$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer (raw, json) Hash identifier: Mk2uziX+BNB7TrT67A3yIAjG8WxLd78Jy6g6G9LhJB8= Subject key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 519F3D67537A2286D30D4194C78D57F7A006BC57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft caRepository: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 22:46:19 +0000 Certificate not after: Sun 28 Jul 2024 22:51:19 +0000 Subordinate resources: IP: 103.102.12.0/22 IP: 2401:db40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9f:3d:67:53:7a:22:86:d3:0d:41:94:c7:8d:57:f7:a0:06:bc:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 22:46:19 2023 GMT Not After : Jul 28 22:51:19 2024 GMT Subject: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:5f:50:24:b2:db:05:2b:92:79:49:03:03: 9f:0b:3c:fd:03:48:56:ca:b7:13:88:fa:44:df:0d: d6:b4:39:57:72:1a:95:93:b0:96:1e:99:6d:f6:ce: be:49:f1:39:0e:cf:7a:0d:d3:9d:e5:4f:ad:2b:01: 15:75:f1:7e:46:b7:71:64:b4:40:6f:ff:0d:2a:bd: 4c:4e:6e:e1:09:50:56:a9:53:11:cb:9a:59:74:af: 01:be:e4:76:4d:ce:c7:8d:64:71:c4:38:02:92:3c: 7f:54:18:f8:9f:34:82:f5:ee:bc:e8:ad:ec:98:ae: cf:1a:b8:f6:26:58:e0:8c:18:66:c4:23:3e:4b:17: 44:a2:d8:2b:2b:91:52:69:03:eb:6e:a6:80:1d:86: 1f:fd:25:f7:a6:12:c5:c6:3c:87:1b:65:84:aa:33: db:37:bd:ec:eb:ea:c5:df:92:af:bf:1f:d9:ec:84: 6f:36:2c:3f:07:8f:df:a8:43:52:dc:3e:ad:5b:62: 22:87:4a:4f:f5:af:17:6a:8d:4b:5c:79:3c:23:55: b4:ea:e0:e4:b1:cf:a1:0b:bd:9c:59:7e:a6:07:4e: 99:fc:d1:34:8e:6b:b2:a9:56:62:77:88:35:83:9f: c6:52:60:39:19:c2:18:15:55:5d:b9:fc:e7:e5:fb: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.12.0/22 IPv6: 2401:db40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:26:65:9d:24:e2:75:d7:a0:3c:83:61:21:c8:e1:1c:91:80: 3d:f5:77:60:02:5c:ff:77:3c:de:a0:82:f5:09:f5:f7:7b:bf: 73:68:98:1a:e0:24:15:c3:19:d1:e4:87:c8:3d:c6:04:75:0e: 83:4c:49:1d:2d:e8:fd:2a:03:33:ce:37:d8:b2:46:ba:b7:72: a9:bf:2c:82:83:9a:3e:36:fd:09:57:63:00:96:a9:63:71:53: b5:8f:42:e5:82:86:b6:1c:bf:6a:4d:ab:a2:f5:74:25:e1:ef: ec:71:db:8d:7e:cf:2c:0c:97:3a:15:57:63:d4:3c:fa:5f:0a: de:13:5b:08:b2:4a:95:4b:96:19:2a:f0:ef:58:70:1a:aa:6a: 2b:5e:21:2e:17:5e:f6:b4:e3:f6:56:7e:bd:9e:3e:6f:9e:48: c6:80:ae:35:0a:33:3d:d7:fd:23:f4:d8:1e:d9:87:b6:e5:b5: 67:2f:7b:ae:f5:b3:fd:83:b3:60:5d:b8:d3:4c:31:16:44:6c: 80:c4:42:d3:93:be:5d:1f:c0:a8:7c:3a:dc:6b:f3:af:8b:e1: ee:f3:9d:b5:d3:c0:92:41:e0:ca:ed:3e:46:2f:df:d2:cc:a0: 16:eb:31:21:f9:e9:72:f5:42:11:54:a7:fa:8a:4a:3a:c3:43: f7:b9:c3:18 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUUZ89Z1N6IobTDUGUx41X96AGvFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIyNDYxOVoX DTI0MDcyODIyNTExOVowMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1 QTNFMzZBMkFDQjE4N0Y2M0MyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjkX1AkstsFK5J5SQMDnws8/QNIVsq3E4j6RN8N1rQ5V3IalZOwlh6ZbfbO vknxOQ7Peg3TneVPrSsBFXXxfka3cWS0QG//DSq9TE5u4QlQVqlTEcuaWXSvAb7k dk3Ox41kccQ4ApI8f1QY+J80gvXuvOit7Jiuzxq49iZY4IwYZsQjPksXRKLYKyuR UmkD626mgB2GH/0l96YSxcY8hxtlhKoz2ze97Ovqxd+Sr78f2eyEbzYsPweP36hD Utw+rVtiIodKT/WvF2qNS1x5PCNVtOrg5LHPoQu9nFl+pgdOmfzRNI5rsqlWYneI NYOfxlJgORnCGBVVXbn85+X7ktECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAh3MZH7/CGjyGFaPjairLGH9jwlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmODZiMTJl LWU1NzQtNDI2Yi1hYTZiLTQ5MzllM2IwMzBiYS8wLzA4NzczMTkxRkJGQzIxQTND ODYxNUEzRTM2QTJBQ0IxODdGNjNDMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnZgwwDQQCAAIwBwMFACQB20AwDQYJKoZIhvcNAQELBQADggEBABsmZZ0k4nXX oDyDYSHI4RyRgD31d2ACXP93PN6ggvUJ9fd7v3NomBrgJBXDGdHkh8g9xgR1DoNM SR0t6P0qAzPON9iyRrq3cqm/LIKDmj42/QlXYwCWqWNxU7WPQuWChrYcv2pNq6L1 dCXh7+xx241+zywMlzoVV2PUPPpfCt4TWwiySpVLlhkq8O9YcBqqaiteIS4XXva0 4/ZWfr2ePm+eSMaArjUKMz3X/SP02B7Zh7bltWcve671s/2Ds2BduNNMMRZEbIDE QtOTvl0fwKh8Otxr86+L4e7znbXTwJJB4MrtPkYv39LMoBbrMSH56XL1QhFUp/qK SjrDQ/e5wxg= -----END CERTIFICATE-----Generated at Sun May 5 09:49:33 2024 by rpki-client on console-fra.rpki-client.org