f6:96:6d:d4:11:6a:1f:d4:4f:4a:87:73:db:16: e1:af:9d:4a:1f:a1:32:d2:db:b8:47:26:61:c6:c3:96:00:6c: 6c:46:fd:06:84:55:fb:be:05:4b:df:3b:a7:ba:ec:99:ef:47: 34:85:48:ae:d9:37:8c:81:4c:fb:ef:99:f4:e6:ba:c1:cc:6e: 19:36:24:2d:4d:3d:33:64:2e:c8:94:de:70:dc:bb:2d:78:30: c7:cf:64:6b:2e:a5:9f:85:65:b5:82:5c:0c:51:ef:88:b0:87: 09:5d:38:87:22:c2:ee:91:2a:88:c2:bf:8b:19:d5:b1:d8:ae: 66:bb:dd:63:ee:16:6f:f6:1a:99:3d:e6:e1:bd:96:e5:d0:2e: c7:a0:bf:77:ea:7e:9a:7f:82:ef:13:9d:eb:56:0d:e8:37:6c: d9:50:2b:de:08:0d:73:a1:e5:4f:57:94:88:69:99:d4:49:14: a8:5b:7b:2c:06:3d:30:4e:8e:ad:9d:07:7a:41:29:78:bb:15: 39:ed:a7:ea -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUWSiroYyeKQMiJBiyz4ctwTMCFHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNzA2MDAxMFoX DTI0MTIyNTA2MDUxMFowMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYw NkUzQ0EzMTAxMzQyMTgyNzM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxr6poVYfeli8pYNYDW5kjj1BaYEIrP4pQZaUAip7PDXDvF1GtO7k1jTaP tEIQIJks7/7yG0CnHWwbIZnKL8/6ILGyNMjsqZrpKTjfy6qs2WknErkX2sAiXwgA JOeus9/zs9+IDyYclrbi4mtFtDYCq4iSUbUDUr89jmvjZscoElcfOFRvs8yN8xhz iOcF87nRni0QcAg4/Nm9KypoAw/JniuH9KgXHlAlisDU9waJJSmL2z76QVNfovEO HxBHMSpUa9ioFzS8+gNPvxjSPzVeOsoPzB36F0YNlqY9B5lBkBnIM67zaFe1fbp1 CKFetsEPhzbIdIkrtZR2evChDaMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP5Hlj+24T78MYYG48oxATQhgnNDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY4NDY2ODg5 LWMxZWYtNDQxMC1hZDljLTMwNmMwOWUxYmUwNi8wL0ZFNDc5NjNGQjZFMTNFRkMz MTg2MDZFM0NBMzEwMTM0MjE4MjczNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnQzEDBABnovwwDQYJKoZIhvcNAQELBQADggEBAII77sE+XkHBvtmgWarFv1Yj 6G+eITXvPwZAygJCyA55J6OBup1Gh8ptKXfX5PuYvVyGSWVVnuyQnQn2lm3UEWof 1E9Kh3PbFuGvnUofoTLS27hHJmHGw5YAbGxG/QaEVfu+BUvfO6e67JnvRzSFSK7Z N4yBTPvvmfTmusHMbhk2JC1NPTNkLsiU3nDcuy14MMfPZGsupZ+FZbWCXAxR74iw hwldOIciwu6RKojCv4sZ1bHYrma73WPuFm/2Gpk95uG9luXQLsegv3fqfpp/gu8T netWDeg3bNlQK94IDXOh5U9XlIhpmdRJFKhbeywGPTBOjq2dB3pBKXi7FTntp+o= -----END CERTIFICATE-----Generated at Thu May 9 00:29:19 2024 by rpki-client on console-ams.rpki-client.org