$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.cer (raw, json) Hash identifier: jH0qFMrsb6sqKjNPUJyP8jRDnZNvb7oYjz+HmFyUDJU= Subject key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 478C520667358212290FC20DB9DECC9769E97E14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 25 Jul 2023 17:05:44 +0000 Certificate not after: Tue 23 Jul 2024 17:10:44 +0000 Subordinate resources: IP: 103.172.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8c:52:06:67:35:82:12:29:0f:c2:0d:b9:de:cc:97:69:e9:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 17:05:44 2023 GMT Not After : Jul 23 17:10:44 2024 GMT Subject: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:49:b8:d3:53:4d:3c:c8:a8:b6:85:80:8b: 42:00:4c:cc:77:e0:c6:8d:01:47:0e:c4:a5:70:6f: 03:11:29:23:47:38:78:1c:5c:4f:31:e1:e2:aa:b7: 3c:64:e4:25:7a:3c:2b:62:3d:bc:d7:8c:d8:49:e7: 83:c3:ff:d4:5d:a7:24:e8:15:49:e5:d1:b6:2e:8c: 59:f8:2e:1a:a8:83:e6:d3:9f:f4:34:89:74:32:60: b5:1d:82:57:17:b2:c3:7a:25:56:9c:6e:96:9f:7c: d4:8f:2d:66:98:2b:66:d8:37:6f:a9:03:af:d2:21: a2:3e:47:a0:0b:cd:23:1f:0f:e9:99:e7:cc:1e:10: 22:2d:16:6b:27:ac:03:1b:a6:63:e7:2a:0f:3a:12: 2c:ca:bb:7d:12:a9:4a:2a:4d:4a:b2:0d:44:12:3e: 94:26:7a:1a:88:d1:5b:12:d2:16:95:97:a7:4e:d7: 6c:5a:4a:11:3e:ec:07:15:ff:11:65:8e:6d:51:64: 55:f9:04:10:7b:c4:0e:f3:ee:01:c4:49:a5:5d:6f: 9d:21:1f:a6:9f:9c:39:b0:fc:57:bb:8d:92:93:96: 65:35:d5:8d:a8:f8:3b:c5:d6:d0:be:75:81:c2:62: ff:b8:61:52:4e:0f:4a:c0:bc:8d:1e:b0:51:26:43: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.118.0/23 Signature Algorithm: sha256WithRSAEncryption 50:00:68:e2:1a:8c:2f:c5:16:62:40:73:cc:9b:f2:25:6c:bf: c0:fa:24:c8:69:68:90:12:4f:eb:3b:b5:43:f6:ba:25:3b:51: 63:cc:36:6d:b0:88:3c:e7:b4:5c:32:4f:d8:71:92:4e:a4:02: 51:26:a4:a5:55:1d:6f:a6:0f:10:14:05:63:31:69:0c:7a:30: c1:9c:27:8b:30:9a:aa:63:cb:ed:77:30:ef:22:06:48:b1:62: 60:58:61:41:36:b1:ee:26:ff:70:bd:56:f7:7b:74:b2:1d:ca: 1f:b0:aa:c4:ca:28:f2:65:00:3f:be:ea:e9:45:74:16:98:4d: 31:fe:f3:a5:da:c7:da:5a:28:b2:3d:b5:64:f2:4a:c4:df:af: 37:b8:8f:14:0a:d6:d2:f5:ac:b1:36:80:b2:61:a5:5d:8d:32: 6a:1f:29:53:e7:25:08:dc:cd:7d:f0:fc:42:6d:a6:f7:08:8c: 49:27:34:56:0d:ba:9c:62:48:d8:45:57:28:a3:14:75:d7:95: 26:ad:15:ef:6c:dc:0d:6c:2d:90:cb:1c:60:6e:c2:2c:e8:cd: b8:b4:1f:98:a3:07:6b:69:2a:7e:cb:1d:4c:0d:66:77:ca:09: 7d:1a:87:f3:ef:be:00:89:9f:9a:a4:28:3e:69:91:d3:a6:ed: 45:d0:aa:e5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR4xSBmc1ghIpD8INud7Ml2npfhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyNTE3MDU0NFoX DTI0MDcyMzE3MTA0NFowMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4 MzM5MTMyMTVGRTY4OTI1RkY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEnSbjTU008yKi2hYCLQgBMzHfgxo0BRw7EpXBvAxEpI0c4eBxcTzHh4qq3 PGTkJXo8K2I9vNeM2Enng8P/1F2nJOgVSeXRti6MWfguGqiD5tOf9DSJdDJgtR2C Vxeyw3olVpxulp981I8tZpgrZtg3b6kDr9Ihoj5HoAvNIx8P6ZnnzB4QIi0Wayes AxumY+cqDzoSLMq7fRKpSipNSrINRBI+lCZ6GojRWxLSFpWXp07XbFpKET7sBxX/ EWWObVFkVfkEEHvEDvPuAcRJpV1vnSEfpp+cObD8V7uNkpOWZTXVjaj4O8XW0L51 gcJi/7hhUk4PSsC8jR6wUSZDo10CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAgveCLRxj4e1dqDORMhX+aJJf9uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2Qz LTcxYzMtNGQwYS04YjA0LTcwODhmZTM4MmJjMy8wLzA4MkY3ODIyRDFDNjNFMUVE NURBODMzOTEzMjE1RkU2ODkyNUZGNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrHYwDQYJKoZIhvcNAQELBQADggEBAFAAaOIajC/FFmJAc8yb8iVsv8D6JMhp aJAST+s7tUP2uiU7UWPMNm2wiDzntFwyT9hxkk6kAlEmpKVVHW+mDxAUBWMxaQx6 MMGcJ4swmqpjy+13MO8iBkixYmBYYUE2se4m/3C9Vvd7dLIdyh+wqsTKKPJlAD++ 6ulFdBaYTTH+86Xax9paKLI9tWTySsTfrze4jxQK1tL1rLE2gLJhpV2NMmofKVPn JQjczX3w/EJtpvcIjEknNFYNupxiSNhFVyijFHXXlSatFe9s3A1sLZDLHGBuwizo zbi0H5ijB2tpKn7LHUwNZnfKCX0ah/PvvgCJn5qkKD5pkdOm7UXQquU= -----END CERTIFICATE-----Generated at Wed May 8 07:45:20 2024 by rpki-client on console-ams.rpki-client.org