$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer (raw, json) Hash identifier: v2Z+JrB0/5So25GR487h6ySsxqA50k8m9QqNCJyMtzE= Subject key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35BF4F157DA75153BEE8F6191E64C6D3B8669482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft caRepository: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:08:22 +0000 Certificate not after: Mon 29 Jul 2024 03:13:22 +0000 Subordinate resources: IP: 103.146.62.0/23 IP: 2001:df2:4b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bf:4f:15:7d:a7:51:53:be:e8:f6:19:1e:64:c6:d3:b8:66:94:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:08:22 2023 GMT Not After : Jul 29 03:13:22 2024 GMT Subject: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:af:58:e6:54:b8:ec:0f:14:79:d4:10:90: 0f:40:3f:94:3a:e2:b0:5f:fa:f7:b2:86:7c:e2:68: f2:d8:8b:23:93:dc:0c:9c:43:51:ed:ad:c5:89:0d: cf:af:fe:82:be:e1:78:27:fb:33:9e:cf:22:ed:2c: d3:3d:1b:71:70:4a:e7:e9:b0:91:e6:02:a6:63:a0: d9:8b:af:2b:4d:aa:02:da:cf:ed:55:6a:06:8b:34: a0:93:0c:7c:e1:57:3f:8e:78:3a:62:2c:d6:8e:46: af:16:c0:e9:35:5d:d6:0b:83:ea:91:4d:47:7b:e0: b0:3f:aa:cd:04:22:3a:59:42:fa:e8:55:96:ee:18: 88:c1:cc:69:95:f8:da:4a:29:db:1c:7f:4d:98:f7: 8b:57:81:3c:86:c3:98:c5:df:6c:f6:ea:df:1e:e6: 6c:dc:66:d9:0f:67:e0:4f:d5:81:47:b0:33:3a:bb: fa:79:09:2b:6a:a9:1a:24:77:64:d9:d3:63:3a:12: c6:69:f9:d9:5b:d2:93:e9:85:fd:81:85:7c:53:99: 86:65:54:f3:2d:80:c2:00:9a:f0:48:d2:96:9a:82: f4:08:6a:60:9b:06:7e:09:4b:09:71:5e:00:40:52: 35:76:24:cd:5b:b5:eb:35:99:58:aa:41:28:b2:b0: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.62.0/23 IPv6: 2001:df2:4b80::/48 Signature Algorithm: sha256WithRSAEncryption 87:ac:83:cf:f0:97:4d:03:71:2d:5d:9a:8a:cf:79:10:79:84: 3d:b5:f4:30:4f:0b:da:bc:61:1e:04:b5:a9:6a:05:57:63:33: 53:25:75:52:d0:6f:55:e5:73:5c:c2:1c:cb:8f:ee:0e:13:f1: 8a:d2:49:15:da:e3:fc:a4:a8:59:28:ee:8e:fb:c2:1a:1d:eb: 98:f0:b0:fe:e5:3a:37:59:be:7f:5f:13:f6:bc:2d:8a:cf:00: 2e:51:84:61:c3:3c:5b:74:ea:71:56:60:39:ca:12:6d:d3:65: b1:f7:63:70:79:7f:f6:04:f9:7b:8b:85:fc:5b:f6:4d:a5:86: ea:2e:50:37:88:48:61:4b:6e:67:cd:aa:17:fa:3a:be:af:71: 84:21:65:3e:29:31:6c:9b:ec:5b:1c:96:c2:a5:c7:55:3d:03: e5:a3:06:c3:ad:c6:50:95:84:5a:9b:22:17:34:c6:7e:82:ba: 42:16:4e:c5:cf:9e:9b:21:07:4b:d4:cb:36:7e:cf:49:d9:24: 76:69:c4:ca:27:fc:4e:e4:6d:be:90:09:07:c0:72:21:9e:5e: 24:5b:3f:6e:89:49:d4:08:2f:50:f9:20:27:a4:aa:27:ab:64: ac:5c:64:16:91:18:52:59:5f:e5:17:8a:40:36:65:0f:bd:2e: 8c:b6:1f:65 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUNb9PFX2nUVO+6PYZHmTG07hmlIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMDgyMloX DTI0MDcyOTAzMTMyMlowMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFB MkIzMUZBREM4Q0RGRkM5Q0MxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHEr1jmVLjsDxR51BCQD0A/lDrisF/697KGfOJo8tiLI5PcDJxDUe2txYkN z6/+gr7heCf7M57PIu0s0z0bcXBK5+mwkeYCpmOg2YuvK02qAtrP7VVqBos0oJMM fOFXP454OmIs1o5GrxbA6TVd1guD6pFNR3vgsD+qzQQiOllC+uhVlu4YiMHMaZX4 2kop2xx/TZj3i1eBPIbDmMXfbPbq3x7mbNxm2Q9n4E/VgUewMzq7+nkJK2qpGiR3 ZNnTYzoSxmn52VvSk+mF/YGFfFOZhmVU8y2AwgCa8EjSlpqC9AhqYJsGfglLCXFe AEBSNXYkzVu16zWZWKpBKLKwOb0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLiTmLpgPEO99xGisx+tyM3/ycwWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYTc5MzQw LTRkYjItNDU4ZC05NWRkLWFmMjBiNGZjZGIzZC8wL0I4OTM5OEJBNjAzQzQzQkRG NzExQTJCMzFGQURDOENERkZDOUNDMTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkj4wDwQCAAIwCQMHACABDfJLgDANBgkqhkiG9w0BAQsFAAOCAQEAh6yDz/CX TQNxLV2ais95EHmEPbX0ME8L2rxhHgS1qWoFV2MzUyV1UtBvVeVzXMIcy4/uDhPx itJJFdrj/KSoWSjujvvCGh3rmPCw/uU6N1m+f18T9rwtis8ALlGEYcM8W3TqcVZg OcoSbdNlsfdjcHl/9gT5e4uF/Fv2TaWG6i5QN4hIYUtuZ82qF/o6vq9xhCFlPikx bJvsWxyWwqXHVT0D5aMGw63GUJWEWpsiFzTGfoK6QhZOxc+emyEHS9TLNn7PSdkk dmnEyif8TuRtvpAJB8ByIZ5eJFs/bolJ1AgvUPkgJ6SqJ6tkrFxkFpEYUllf5ReK QDZlD70ujLYfZQ== -----END CERTIFICATE-----Generated at Fri May 3 04:42:29 2024 by rpki-client on console-fra.rpki-client.org