$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer (raw, json) Hash identifier: +xSohdV4X/DNNjezUB/Z9Oeg0j3sogWHIL3CRQzK70c= Subject key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 250CF4DAFB9913A0DCC3BAE803361DAAD462125E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft caRepository: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 10:54:47 +0000 Certificate not after: Mon 29 Jul 2024 10:59:47 +0000 Subordinate resources: IP: 103.155.26.0/24 IP: 2001:df4:aa80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0c:f4:da:fb:99:13:a0:dc:c3:ba:e8:03:36:1d:aa:d4:62:12:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 10:54:47 2023 GMT Not After : Jul 29 10:59:47 2024 GMT Subject: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:2d:03:d0:a8:95:40:92:94:82:af:bf:49: 07:5a:ce:68:86:d2:f8:f5:b9:d5:05:28:00:53:86: 92:17:70:e2:68:39:35:74:d6:f5:bb:e7:9f:00:84: 4c:7e:f6:b9:96:47:79:26:e8:12:6d:12:34:6e:56: bf:13:f4:6a:e4:f5:8f:02:87:33:33:e8:75:9c:86: f5:36:e1:38:a1:d8:d9:99:a9:3e:48:69:26:c9:02: 29:e7:55:57:68:3e:7c:2a:f7:9c:8b:83:76:16:3f: c0:1b:26:9a:c8:9d:56:de:6f:09:3c:33:b5:5c:c5: cf:41:11:2b:a3:49:8e:ad:09:8c:ef:21:10:53:5c: 3c:cd:60:e4:e2:97:1c:b1:a0:06:58:4c:59:47:18: 27:50:d2:5b:8f:64:a4:10:2c:53:40:6c:3d:05:0e: 8d:03:4b:66:06:a1:4b:12:0f:f7:e5:16:91:25:8a: e7:80:55:d5:43:e2:68:4c:e0:e2:2f:47:2d:57:a8: 72:aa:c2:99:1a:88:22:1f:7f:9e:9a:6f:52:76:55: 2e:8a:f1:0d:97:a0:5e:dc:5a:27:79:8d:bb:4f:d8: 58:97:83:69:2c:13:f3:ae:86:ed:51:34:62:80:c9: d6:42:eb:f0:4e:f9:b9:de:07:82:99:54:46:74:64: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.26.0/24 IPv6: 2001:df4:aa80::/48 Signature Algorithm: sha256WithRSAEncryption 8b:0c:0f:aa:d5:48:54:53:63:90:24:66:d4:cb:b5:ed:38:1c: 38:18:06:ee:87:96:af:d6:24:30:85:df:5a:20:8f:d1:6d:00: 3f:9e:c7:fa:b9:5c:fa:31:17:d7:7d:cd:5b:31:5a:60:5f:de: 0c:91:26:05:9a:e3:4d:48:78:fc:14:1a:05:83:2a:59:5f:fb: 09:f3:1b:60:d6:87:da:45:86:48:12:d2:44:b1:2f:26:9d:99: 41:da:20:cf:ec:43:b6:a2:f2:00:ff:02:ae:13:ae:f5:ac:66: b7:9a:b0:4c:5d:7c:90:0e:e8:8d:77:34:d0:4a:26:77:a2:61: fc:ad:11:22:1c:6c:85:32:4d:60:be:9d:ab:cb:35:35:40:4a: 9a:ec:da:7e:9b:fa:fb:86:ca:88:d7:f0:57:1b:6c:10:93:d1: b0:c7:5f:e9:4d:08:dd:c2:70:78:cf:5b:41:a9:eb:fa:85:6b: 16:a1:be:9e:c3:a8:d7:96:8f:1f:c7:ce:30:be:33:aa:53:51: c6:d6:0e:10:a3:4a:aa:8a:b9:88:0c:ae:9c:86:35:6f:98:c5: 73:52:3f:16:3a:07:9e:64:ab:2d:79:38:7e:01:16:a1:7c:21: dc:39:41:1e:a6:7a:e6:55:1f:82:92:f0:0d:e4:78:a6:b6:77: 84:47:9f:21 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJQz02vuZE6Dcw7roAzYdqtRiEl4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTEwNTQ0N1oX DTI0MDcyOTEwNTk0N1owMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2 N0E4OUQzRjU0ODE1OTFDRkUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhPLQPQqJVAkpSCr79JB1rOaIbS+PW51QUoAFOGkhdw4mg5NXTW9bvnnwCE TH72uZZHeSboEm0SNG5WvxP0auT1jwKHMzPodZyG9TbhOKHY2ZmpPkhpJskCKedV V2g+fCr3nIuDdhY/wBsmmsidVt5vCTwztVzFz0ERK6NJjq0JjO8hEFNcPM1g5OKX HLGgBlhMWUcYJ1DSW49kpBAsU0BsPQUOjQNLZgahSxIP9+UWkSWK54BV1UPiaEzg 4i9HLVeocqrCmRqIIh9/nppvUnZVLorxDZegXtxaJ3mNu0/YWJeDaSwT866G7VE0 YoDJ1kLr8E75ud4HgplURnRkoR8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPIoa3jSyWzzzfBnqJ0/VIFZHP4/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRhMTUy LTAwMjQtNDM2ZC05OTBkLTMyMzgwNmUwMTY5OS8wL0YyMjg2Qjc4RDJDOTZDRjND REYwNjdBODlEM0Y1NDgxNTkxQ0ZFM0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnmxowDwQCAAIwCQMHACABDfSqgDANBgkqhkiG9w0BAQsFAAOCAQEAiwwPqtVI VFNjkCRm1Mu17TgcOBgG7oeWr9YkMIXfWiCP0W0AP57H+rlc+jEX133NWzFaYF/e DJEmBZrjTUh4/BQaBYMqWV/7CfMbYNaH2kWGSBLSRLEvJp2ZQdogz+xDtqLyAP8C rhOu9axmt5qwTF18kA7ojXc00Eomd6Jh/K0RIhxshTJNYL6dq8s1NUBKmuzafpv6 +4bKiNfwVxtsEJPRsMdf6U0I3cJweM9bQanr+oVrFqG+nsOo15aPH8fOML4zqlNR xtYOEKNKqoq5iAyunIY1b5jFc1I/FjoHnmSrLXk4fgEWoXwh3DlBHqZ65lUfgpLw DeR4prZ3hEefIQ== -----END CERTIFICATE-----Generated at Fri May 3 04:42:32 2024 by rpki-client on console-fra.rpki-client.org