$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer (raw, json) Hash identifier: H67yj8E6lDKj00SQWQ9EN/ygWHsC8/W7zPKWVPMxVFU= Subject key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59544B37F971010A71AD342DD2FDFED46B22DDBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 25 Jan 2024 14:52:34 +0000 Certificate not after: Thu 23 Jan 2025 14:57:34 +0000 Subordinate resources: IP: 103.162.141.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:54:4b:37:f9:71:01:0a:71:ad:34:2d:d2:fd:fe:d4:6b:22:dd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 25 14:52:34 2024 GMT Not After : Jan 23 14:57:34 2025 GMT Subject: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:6e:8b:32:86:32:7b:e8:2d:88:c0:ad:aa: 9b:46:01:b0:65:3a:a7:6b:9b:1b:bc:d7:d6:af:e2: b0:79:2c:07:a5:a9:0a:3c:23:72:63:ce:92:d8:a8: 10:4e:5a:2c:e2:96:70:94:dc:6f:7c:a9:a0:18:b3: 3f:c6:3f:10:57:45:42:08:58:71:8e:ad:7e:a6:dd: 9c:90:9f:86:de:99:e1:a8:3f:46:e4:47:41:ea:83: d1:90:df:56:5f:52:5a:b9:c9:ef:b4:ce:83:e5:1f: 43:d1:53:c5:45:d8:6a:bf:18:1b:72:dc:9f:07:6f: 43:0a:6e:89:27:ca:e2:17:3a:b4:23:20:2b:65:de: 94:2f:fc:4c:fe:41:77:62:1d:6d:80:eb:fe:13:fa: 60:27:8d:9f:dd:ac:2c:c9:96:f1:ae:ee:96:cd:29: d3:3f:cc:7f:ce:52:24:0a:d1:e8:6f:3a:a9:c0:98: da:b3:02:01:d3:db:63:00:d6:53:ca:2a:d4:1b:b7: a9:3d:e0:09:01:f4:8c:3f:62:23:aa:38:9a:61:ba: b9:46:af:f0:2e:f2:db:cb:94:19:b0:6b:8c:4f:d6: 36:b0:f2:f7:7e:ee:f8:a5:fb:0f:af:a8:94:17:0f: 13:85:18:d9:88:32:e9:c1:b3:37:d7:9f:fc:16:95: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.141.0/24 Signature Algorithm: sha256WithRSAEncryption 41:83:77:93:09:b3:ab:29:48:73:d4:d3:c6:b9:43:7a:b3:6b: 99:26:09:e2:b4:9a:70:bd:d4:6c:94:13:cc:8b:83:ba:86:02: ed:be:c5:9f:93:5a:cf:9d:b8:0a:99:4c:1a:59:2f:7d:aa:31: b7:a2:ea:26:5e:0d:6e:06:bc:6f:cf:51:0d:c3:51:d9:fd:7f: 5e:38:ce:2e:53:36:c6:e4:12:6c:50:76:f5:15:19:78:04:49: c4:7b:9e:33:f4:fd:53:f0:56:69:71:02:09:e7:4a:75:ad:0f: a0:ed:71:27:70:96:5c:07:e2:32:f4:c7:9d:27:e7:6b:b8:e1: 4d:9a:e1:47:23:d9:57:eb:2b:f5:9d:b6:d2:48:76:9a:c4:33: 2c:f3:3d:50:15:8a:e1:db:2a:e4:18:cf:ab:c2:93:e2:78:bf: a3:f8:b1:e8:3f:2d:d4:0a:03:bb:a9:16:22:5e:56:59:98:11: 3d:84:2f:81:34:57:0c:c4:bd:1d:e8:0d:99:64:b0:9a:5a:5a: 45:75:68:6d:9c:fe:71:5f:eb:cd:f7:06:e3:45:96:69:58:f9: d4:11:ad:ba:ec:cc:ab:6b:e3:12:f5:81:a8:00:ef:78:50:99: 68:d9:3e:1a:85:d6:b9:5b:03:bb:74:32:e7:c4:a1:8d:79:e4: f6:33:90:1d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWVRLN/lxAQpxrTQt0v3+1Gsi3bowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyNTE0NTIzNFoX DTI1MDEyMzE0NTczNFowMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4 ODdEODZEQTJDN0NDNzQ2MEI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8tbosyhjJ76C2IwK2qm0YBsGU6p2ubG7zX1q/isHksB6WpCjwjcmPOktio EE5aLOKWcJTcb3ypoBizP8Y/EFdFQghYcY6tfqbdnJCfht6Z4ag/RuRHQeqD0ZDf Vl9SWrnJ77TOg+UfQ9FTxUXYar8YG3LcnwdvQwpuiSfK4hc6tCMgK2XelC/8TP5B d2IdbYDr/hP6YCeNn92sLMmW8a7uls0p0z/Mf85SJArR6G86qcCY2rMCAdPbYwDW U8oq1Bu3qT3gCQH0jD9iI6o4mmG6uUav8C7y28uUGbBrjE/WNrDy937u+KX7D6+o lBcPE4UY2Ygy6cGzN9ef/BaVg2MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP+Ue+GI01nqft+IfYbaLHzHRgtwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YTkyMzdh LTcyNmMtNGMxOS05YjRlLTdiOTRiMTQyNGM0Yi8wL0ZGOTQ3QkUxODhEMzU5RUE3 RURGODg3RDg2REEyQzdDQzc0NjBCNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoo0wDQYJKoZIhvcNAQELBQADggEBAEGDd5MJs6spSHPU08a5Q3qza5kmCeK0 mnC91GyUE8yLg7qGAu2+xZ+TWs+duAqZTBpZL32qMbei6iZeDW4GvG/PUQ3DUdn9 f144zi5TNsbkEmxQdvUVGXgEScR7njP0/VPwVmlxAgnnSnWtD6DtcSdwllwH4jL0 x50n52u44U2a4Ucj2VfrK/WdttJIdprEMyzzPVAViuHbKuQYz6vCk+J4v6P4seg/ LdQKA7upFiJeVlmYET2EL4E0VwzEvR3oDZlksJpaWkV1aG2c/nFf6833BuNFlmlY +dQRrbrszKtr4xL1gagA73hQmWjZPhqF1rlbA7t0MufEoY155PYzkB0= -----END CERTIFICATE-----Generated at Wed May 8 04:38:03 2024 by rpki-client on console-fra.rpki-client.org