$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer (raw, json) Hash identifier: eb1/hn57cUL3tnu+4RAsIoxf0B8POQLvtG7EvNBHl1s= Subject key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 079AACA094F9211BAA78F910A8EF933D71EB97BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft caRepository: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 28 Aug 2023 13:44:37 +0000 Certificate not after: Mon 26 Aug 2024 13:49:37 +0000 Subordinate resources: IP: 103.146.202.0/23 IP: 2001:df2:6d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9a:ac:a0:94:f9:21:1b:aa:78:f9:10:a8:ef:93:3d:71:eb:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 28 13:44:37 2023 GMT Not After : Aug 26 13:49:37 2024 GMT Subject: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:b3:39:17:80:e3:91:f9:4c:6f:e8:2a:54: 69:47:35:b2:1b:72:7e:56:e6:40:1b:bc:2a:4d:18: fc:1f:b3:60:15:6a:48:be:05:e3:12:cf:30:43:6a: 92:98:35:20:bf:6c:a3:f6:ae:b9:da:7c:aa:fa:39: 9a:77:1e:14:19:36:be:7a:05:7e:39:13:5b:12:0e: bd:5f:94:52:62:40:12:bf:40:12:29:2d:de:ea:38: 0e:b0:05:77:b4:fb:08:c4:2d:18:3b:5e:f3:d9:22: d3:89:56:f0:62:c0:3c:e4:d7:8a:b6:f9:9e:e8:8f: 3a:e7:76:73:f6:78:72:b8:e5:d3:03:84:49:18:36: 8a:0a:2b:5a:46:4b:b0:e0:f2:3a:e7:0f:61:b0:93: 85:b5:84:83:a2:58:d3:62:de:04:84:67:29:24:89: a4:7b:26:6b:a7:31:17:6b:77:0a:97:62:36:bd:18: d2:8e:06:02:8c:b2:18:8a:d0:f5:e3:cf:9d:4c:a8: b9:e2:1f:70:fb:19:28:1d:36:e6:7e:54:79:ed:8d: 8b:95:99:16:2b:20:1b:96:1d:37:c9:e9:29:08:aa: 3e:7e:e4:c4:7a:5a:35:ed:42:5e:2e:07:9b:3c:db: fc:fe:85:6e:94:8c:ea:da:95:99:11:05:a4:bb:db: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.202.0/23 IPv6: 2001:df2:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 49:51:fc:d7:56:76:f2:91:b8:fb:dc:7b:5a:17:30:60:3d:c3: b3:a8:78:80:6b:aa:ec:3e:72:82:7d:a2:e5:6f:64:62:67:84: b1:33:8e:14:b2:b3:65:53:12:79:fd:52:3b:27:f1:de:30:5f: 84:c1:2f:0f:7c:97:68:b7:8f:11:bf:68:d2:d7:99:9a:3e:20: 90:22:7b:d4:bf:67:1a:7e:bb:c5:ff:64:c1:66:0d:6b:96:e1: 62:62:30:4d:63:67:6b:e1:7a:cb:60:a5:28:4f:04:9f:81:0a: c7:c2:18:e6:f3:c1:f3:66:62:bc:b4:13:04:cd:6c:00:28:24: f7:39:ab:51:38:bf:ea:e8:85:c4:7d:b8:9b:99:1d:37:bb:1e: 9a:08:de:fc:25:b8:41:f0:84:f2:49:ca:43:7b:a8:07:ce:3f: 30:d7:b6:83:b1:99:63:4d:d3:ec:6b:ad:8d:75:fe:ce:1f:72: 33:67:58:0a:06:c0:39:c7:7e:fb:f8:20:72:24:13:23:82:2b: 12:94:23:7f:9a:4b:e5:b0:f2:87:df:0b:83:6a:c7:7b:7d:da: f7:d1:1e:b2:b1:6e:2d:ca:95:7f:9f:bc:07:c7:6d:24:99:69: 34:82:1e:28:ce:b8:26:26:e5:f9:30:c6:bb:87:e2:cf:53:9a: 00:a9:90:b6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUB5qsoJT5IRuqePkQqO+TPXHrl7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyODEzNDQzN1oX DTI0MDgyNjEzNDkzN1owMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VB MUMxQkJGNkUxREMyNEIxRDk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2vszkXgOOR+Uxv6CpUaUc1shtyflbmQBu8Kk0Y/B+zYBVqSL4F4xLPMENq kpg1IL9so/auudp8qvo5mnceFBk2vnoFfjkTWxIOvV+UUmJAEr9AEikt3uo4DrAF d7T7CMQtGDte89ki04lW8GLAPOTXirb5nuiPOud2c/Z4crjl0wOESRg2igorWkZL sODyOucPYbCThbWEg6JY02LeBIRnKSSJpHsma6cxF2t3CpdiNr0Y0o4GAoyyGIrQ 9ePPnUyoueIfcPsZKB025n5Uee2Ni5WZFisgG5YdN8npKQiqPn7kxHpaNe1CXi4H mzzb/P6FbpSM6tqVmREFpLvbCV8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLtp8T0s7cXzSM6hwbv24dwksdmBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ZThmZjQ5 LWY3MGEtNGI2Zi1hYWU2LThjNzc3NjljNWRlZS8wL0JCNjlGMTNEMkNFREM1RjM0 OENFQTFDMUJCRjZFMURDMjRCMUQ5ODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnksowDwQCAAIwCQMHACABDfJtgDANBgkqhkiG9w0BAQsFAAOCAQEASVH811Z2 8pG4+9x7WhcwYD3Ds6h4gGuq7D5ygn2i5W9kYmeEsTOOFLKzZVMSef1SOyfx3jBf hMEvD3yXaLePEb9o0teZmj4gkCJ71L9nGn67xf9kwWYNa5bhYmIwTWNna+F6y2Cl KE8En4EKx8IY5vPB82ZivLQTBM1sACgk9zmrUTi/6uiFxH24m5kdN7semgje/CW4 QfCE8knKQ3uoB84/MNe2g7GZY03T7GutjXX+zh9yM2dYCgbAOcd++/ggciQTI4Ir EpQjf5pL5bDyh98Lg2rHe33a99EesrFuLcqVf5+8B8dtJJlpNIIeKM64Jibl+TDG u4fiz1OaAKmQtg== -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:56 2024 by rpki-client on console-fra.rpki-client.org