$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer File: BF3B675AEBEE64D00B323056545D1F630F1C489E.cer (raw, json) Hash identifier: KZEXKfFkjjZLdPWO7stgRMZH1CMKls+W6yLqdL+elmY= Subject key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5C25664F003A654CAEDD37627A58598E733503D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft caRepository: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:43:17 +0000 Certificate not after: Mon 29 Jul 2024 04:48:17 +0000 Subordinate resources: IP: 43.227.148.0/22 IP: 103.10.184.0/22 IP: 116.213.48.0/20 IP: 202.69.96.0/20 IP: 202.151.8.0/22 IP: 203.89.16.0/21 IP: 220.157.96.0/20 IP: 223.164.0.0/16 IP: 2403:7200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:25:66:4f:00:3a:65:4c:ae:dd:37:62:7a:58:59:8e:73:35:03:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:43:17 2023 GMT Not After : Jul 29 04:48:17 2024 GMT Subject: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:0a:1e:1f:fc:85:db:63:84:87:82:a8:f6: d8:65:91:e0:f8:a6:62:c3:ed:60:be:73:df:41:48: 61:f1:88:7b:8a:83:ed:30:9e:30:d0:73:b8:3c:7c: fb:da:be:10:f8:96:25:11:99:71:00:cd:5e:b2:95: 85:d3:06:c1:68:1a:f1:96:32:58:53:bc:55:cf:69: 50:cb:68:0d:47:7d:74:98:bd:dd:48:d9:4a:93:06: 94:e5:07:7a:1d:c3:56:d8:56:bf:a1:51:cb:f2:e4: 54:2a:34:c7:fb:a4:87:2f:21:96:0d:f2:f1:7f:87: bf:33:68:de:6d:cb:34:cb:09:38:86:2b:0a:4b:49: e3:71:d0:18:82:b1:55:89:fa:9d:b9:56:16:c4:2b: 76:11:ee:a9:8c:a3:1a:58:da:1f:cc:5f:e0:88:e7: 8c:8c:4b:3f:90:85:4a:8a:91:c2:ed:83:36:8e:94: cb:a0:f3:0a:9e:0d:02:a0:fd:7c:aa:43:79:55:33: d6:a4:0e:39:83:58:43:ff:bd:4c:0a:ac:16:ff:e6: 62:44:6a:aa:73:7a:e5:3b:a0:1e:c2:9f:82:5d:16: 5c:02:7c:85:43:b6:42:ab:6a:f5:ad:00:3e:41:3d: 1c:56:0d:39:68:fc:e8:5a:71:69:fc:24:89:e2:5b: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.148.0/22 103.10.184.0/22 116.213.48.0/20 202.69.96.0/20 202.151.8.0/22 203.89.16.0/21 220.157.96.0/20 223.164.0.0/16 IPv6: 2403:7200::/32 Signature Algorithm: sha256WithRSAEncryption 7a:c4:1a:ff:c8:a2:e6:e5:b6:df:48:a9:9b:8d:0e:39:8a:bb: 51:3c:17:50:01:5a:82:84:09:d7:d4:a5:22:6a:4e:a3:f8:12: 43:f6:bf:f0:4d:11:42:30:35:e5:e9:70:65:98:31:e1:33:42: e6:5b:50:56:1e:25:5f:4f:31:2f:ca:e3:a1:8b:f2:db:eb:fb: 9d:7c:54:d6:6d:d7:b6:71:a5:de:52:68:3c:3b:4b:e0:8d:66: 12:a0:1b:11:b5:e3:36:fb:01:74:bb:a9:0b:d1:23:e3:e4:f9: 83:1f:df:15:12:ec:55:fb:fa:04:fc:ae:cc:cf:39:6f:da:cb: 50:20:c3:5c:d7:86:e4:f9:45:f6:dd:3c:20:f9:17:aa:62:29: f8:33:68:48:f7:9b:d1:54:d2:6a:52:75:fc:68:f2:a2:6f:6e: ba:ec:ac:54:91:f1:40:68:09:e7:55:9d:a5:20:e2:e3:5c:8a: 66:99:e5:33:74:80:fa:22:a7:71:ba:c2:0b:eb:0c:de:34:a6: e9:76:6f:89:4c:d2:13:08:a7:32:1d:f4:18:f5:7b:e0:e2:a6: db:9e:d4:48:33:29:6b:28:b4:07:91:2c:d4:28:19:0e:4b:a1: 26:17:ce:6b:b1:2b:49:b6:c4:6e:b7:ff:bf:60:d9:d7:e4:d7: 11:1a:eb:95 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUXCVmTwA6ZUyu3TdielhZjnM1A9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0NDMxN1oX DTI0MDcyOTA0NDgxN1owMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIz MDU2NTQ1RDFGNjMwRjFDNDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW5Ch4f/IXbY4SHgqj22GWR4PimYsPtYL5z30FIYfGIe4qD7TCeMNBzuDx8 +9q+EPiWJRGZcQDNXrKVhdMGwWga8ZYyWFO8Vc9pUMtoDUd9dJi93UjZSpMGlOUH eh3DVthWv6FRy/LkVCo0x/ukhy8hlg3y8X+HvzNo3m3LNMsJOIYrCktJ43HQGIKx VYn6nblWFsQrdhHuqYyjGljaH8xf4IjnjIxLP5CFSoqRwu2DNo6Uy6DzCp4NAqD9 fKpDeVUz1qQOOYNYQ/+9TAqsFv/mYkRqqnN65TugHsKfgl0WXAJ8hUO2Qqtq9a0A PkE9HFYNOWj86FpxafwkieJbzvUCAwEAAaOCAvAwggLsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL87Z1rr7mTQCzIwVlRdH2MPHEieMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MGM5MDA5 LWFkNTMtNGZhNi1hMTgzLTM0YjM0NTdiZWEwMy8wL0JGM0I2NzVBRUJFRTY0RDAw QjMyMzA1NjU0NUQxRjYzMEYxQzQ4OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMDUEAgABMC8D BAIr45QDBAJnCrgDBAR01TADBATKRWADBALKlwgDBAPLWRADBATcnWADAwDfpDAN BAIAAjAHAwUAJANyADANBgkqhkiG9w0BAQsFAAOCAQEAesQa/8ii5uW230ipm40O OYq7UTwXUAFagoQJ19SlImpOo/gSQ/a/8E0RQjA15elwZZgx4TNC5ltQVh4lX08x L8rjoYvy2+v7nXxU1m3XtnGl3lJoPDtL4I1mEqAbEbXjNvsBdLupC9Ej4+T5gx/f FRLsVfv6BPyuzM85b9rLUCDDXNeG5PlF9t08IPkXqmIp+DNoSPeb0VTSalJ1/Gjy om9uuuysVJHxQGgJ51WdpSDi41yKZpnlM3SA+iKncbrCC+sM3jSm6XZviUzSEwin Mh30GPV74OKm257USDMpayi0B5Es1CgZDkuhJhfOa7ErSbbEbrf/v2DZ1+TXERrr lQ== -----END CERTIFICATE-----Generated at Fri May 3 03:08:32 2024 by rpki-client on console-ams.rpki-client.org