$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.cer (raw, json) Hash identifier: XcYiRZN6WvYoDaa75uWP2ZmyVKkQCpTaCOBqqILqpZE= Subject key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F1A396ADB30E3E097CC8443F5A93F61468EBE01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft caRepository: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:05:29 +0000 Certificate not after: Mon 29 Jul 2024 09:10:29 +0000 Subordinate resources: IP: 103.95.160.0/23 IP: 2001:df1:b100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:39:6a:db:30:e3:e0:97:cc:84:43:f5:a9:3f:61:46:8e:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:05:29 2023 GMT Not After : Jul 29 09:10:29 2024 GMT Subject: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:e8:f7:b2:fb:05:d8:9c:1e:59:b8:c9:e0: 16:3a:a1:12:83:f5:7c:f8:0f:32:c3:90:68:d8:d8: c1:6f:9f:5a:18:51:01:c2:7b:e2:56:dd:e9:60:28: f8:b6:8d:08:55:a3:a2:d7:55:56:6d:9a:e9:f6:d0: 98:1d:b2:fb:0b:0d:2f:b6:93:f5:e5:8d:ac:49:86: 31:ab:85:5d:0c:5c:81:0f:b6:1c:08:f3:f7:8a:39: 93:a9:54:43:d8:38:b7:79:bc:27:e3:f5:87:33:0c: 55:76:0f:2e:d0:fe:0e:15:05:1e:db:4c:d3:17:62: 43:e6:3f:51:5e:dc:5a:7e:96:58:89:43:78:ed:7e: 99:df:77:10:12:f5:a2:01:12:65:6f:a0:f2:7e:98: b1:c0:6f:b7:67:75:c9:29:ea:a5:aa:44:d0:c3:7b: 6b:da:08:7b:cd:08:53:c6:19:b7:a8:6b:52:b3:8c: 01:67:f0:a5:10:1f:b1:f1:bd:7f:84:2f:64:6c:6a: 68:d9:1f:a8:85:d1:bb:13:1b:8b:7f:a4:df:17:bb: cb:d0:4f:bd:66:8e:a3:ba:1f:38:5a:39:34:d7:23: 10:24:84:cc:0b:83:2d:e4:c7:4a:89:de:f8:e3:21: cf:7c:56:fe:e9:f6:cc:81:aa:21:3b:1b:f5:f6:b8: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.160.0/23 IPv6: 2001:df1:b100::/48 Signature Algorithm: sha256WithRSAEncryption 92:c4:9c:fb:df:1a:45:f1:62:98:2f:9b:99:12:8c:83:f1:6b: 12:ee:a1:7b:33:7a:72:f9:79:fa:20:56:31:16:25:ec:91:71: 7f:3f:7c:50:46:51:0d:a9:83:ec:8e:7b:ad:e1:67:50:e7:24: 27:75:94:6d:66:8b:7d:48:7c:b0:f2:a8:91:3c:29:5a:da:bf: 76:dd:b0:3a:1f:6a:b4:69:9b:75:e9:ee:06:72:39:29:1c:80: b2:5a:bc:54:79:07:9f:59:8c:cb:2a:0c:18:11:61:9b:82:3f: 56:06:22:fd:79:30:d7:58:ef:a6:27:fd:c4:72:2d:d6:54:97: 02:77:a1:7b:ce:86:c5:e1:96:a4:ab:2a:2e:02:a5:3c:ba:66: f7:31:0e:a0:e5:0b:89:bc:cf:3c:4d:21:3c:ea:7b:dc:90:0b: 52:b9:71:f4:f1:4e:ea:00:b8:59:98:3a:57:60:d9:7d:99:64: 51:f5:ce:6a:13:64:82:d0:9c:63:d6:a8:e1:7d:6d:fc:e6:93: f9:63:14:59:4a:c9:46:fd:31:72:bf:66:58:ff:5d:50:7b:ca: 01:c2:f7:ae:17:9f:7e:a5:86:66:55:d6:1a:60:e6:a7:cd:0c: d1:51:f7:ee:a3:c8:c2:eb:db:0a:d3:8f:be:7b:8a:56:4b:c2: f2:4e:eb:e4 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHxo5atsw4+CXzIRD9ak/YUaOvgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5MDUyOVoX DTI0MDcyOTA5MTAyOVowMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEy RUE3MEZFMDEyQTRBRjEzNEM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUE6Pey+wXYnB5ZuMngFjqhEoP1fPgPMsOQaNjYwW+fWhhRAcJ74lbd6WAo +LaNCFWjotdVVm2a6fbQmB2y+wsNL7aT9eWNrEmGMauFXQxcgQ+2HAjz94o5k6lU Q9g4t3m8J+P1hzMMVXYPLtD+DhUFHttM0xdiQ+Y/UV7cWn6WWIlDeO1+md93EBL1 ogESZW+g8n6YscBvt2d1ySnqpapE0MN7a9oIe80IU8YZt6hrUrOMAWfwpRAfsfG9 f4QvZGxqaNkfqIXRuxMbi3+k3xe7y9BPvWaOo7ofOFo5NNcjECSEzAuDLeTHSone +OMhz3xW/un2zIGqITsb9fa4sAcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI7uBYSyJKlZFVEupw/gEqSvE0x6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzVkMzcx LTE4YzctNDhkZi04ZjYxLTFkNDA0YjY0NjQxMy8wLzhFRUUwNTg0QjIyNEE5NTkx NTUxMkVBNzBGRTAxMkE0QUYxMzRDN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnX6AwDwQCAAIwCQMHACABDfGxADANBgkqhkiG9w0BAQsFAAOCAQEAksSc+98a RfFimC+bmRKMg/FrEu6hezN6cvl5+iBWMRYl7JFxfz98UEZRDamD7I57reFnUOck J3WUbWaLfUh8sPKokTwpWtq/dt2wOh9qtGmbdenuBnI5KRyAslq8VHkHn1mMyyoM GBFhm4I/VgYi/Xkw11jvpif9xHIt1lSXAnehe86GxeGWpKsqLgKlPLpm9zEOoOUL ibzPPE0hPOp73JALUrlx9PFO6gC4WZg6V2DZfZlkUfXOahNkgtCcY9ao4X1t/OaT +WMUWUrJRv0xcr9mWP9dUHvKAcL3rheffqWGZlXWGmDmp80M0VH37qPIwuvbCtOP vnuKVkvC8k7r5A== -----END CERTIFICATE-----Generated at Thu Apr 25 16:38:59 2024 by rpki-client on console-ams.rpki-client.org