$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer (raw, json) Hash identifier: 08gDgBrd+vgaSZGVsqaaOvt5ccqK2jLhSqQXkC6zqqI= Subject key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E6E0244F8831D4C6C13412EBC8D9AFFAE1436C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft caRepository: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:28:56 +0000 Certificate not after: Mon 30 Jun 2025 18:33:56 +0000 Subordinate resources: IP: 103.148.198.0/23 IP: 2001:df2:e880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6e:02:44:f8:83:1d:4c:6c:13:41:2e:bc:8d:9a:ff:ae:14:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 18:28:56 2024 GMT Not After : Jun 30 18:33:56 2025 GMT Subject: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:5e:00:ef:92:a0:ef:aa:b9:32:6a:21:7a: 28:e4:e7:f0:cc:0c:b9:aa:93:7e:dd:b5:45:b7:26: fc:77:51:31:51:59:4a:ff:2f:17:b4:66:98:d6:76: 06:61:58:0d:9c:f7:e5:3f:82:fe:8a:3e:ba:bc:90: 71:40:1d:47:06:b8:f6:bc:17:6a:55:3a:ce:d0:08: b5:82:24:34:66:d5:c6:48:c0:d3:de:16:fe:57:91: 4f:ec:5a:11:08:18:fe:be:f6:e8:ab:44:64:cc:fa: a0:c5:0f:9b:ff:23:8c:a1:86:f7:3c:a9:b0:2a:86: d8:f3:39:f0:19:c4:c6:65:a0:d6:99:17:01:53:14: 1f:7f:04:b3:fd:56:a8:f0:53:3a:df:1d:81:10:90: eb:5f:37:9e:f8:d8:30:a0:2e:c4:3e:fc:73:98:21: 14:96:46:ca:9a:4a:8b:62:c1:da:4e:cf:ef:62:7f: 6a:91:4c:35:fb:a7:4f:04:93:7e:31:61:1c:a0:56: f9:5c:3a:cc:75:e7:ea:dd:74:db:af:5d:3f:91:93: 3f:33:c6:ba:78:31:de:f2:30:90:33:0e:50:9e:30: 81:df:1f:76:16:01:96:82:8d:d2:18:e6:f2:11:06: ba:62:13:ec:4a:a8:0b:16:34:f4:68:f8:2a:55:b8: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/23 IPv6: 2001:df2:e880::/48 Signature Algorithm: sha256WithRSAEncryption 4b:98:f8:9e:56:ec:7e:8b:0b:76:36:48:1b:d8:02:f4:94:30: bd:4e:3a:9f:08:a7:e2:09:6e:e9:a4:fb:c2:ad:42:a2:15:3e: 02:f3:19:b4:50:cb:7d:7b:f3:13:43:72:78:0f:0a:42:72:fd: 7e:8f:84:14:cc:cf:bc:e1:57:f7:c0:0d:85:ef:dc:7c:c9:fb: ef:c4:f2:5c:76:0a:1d:0b:39:a3:91:4f:2f:88:02:19:60:9f: 34:fe:87:f7:00:50:bf:0f:82:64:7f:b5:29:16:d4:64:81:65: 60:b7:32:16:f9:36:e4:55:4f:38:33:e7:6e:e4:c6:3c:b2:8e: 35:18:13:56:ac:97:4d:40:ff:b1:38:8d:e5:ad:4b:08:6a:4a: 79:46:f0:00:da:6e:fe:e2:13:c0:90:d8:8a:30:d4:e6:b2:c0: ee:e4:48:a7:b6:d3:7d:ea:7c:6f:58:50:c2:84:36:80:31:1f: be:50:d8:00:a1:ed:90:25:6e:b0:d9:4c:39:3e:e9:87:51:50: 03:fb:3e:ea:50:4a:84:72:77:ff:36:16:69:4b:99:e6:ee:96: ef:84:47:04:a9:91:43:15:90:80:d5:cf:ef:75:0f:58:4a:0d: db:d4:a8:f6:0c:9b:19:1a:34:61:f8:bb:28:a5:30:5b:9e:0f: 95:91:06:33 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXm4CRPiDHUxsE0EuvI2a/64UNsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4Mjg1NloX DTI1MDYzMDE4MzM1NlowMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4 ODAwQzMxN0I4REY3RjFBQkY0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9yXgDvkqDvqrkyaiF6KOTn8MwMuaqTft21Rbcm/HdRMVFZSv8vF7RmmNZ2 BmFYDZz35T+C/oo+uryQcUAdRwa49rwXalU6ztAItYIkNGbVxkjA094W/leRT+xa EQgY/r726KtEZMz6oMUPm/8jjKGG9zypsCqG2PM58BnExmWg1pkXAVMUH38Es/1W qPBTOt8dgRCQ6183nvjYMKAuxD78c5ghFJZGyppKi2LB2k7P72J/apFMNfunTwST fjFhHKBW+Vw6zHXn6t10269dP5GTPzPGungx3vIwkDMOUJ4wgd8fdhYBloKN0hjm 8hEGumIT7EqoCxY09Gj4KlW4XLMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjQfwENooESqU6IAMMXuN9/Gr9DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNi LTFmNDAtNGMwMy1iYzM1LWY2OTYxNTE2ZDRkOS8wLzA4RDA3RjAxMERBMjgxMTJB OTRFODgwMEMzMTdCOERGN0YxQUJGNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlMYwDwQCAAIwCQMHACABDfLogDANBgkqhkiG9w0BAQsFAAOCAQEAS5j4nlbs fosLdjZIG9gC9JQwvU46nwin4glu6aT7wq1CohU+AvMZtFDLfXvzE0NyeA8KQnL9 fo+EFMzPvOFX98ANhe/cfMn778TyXHYKHQs5o5FPL4gCGWCfNP6H9wBQvw+CZH+1 KRbUZIFlYLcyFvk25FVPODPnbuTGPLKONRgTVqyXTUD/sTiN5a1LCGpKeUbwANpu /uITwJDYijDU5rLA7uRIp7bTfep8b1hQwoQ2gDEfvlDYAKHtkCVusNlMOT7ph1FQ A/s+6lBKhHJ3/zYWaUuZ5u6W74RHBKmRQxWQgNXP73UPWEoN29So9gybGRo0Yfi7 KKUwW54PlZEGMw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org