$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer File: CB8106D827747D008C9DE9181B4EC6739C8EE800.cer (raw, json) Hash identifier: 9f9UhdzM7NK56/+hlvNsTdpWaJ4NOlZQzyyku9HW59A= Subject key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 132B4D2276C82EBBFA9F5C0B2992575842CB45FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft caRepository: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:12:28 +0000 Certificate not after: Mon 29 Jul 2024 04:17:28 +0000 Subordinate resources: IP: 103.21.204.0/22 IP: 103.248.196.0/22 IP: 2400:f340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2b:4d:22:76:c8:2e:bb:fa:9f:5c:0b:29:92:57:58:42:cb:45:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:12:28 2023 GMT Not After : Jul 29 04:17:28 2024 GMT Subject: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:e4:e6:f3:c6:14:2f:33:5e:d6:55:d0:c9: 1a:9e:f6:86:93:ba:7f:00:f8:4e:67:52:f5:8a:c3: f3:39:5d:98:2d:6f:ac:ac:71:05:92:ec:d8:22:36: f4:b3:31:86:57:f0:e5:12:68:83:ea:9e:71:40:19: 3f:f3:0d:32:3c:0e:98:f4:bb:cd:bf:1c:89:92:18: 1d:cc:ff:77:8c:57:eb:29:92:d8:98:80:42:ce:31: 65:86:0a:57:ee:ac:fb:48:f5:75:8a:a6:4e:bc:82: 01:60:b9:97:24:8b:fc:19:67:c6:d8:08:d1:da:75: 5b:50:c5:bb:d9:1e:1e:9f:20:bb:f3:8b:ae:ea:30: 4d:83:d6:67:78:54:5b:14:6e:d6:a6:fb:81:95:ce: ad:db:a5:3c:8a:cf:29:4b:3f:7d:4f:86:a9:38:4e: 81:fb:45:cd:9e:a4:ab:c2:53:48:ed:15:5e:6c:7f: 98:3b:b7:52:8c:e5:f6:68:a5:33:bb:dc:57:34:9f: c5:9f:2d:c4:22:d4:94:9e:58:be:29:34:85:b5:fb: db:18:ac:59:fb:24:d7:02:29:92:a7:93:db:24:9f: e0:8c:f5:bd:42:4e:ac:bc:5e:3b:d4:2b:cc:e9:cd: 7f:1c:f9:3d:b6:14:95:87:88:48:27:33:1d:ae:6e: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.204.0/22 103.248.196.0/22 IPv6: 2400:f340::/32 Signature Algorithm: sha256WithRSAEncryption 3e:30:f3:86:26:8d:eb:62:72:58:81:a9:68:f5:49:59:1c:3f: 8b:b2:4d:87:15:6c:3e:a6:03:5d:a7:79:a7:d7:d1:28:ca:86: 45:a1:e6:9e:dd:44:58:f2:04:89:07:f5:c7:c3:44:9f:5c:3d: 7e:4d:c2:05:7b:e8:35:23:e2:c2:8e:7d:01:68:52:12:58:61: 34:14:ae:42:62:73:f2:f3:e2:ed:b3:20:8c:0d:72:83:3c:cd: b4:16:55:ee:13:71:3a:de:9e:02:63:69:38:18:22:9d:17:d1: e6:34:c0:a4:2a:d1:e1:11:20:12:43:f3:63:79:3a:17:4e:48: a3:8b:55:29:4e:d7:08:d1:38:d4:67:31:dd:a0:b1:39:e6:c5: 0b:06:d0:a4:ae:99:93:28:7c:f6:54:62:c2:74:71:8f:f3:87: 17:ea:af:25:c3:aa:31:de:a7:76:57:4a:fd:1c:26:25:90:5c: b6:a0:34:61:f9:18:99:8d:dd:60:a3:c2:d4:45:96:0b:bd:c6: 0c:6a:8e:3f:f0:0a:a2:d3:87:31:e7:b6:a6:37:85:bc:1b:9b: 98:44:da:2c:d5:bc:77:d3:10:bb:ee:e8:36:22:3f:9a:c2:e5: e6:eb:41:93:33:a4:0e:61:92:32:5c:52:ee:9b:98:af:1a:b9: 42:18:53:5e -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUEytNInbILrv6n1wLKZJXWELLRfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0MTIyOFoX DTI0MDcyOTA0MTcyOFowMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURF OTE4MUI0RUM2NzM5QzhFRTgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKly5ObzxhQvM17WVdDJGp72hpO6fwD4TmdS9YrD8zldmC1vrKxxBZLs2CI2 9LMxhlfw5RJog+qecUAZP/MNMjwOmPS7zb8ciZIYHcz/d4xX6ymS2JiAQs4xZYYK V+6s+0j1dYqmTryCAWC5lySL/BlnxtgI0dp1W1DFu9keHp8gu/OLruowTYPWZ3hU WxRu1qb7gZXOrdulPIrPKUs/fU+GqThOgftFzZ6kq8JTSO0VXmx/mDu3Uozl9mil M7vcVzSfxZ8txCLUlJ5Yvik0hbX72xisWfsk1wIpkqeT2ySf4Iz1vUJOrLxeO9Qr zOnNfxz5PbYUlYeISCczHa5uvJECAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuBBtgndH0AjJ3pGBtOxnOcjugAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZTU3OGQw LWQzYWEtNGYwZi1iYjlkLWY3NGI0OWM2YTY1NS8wL0NCODEwNkQ4Mjc3NDdEMDA4 QzlERTkxODFCNEVDNjczOUM4RUU4MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnFcwDBAJn+MQwDQQCAAIwBwMFACQA80AwDQYJKoZIhvcNAQELBQADggEBAD4w 84YmjeticliBqWj1SVkcP4uyTYcVbD6mA12neafX0SjKhkWh5p7dRFjyBIkH9cfD RJ9cPX5NwgV76DUj4sKOfQFoUhJYYTQUrkJic/Lz4u2zIIwNcoM8zbQWVe4TcTre ngJjaTgYIp0X0eY0wKQq0eERIBJD82N5OhdOSKOLVSlO1wjRONRnMd2gsTnmxQsG 0KSumZMofPZUYsJ0cY/zhxfqryXDqjHep3ZXSv0cJiWQXLagNGH5GJmN3WCjwtRF lgu9xgxqjj/wCqLThzHntqY3hbwbm5hE2izVvHfTELvu6DYiP5rC5ebrQZMzpA5h kjJcUu6bmK8auUIYU14= -----END CERTIFICATE-----Generated at Fri May 3 04:42:30 2024 by rpki-client on console-fra.rpki-client.org