$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer (raw, json) Hash identifier: gkZVzeiAWATEx861G9edSg8ses6AncO6mPfb7LSIl0M= Subject key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 626C7EBE11896CB65F08A69873A8A73E9F64C806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft caRepository: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 21:54:38 +0000 Certificate not after: Sun 28 Jul 2024 21:59:38 +0000 Subordinate resources: IP: 45.64.100.0/22 IP: 103.21.84.0/22 IP: 111.67.64.0/19 IP: 182.50.240.0/20 IP: 202.61.100.0/23 IP: 2001:df0:cb::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6c:7e:be:11:89:6c:b6:5f:08:a6:98:73:a8:a7:3e:9f:64:c8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 21:54:38 2023 GMT Not After : Jul 28 21:59:38 2024 GMT Subject: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:04:81:af:55:10:f9:8e:75:66:7b:5d:48: 24:65:26:a0:f0:08:84:84:e2:5b:8c:ad:52:55:9d: 34:57:e4:ed:f9:dc:b7:ab:d7:dc:65:6d:e1:22:9f: 28:6c:cd:79:04:e5:3c:6a:33:cc:36:85:d4:62:b6: 73:f5:ea:d7:38:bc:57:87:0e:74:bc:80:6d:83:c7: de:34:1f:16:f1:7c:f1:61:de:0c:e2:00:db:78:6b: ec:21:32:ac:09:e1:8d:87:1c:fb:6b:93:aa:4b:98: a4:7d:74:b8:83:f8:e7:9f:8d:fd:10:30:f1:cb:b3: e6:7d:0b:17:55:84:d6:1d:3e:cf:59:b7:42:eb:da: ca:80:3d:20:4f:77:ad:72:2b:a4:6b:e7:ac:8d:be: 7c:d5:59:11:f0:ee:a5:50:5c:7c:f5:60:c2:43:91: fb:3f:f3:d9:9e:b6:37:cd:04:9c:40:70:9d:a5:3d: 0c:7a:18:3b:9e:b8:84:18:c9:a6:e9:3a:9c:b9:8f: 53:f6:9e:4c:42:4b:e0:89:2f:99:07:f4:75:ba:73: 30:60:68:b0:25:58:21:04:e8:cf:c6:08:b8:f4:8f: fb:ba:71:cc:f9:b5:b9:cc:57:84:7e:e1:d3:e1:a8: b9:3a:da:19:ba:4a:58:13:6c:b7:27:d7:9a:d7:ec: 51:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.100.0/22 103.21.84.0/22 111.67.64.0/19 182.50.240.0/20 202.61.100.0/23 IPv6: 2001:df0:cb::/48 Signature Algorithm: sha256WithRSAEncryption 55:1f:96:b5:da:a6:bb:f2:7c:78:4d:5d:ff:26:f2:ea:ee:e7: 94:96:39:bd:33:38:80:61:65:55:9c:48:af:87:73:fc:e0:ea: f6:3b:c2:92:f5:91:78:e2:d4:6d:6d:02:a3:76:50:a6:5e:3e: 1f:e4:16:c1:14:e5:8e:d5:46:36:9f:94:8c:13:38:cf:93:ef: 29:db:84:6e:c8:9b:4e:76:ba:20:d9:2c:e6:12:7b:98:f7:50: 25:41:4e:bf:72:08:1d:38:24:18:42:5f:71:09:04:f8:b9:df: 24:9b:fa:85:ed:86:8e:1d:e6:f4:33:b6:ba:ba:1a:f8:be:89: 4c:42:4c:ac:d9:9b:03:d6:3e:e3:ca:91:cc:2b:03:ce:03:7e: d5:84:ad:c2:6b:1f:df:a2:4b:d8:ff:07:d2:94:ca:ec:16:a2: 34:7c:db:07:51:1a:b7:38:bf:45:2e:e3:22:59:0c:11:dc:01: b0:46:0e:77:41:06:fb:86:c3:27:5e:61:c2:e9:9a:77:28:e9: e7:7b:b6:b7:9f:68:83:a6:85:75:0e:dd:32:8c:32:c4:87:5b: a0:0f:bf:d3:db:17:b2:c3:89:c1:48:dd:6a:6c:93:a7:fc:4a: 62:29:ce:b6:09:01:1c:6d:14:1d:df:84:3f:58:56:43:61:f0: 4a:48:86:32 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUYmx+vhGJbLZfCKaYc6inPp9kyAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIxNTQzOFoX DTI0MDcyODIxNTkzOFowMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIz QzdBM0RGRDNGOTJBRkU4QUEyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZ8BIGvVRD5jnVme11IJGUmoPAIhITiW4ytUlWdNFfk7fnct6vX3GVt4SKf KGzNeQTlPGozzDaF1GK2c/Xq1zi8V4cOdLyAbYPH3jQfFvF88WHeDOIA23hr7CEy rAnhjYcc+2uTqkuYpH10uIP455+N/RAw8cuz5n0LF1WE1h0+z1m3QuvayoA9IE93 rXIrpGvnrI2+fNVZEfDupVBcfPVgwkOR+z/z2Z62N80EnEBwnaU9DHoYO564hBjJ puk6nLmPU/aeTEJL4IkvmQf0dbpzMGBosCVYIQToz8YIuPSP+7pxzPm1ucxXhH7h 0+GouTraGbpKWBNstyfXmtfsUQ0CAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL8HbqJKaM8VLDI8ej39P5Kv6KorMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3 LWExMzgtNDYyNS1hNDIwLWE3MTFhYzI0MzUxOS8wL0JGMDc2RUEyNEE2OENGMTUy QzMyM0M3QTNERkQzRjkyQUZFOEFBMkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MCQEAgABMB4D BAItQGQDBAJnFVQDBAVvQ0ADBAS2MvADBAHKPWQwDwQCAAIwCQMHACABDfAAyzAN BgkqhkiG9w0BAQsFAAOCAQEAVR+Wtdqmu/J8eE1d/yby6u7nlJY5vTM4gGFlVZxI r4dz/ODq9jvCkvWReOLUbW0Co3ZQpl4+H+QWwRTljtVGNp+UjBM4z5PvKduEbsib Tna6INks5hJ7mPdQJUFOv3IIHTgkGEJfcQkE+LnfJJv6he2Gjh3m9DO2uroa+L6J TEJMrNmbA9Y+48qRzCsDzgN+1YStwmsf36JL2P8H0pTK7BaiNHzbB1Eatzi/RS7j IlkMEdwBsEYOd0EG+4bDJ15hwumadyjp53u2t59og6aFdQ7dMowyxIdboA+/09sX ssOJwUjdamyTp/xKYinOtgkBHG0UHd+EP1hWQ2HwSkiGMg== -----END CERTIFICATE-----Generated at Wed May 1 13:28:20 2024 by rpki-client on console-fra.rpki-client.org