$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer (raw, json) Hash identifier: 56LEGzk2ASK+CDcxiTmiudWBUpywOZNq12mZQfJhS4M= Subject key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 019086CBE57E74D68407C773E2319872AEA68748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft caRepository: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:58:07 +0000 Certificate not after: Mon 29 Jul 2024 05:03:07 +0000 Subordinate resources: IP: 103.148.198.0/23 IP: 2001:df2:e880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:86:cb:e5:7e:74:d6:84:07:c7:73:e2:31:98:72:ae:a6:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:58:07 2023 GMT Not After : Jul 29 05:03:07 2024 GMT Subject: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:5e:00:ef:92:a0:ef:aa:b9:32:6a:21:7a: 28:e4:e7:f0:cc:0c:b9:aa:93:7e:dd:b5:45:b7:26: fc:77:51:31:51:59:4a:ff:2f:17:b4:66:98:d6:76: 06:61:58:0d:9c:f7:e5:3f:82:fe:8a:3e:ba:bc:90: 71:40:1d:47:06:b8:f6:bc:17:6a:55:3a:ce:d0:08: b5:82:24:34:66:d5:c6:48:c0:d3:de:16:fe:57:91: 4f:ec:5a:11:08:18:fe:be:f6:e8:ab:44:64:cc:fa: a0:c5:0f:9b:ff:23:8c:a1:86:f7:3c:a9:b0:2a:86: d8:f3:39:f0:19:c4:c6:65:a0:d6:99:17:01:53:14: 1f:7f:04:b3:fd:56:a8:f0:53:3a:df:1d:81:10:90: eb:5f:37:9e:f8:d8:30:a0:2e:c4:3e:fc:73:98:21: 14:96:46:ca:9a:4a:8b:62:c1:da:4e:cf:ef:62:7f: 6a:91:4c:35:fb:a7:4f:04:93:7e:31:61:1c:a0:56: f9:5c:3a:cc:75:e7:ea:dd:74:db:af:5d:3f:91:93: 3f:33:c6:ba:78:31:de:f2:30:90:33:0e:50:9e:30: 81:df:1f:76:16:01:96:82:8d:d2:18:e6:f2:11:06: ba:62:13:ec:4a:a8:0b:16:34:f4:68:f8:2a:55:b8: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/23 IPv6: 2001:df2:e880::/48 Signature Algorithm: sha256WithRSAEncryption 47:46:e2:24:31:90:cd:8d:6a:f6:b8:f4:9a:ba:4b:21:99:85: 73:ca:af:19:97:4f:47:a9:5d:d1:6b:fa:b5:7b:03:b7:b8:73: 95:88:9b:d6:a3:cc:25:a4:7b:b8:01:6f:2f:49:5c:58:1c:84: 2e:58:21:d2:c1:75:6f:4c:8d:a7:de:bb:bf:77:ed:d3:ee:89: f1:53:91:0a:6f:e8:cc:aa:71:e4:b1:73:ca:b2:5b:72:fe:6c: b2:e4:5e:5f:3d:c7:5f:95:ad:26:e6:49:7e:e7:45:4e:58:ed: d7:b6:0c:56:30:29:84:71:d4:9a:70:cc:78:49:92:75:c5:72: 80:d1:ad:07:93:de:6b:56:c2:49:a0:82:49:ba:1f:92:a5:bd: 18:e5:d5:e3:32:41:67:a7:13:e7:f9:b4:a0:d0:a6:48:5f:c5: a0:e5:33:7b:8e:32:62:41:00:a5:a3:cf:ca:cb:21:40:44:51: a8:3d:88:8b:52:01:0c:c9:1f:4b:80:09:ff:b6:b4:5f:37:fc: d4:79:6f:8a:b7:62:62:f3:c6:d9:1a:11:3f:a2:2b:3a:8b:68: c8:d8:3b:b1:29:a3:b9:1e:94:b0:c5:b0:8c:18:09:f4:91:62: 2a:cd:b6:eb:a4:ee:fc:66:7d:9b:3f:5d:af:4c:3b:0a:43:2b: 98:b2:e3:79 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUAZCGy+V+dNaEB8dz4jGYcq6mh0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0NTgwN1oX DTI0MDcyOTA1MDMwN1owMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4 ODAwQzMxN0I4REY3RjFBQkY0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9yXgDvkqDvqrkyaiF6KOTn8MwMuaqTft21Rbcm/HdRMVFZSv8vF7RmmNZ2 BmFYDZz35T+C/oo+uryQcUAdRwa49rwXalU6ztAItYIkNGbVxkjA094W/leRT+xa EQgY/r726KtEZMz6oMUPm/8jjKGG9zypsCqG2PM58BnExmWg1pkXAVMUH38Es/1W qPBTOt8dgRCQ6183nvjYMKAuxD78c5ghFJZGyppKi2LB2k7P72J/apFMNfunTwST fjFhHKBW+Vw6zHXn6t10269dP5GTPzPGungx3vIwkDMOUJ4wgd8fdhYBloKN0hjm 8hEGumIT7EqoCxY09Gj4KlW4XLMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjQfwENooESqU6IAMMXuN9/Gr9DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNi LTFmNDAtNGMwMy1iYzM1LWY2OTYxNTE2ZDRkOS8wLzA4RDA3RjAxMERBMjgxMTJB OTRFODgwMEMzMTdCOERGN0YxQUJGNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlMYwDwQCAAIwCQMHACABDfLogDANBgkqhkiG9w0BAQsFAAOCAQEAR0biJDGQ zY1q9rj0mrpLIZmFc8qvGZdPR6ld0Wv6tXsDt7hzlYib1qPMJaR7uAFvL0lcWByE Llgh0sF1b0yNp967v3ft0+6J8VORCm/ozKpx5LFzyrJbcv5ssuReXz3HX5WtJuZJ fudFTljt17YMVjAphHHUmnDMeEmSdcVygNGtB5Pea1bCSaCCSbofkqW9GOXV4zJB Z6cT5/m0oNCmSF/FoOUze44yYkEApaPPysshQERRqD2Ii1IBDMkfS4AJ/7a0Xzf8 1HlvirdiYvPG2RoRP6IrOotoyNg7sSmjuR6UsMWwjBgJ9JFiKs2266Tu/GZ9mz9d r0w7CkMrmLLjeQ== -----END CERTIFICATE-----Generated at Wed May 1 22:50:25 2024 by rpki-client on console-ams.rpki-client.org