$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer (raw, json) Hash identifier: JMl6GrmVoPnJjluj4FZvdYzhEhppsPewrvA+cXrlvAs= Subject key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3EEFA84B6F76436D8A450FA0A9A5250DC262E004 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft caRepository: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 21:58:13 +0000 Certificate not after: Sun 28 Jul 2024 22:03:13 +0000 Subordinate resources: IP: 103.247.12.0/22 IP: 121.101.128.0/21 IP: 2402:e300::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ef:a8:4b:6f:76:43:6d:8a:45:0f:a0:a9:a5:25:0d:c2:62:e0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 21:58:13 2023 GMT Not After : Jul 28 22:03:13 2024 GMT Subject: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:df:5d:18:71:f4:dc:be:a7:e3:09:63:56: ba:8e:07:b2:a5:ee:ef:52:9c:3e:90:28:ec:ef:1f: 0b:2c:a5:28:a9:28:b1:83:55:96:9d:c8:7d:87:da: ef:e9:75:65:23:26:ad:4f:9b:76:ba:1a:2c:1e:d0: e0:99:ef:5d:f7:2f:dd:36:10:2c:7c:58:a8:6e:d8: 4b:d3:cb:b0:e2:d8:4d:53:45:13:c0:5e:ea:f8:10: 2f:17:5c:18:e7:af:9e:93:7f:8a:d3:67:eb:82:02: f0:fd:bd:6b:5f:0e:55:db:3d:1e:ce:98:a9:59:b3: e6:4e:f9:7d:ba:a9:fa:34:86:df:d0:4c:bc:d0:89: 57:a5:6e:48:36:ca:28:42:aa:d4:af:62:04:f1:8c: 8d:fa:ed:42:89:5b:9c:a4:99:dc:16:70:48:6e:4a: 77:ef:08:6b:93:67:f7:8d:94:7e:f6:6e:81:58:f7: 06:d5:ae:8a:db:bf:05:44:42:be:3c:7a:dc:8f:80: 4a:c4:81:53:0c:17:2a:47:9f:6b:6b:3a:fd:5a:ce: be:96:27:b9:b1:e5:db:be:d6:e0:ef:6a:51:ee:bc: 2c:54:b9:71:f2:ec:a0:2c:00:b9:f5:96:85:6b:21: 0e:0f:2c:5f:f0:cd:12:85:de:a9:47:be:e3:69:03: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.12.0/22 121.101.128.0/21 IPv6: 2402:e300::/32 Signature Algorithm: sha256WithRSAEncryption 69:26:4b:39:da:e1:da:d3:c1:5a:f3:7e:c6:5c:21:8d:46:92: 28:58:44:25:85:f6:39:5b:df:00:7b:2b:2c:d9:b3:1f:8e:e0: 10:fc:fe:83:42:90:54:90:1b:28:15:cc:22:b6:e1:28:f1:4e: c6:58:47:68:b8:9d:59:c6:9f:93:8f:14:86:ae:42:41:e9:74: 77:fc:a3:ed:83:b2:03:5a:6a:bf:af:58:e9:bf:ec:3d:53:23: e1:e4:b5:1d:76:8a:62:be:2f:50:37:b9:8c:c5:f3:2f:bd:51: fb:39:8e:cf:b2:b1:ea:6f:6e:9b:0d:4a:cb:33:7a:ec:ed:3a: 83:58:f1:77:8e:81:61:18:63:28:3a:30:9c:c5:c2:6a:4f:62: 20:91:33:f9:de:15:b9:52:ec:4d:44:6b:d5:84:dc:fb:97:e8: 75:18:ae:9e:75:64:51:73:01:bf:d2:74:9e:21:90:c9:0b:f8: c1:f4:d0:c4:1f:f3:d7:97:99:ae:2d:d4:83:82:40:4b:94:65: c3:d0:00:7b:9c:43:20:dd:87:b5:48:ff:06:6d:3b:0e:92:1c: 83:b3:24:23:5e:f0:33:bd:1a:54:59:dc:76:2a:96:23:bd:c4: 9f:fc:2a:fa:85:e5:31:3e:93:ee:d1:79:d9:64:f9:ca:b1:da: 04:ac:8c:48 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUPu+oS292Q22KRQ+gqaUlDcJi4AQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIxNTgxM1oX DTI0MDcyODIyMDMxM1owMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdF OTFGQ0VFMzA0NjU1NjNERkU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2h310YcfTcvqfjCWNWuo4HsqXu71KcPpAo7O8fCyylKKkosYNVlp3IfYfa 7+l1ZSMmrU+bdroaLB7Q4JnvXfcv3TYQLHxYqG7YS9PLsOLYTVNFE8Be6vgQLxdc GOevnpN/itNn64IC8P29a18OVds9Hs6YqVmz5k75fbqp+jSG39BMvNCJV6VuSDbK KEKq1K9iBPGMjfrtQolbnKSZ3BZwSG5Kd+8Ia5Nn942UfvZugVj3BtWuitu/BURC vjx63I+ASsSBUwwXKkefa2s6/VrOvpYnubHl277W4O9qUe68LFS5cfLsoCwAufWW hWshDg8sX/DNEoXeqUe+42kDvRkCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI3tq60hrRpr7yfpH87jBGVWPf5yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyN2E2ZjM0 LTFiNmUtNGU5Mi1iMmQyLTBiOTMwMWE2NjZhNS8wLzhERURBQkFEMjFBRDFBNkJF RjI3RTkxRkNFRTMwNDY1NTYzREZFNzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJn9wwDBAN5ZYAwDQQCAAIwBwMFACQC4wAwDQYJKoZIhvcNAQELBQADggEBAGkm Szna4drTwVrzfsZcIY1GkihYRCWF9jlb3wB7KyzZsx+O4BD8/oNCkFSQGygVzCK2 4SjxTsZYR2i4nVnGn5OPFIauQkHpdHf8o+2DsgNaar+vWOm/7D1TI+HktR12imK+ L1A3uYzF8y+9Ufs5js+ysepvbpsNSsszeuztOoNY8XeOgWEYYyg6MJzFwmpPYiCR M/neFblS7E1Ea9WE3PuX6HUYrp51ZFFzAb/SdJ4hkMkL+MH00MQf89eXma4t1IOC QEuUZcPQAHucQyDdh7VI/wZtOw6SHIOzJCNe8DO9GlRZ3HYqliO9xJ/8KvqF5TE+ k+7Redlk+cqx2gSsjEg= -----END CERTIFICATE-----Generated at Fri May 3 04:42:23 2024 by rpki-client on console-fra.rpki-client.org