$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.cer (raw, json) Hash identifier: +SCpG9Uv4WCSW3Z4KJIVjDgWVMK04g/2LpaEWVvo7Po= Subject key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F85B6D5EA7B07CD955F814ACA8B1E0A820585BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Jun 2024 04:34:55 +0000 Certificate not after: Wed 25 Jun 2025 04:39:55 +0000 Subordinate resources: IP: 103.172.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:85:b6:d5:ea:7b:07:cd:95:5f:81:4a:ca:8b:1e:0a:82:05:85:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 26 04:34:55 2024 GMT Not After : Jun 25 04:39:55 2025 GMT Subject: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:49:b8:d3:53:4d:3c:c8:a8:b6:85:80:8b: 42:00:4c:cc:77:e0:c6:8d:01:47:0e:c4:a5:70:6f: 03:11:29:23:47:38:78:1c:5c:4f:31:e1:e2:aa:b7: 3c:64:e4:25:7a:3c:2b:62:3d:bc:d7:8c:d8:49:e7: 83:c3:ff:d4:5d:a7:24:e8:15:49:e5:d1:b6:2e:8c: 59:f8:2e:1a:a8:83:e6:d3:9f:f4:34:89:74:32:60: b5:1d:82:57:17:b2:c3:7a:25:56:9c:6e:96:9f:7c: d4:8f:2d:66:98:2b:66:d8:37:6f:a9:03:af:d2:21: a2:3e:47:a0:0b:cd:23:1f:0f:e9:99:e7:cc:1e:10: 22:2d:16:6b:27:ac:03:1b:a6:63:e7:2a:0f:3a:12: 2c:ca:bb:7d:12:a9:4a:2a:4d:4a:b2:0d:44:12:3e: 94:26:7a:1a:88:d1:5b:12:d2:16:95:97:a7:4e:d7: 6c:5a:4a:11:3e:ec:07:15:ff:11:65:8e:6d:51:64: 55:f9:04:10:7b:c4:0e:f3:ee:01:c4:49:a5:5d:6f: 9d:21:1f:a6:9f:9c:39:b0:fc:57:bb:8d:92:93:96: 65:35:d5:8d:a8:f8:3b:c5:d6:d0:be:75:81:c2:62: ff:b8:61:52:4e:0f:4a:c0:bc:8d:1e:b0:51:26:43: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.118.0/23 Signature Algorithm: sha256WithRSAEncryption 69:54:7d:67:4a:6f:5a:ca:69:ce:0b:b9:96:9e:69:39:8f:2e: b7:d7:07:1f:7a:37:48:b5:a2:fb:3b:c1:1a:42:cd:95:bc:03: f6:7c:64:47:3c:53:9f:9d:50:a7:69:8f:55:e4:b2:14:0f:87: e2:96:b1:aa:f9:26:60:94:b3:89:18:1c:a7:7f:ae:82:d8:49: 61:50:f1:a2:c9:27:bd:9f:16:ab:98:e2:aa:56:df:aa:f8:3c: 77:ef:35:7a:9a:43:9b:b3:22:ba:e1:dc:e4:f1:7f:eb:12:f4: 1b:c4:59:da:dd:b5:ce:d6:87:58:3e:1e:a7:7d:dc:64:85:18: ac:4a:92:49:0c:5c:a8:33:6f:f0:e2:85:d2:2c:cd:a2:5c:dc: 7b:7c:50:30:ed:c0:d5:61:e6:06:9e:7d:fb:bb:35:a8:f3:36: 93:17:e8:06:91:73:60:56:4a:03:82:8d:6f:9a:ac:bd:c9:70: d6:c2:1c:12:8d:f5:da:1b:90:0c:77:6a:03:c8:a5:c5:87:56: 92:5f:51:00:86:1a:97:78:5b:53:18:b6:2f:2a:eb:7e:de:e2: 58:eb:18:94:d6:c8:94:fc:49:38:61:d0:bc:b0:09:e2:16:03: 99:c5:a7:6e:ca:a7:a5:b9:71:40:62:4a:77:ab:53:a6:78:d2: 2b:26:36:b3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUH4W21ep7B82VX4FKyoseCoIFhbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyNjA0MzQ1NVoX DTI1MDYyNTA0Mzk1NVowMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4 MzM5MTMyMTVGRTY4OTI1RkY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEnSbjTU008yKi2hYCLQgBMzHfgxo0BRw7EpXBvAxEpI0c4eBxcTzHh4qq3 PGTkJXo8K2I9vNeM2Enng8P/1F2nJOgVSeXRti6MWfguGqiD5tOf9DSJdDJgtR2C Vxeyw3olVpxulp981I8tZpgrZtg3b6kDr9Ihoj5HoAvNIx8P6ZnnzB4QIi0Wayes AxumY+cqDzoSLMq7fRKpSipNSrINRBI+lCZ6GojRWxLSFpWXp07XbFpKET7sBxX/ EWWObVFkVfkEEHvEDvPuAcRJpV1vnSEfpp+cObD8V7uNkpOWZTXVjaj4O8XW0L51 gcJi/7hhUk4PSsC8jR6wUSZDo10CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAgveCLRxj4e1dqDORMhX+aJJf9uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2Qz LTcxYzMtNGQwYS04YjA0LTcwODhmZTM4MmJjMy8wLzA4MkY3ODIyRDFDNjNFMUVE NURBODMzOTEzMjE1RkU2ODkyNUZGNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrHYwDQYJKoZIhvcNAQELBQADggEBAGlUfWdKb1rKac4LuZaeaTmPLrfXBx96 N0i1ovs7wRpCzZW8A/Z8ZEc8U5+dUKdpj1XkshQPh+KWsar5JmCUs4kYHKd/roLY SWFQ8aLJJ72fFquY4qpW36r4PHfvNXqaQ5uzIrrh3OTxf+sS9BvEWdrdtc7Wh1g+ Hqd93GSFGKxKkkkMXKgzb/DihdIszaJc3Ht8UDDtwNVh5gaeffu7NajzNpMX6AaR c2BWSgOCjW+arL3JcNbCHBKN9dobkAx3agPIpcWHVpJfUQCGGpd4W1MYti8q637e 4ljrGJTWyJT8SThh0LywCeIWA5nFp27Kp6W5cUBiSnerU6Z40ismNrM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org