$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer (raw, json) Hash identifier: aBjDfNIKr4oOYnTzlaYHxzhyjuyk6Chx9kCenOt0bLk= Subject key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67500CD31937ABFADA134D2557FBD493BD4755E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 17 Jul 2024 00:28:07 +0000 Certificate not after: Wed 16 Jul 2025 00:33:07 +0000 Subordinate resources: IP: 103.229.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:50:0c:d3:19:37:ab:fa:da:13:4d:25:57:fb:d4:93:bd:47:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 17 00:28:07 2024 GMT Not After : Jul 16 00:33:07 2025 GMT Subject: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:ec:48:15:24:54:3f:ba:3f:a1:52:57:bc: fa:8e:fe:40:41:85:95:57:43:6c:c5:e0:08:d7:fe: 36:1f:99:80:04:bc:a0:c9:ec:b4:63:77:c3:3c:af: a2:38:94:91:71:53:91:61:09:a0:0e:e0:8c:e4:d6: 62:97:6b:62:e5:03:a7:3f:3c:3d:f9:8f:7c:17:5f: b0:85:a7:12:ca:7d:0d:6e:4f:ef:2b:c9:60:30:5c: 8c:75:ad:4c:92:5f:ef:24:f3:d0:9d:6f:59:83:bc: 7a:52:14:3a:c4:c5:cd:75:cc:21:50:61:3d:bb:e7: d3:16:0d:d2:51:18:fe:94:ed:1a:d0:da:28:4e:bf: c3:ae:2d:37:8a:9c:8d:de:e9:41:b9:f9:dc:16:37: d3:91:de:1c:b4:aa:84:14:f5:6e:91:fc:18:61:57: 19:c3:7f:97:60:5c:3e:98:38:82:51:8a:73:a1:72: fe:66:56:27:a8:e0:06:ba:92:b5:90:d7:40:f4:1a: 7f:28:1e:c0:3f:dc:e3:15:84:08:11:12:ec:33:ba: d9:48:66:a4:d4:c1:85:39:e9:cb:ce:41:14:5e:ec: 09:47:2e:7e:3c:00:95:ae:26:a8:64:a6:cc:3b:07: af:8b:d4:9e:05:91:f4:6e:b9:1c:3c:81:b5:f5:3d: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.184.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:a2:1b:f8:26:a9:1a:d6:c5:75:88:e3:be:ba:49:c3:eb:bd: c4:35:49:dc:46:e8:eb:e6:8e:51:1c:fd:fb:68:c4:18:7a:37: 5c:8a:71:de:61:78:0c:7a:8f:0b:c1:81:14:2a:67:77:15:87: b4:db:95:21:ae:d4:c7:47:9d:0a:66:d5:b5:87:af:bb:52:48: 6c:d2:bd:23:d0:18:ad:cd:dc:11:df:cc:0d:ba:50:07:8a:46: 56:0d:08:f4:10:36:b4:a1:d9:bc:06:c2:5b:fe:06:de:23:d0: b3:ab:df:9b:17:9a:30:a4:aa:a0:fb:68:88:86:a1:31:7b:ff: ea:8d:1b:52:0f:c4:99:3d:40:25:ed:c8:63:c8:3b:68:48:d3: 1f:34:a8:74:3d:0f:52:2a:45:23:95:83:61:2b:b1:65:09:7d: 13:f3:b8:08:4c:5a:10:86:22:48:95:af:ae:96:5d:ef:60:15: 8f:a5:44:2e:61:eb:1c:d1:d0:07:09:66:e2:bc:42:65:b3:c6: ab:01:d6:2b:d9:98:04:d7:7e:b4:61:aa:4d:2d:e9:f9:d3:47: 92:62:75:ae:d1:61:06:62:84:b2:72:06:ea:f3:c9:7d:b0:32: 84:47:45:a3:55:f7:9b:7b:3d:d2:e0:9e:bc:ae:8f:c5:db:74: 02:d4:ad:18 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ1AM0xk3q/raE00lV/vUk71HVeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxNzAwMjgwN1oX DTI1MDcxNjAwMzMwN1owMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0 QzgzMjYxQjZDRUE0QkNGMENDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ27EgVJFQ/uj+hUle8+o7+QEGFlVdDbMXgCNf+Nh+ZgAS8oMnstGN3wzyv ojiUkXFTkWEJoA7gjOTWYpdrYuUDpz88PfmPfBdfsIWnEsp9DW5P7yvJYDBcjHWt TJJf7yTz0J1vWYO8elIUOsTFzXXMIVBhPbvn0xYN0lEY/pTtGtDaKE6/w64tN4qc jd7pQbn53BY305HeHLSqhBT1bpH8GGFXGcN/l2BcPpg4glGKc6Fy/mZWJ6jgBrqS tZDXQPQafygewD/c4xWECBES7DO62UhmpNTBhTnpy85BFF7sCUcufjwAla4mqGSm zDsHr4vUngWR9G65HDyBtfU9/GMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjlVXWaoMGFdjZMgyYbbOpLzwzLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZWU4MmI3 LWMxODItNGU4My04OTdjLWUwMGYzY2UxYjBkMi8wLzA4RTU1NTc1OUFBMEMxODU3 NjM2NEM4MzI2MUI2Q0VBNEJDRjBDQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn5bgwDQYJKoZIhvcNAQELBQADggEBAFqiG/gmqRrWxXWI4766ScPrvcQ1SdxG 6OvmjlEc/ftoxBh6N1yKcd5heAx6jwvBgRQqZ3cVh7TblSGu1MdHnQpm1bWHr7tS SGzSvSPQGK3N3BHfzA26UAeKRlYNCPQQNrSh2bwGwlv+Bt4j0LOr35sXmjCkqqD7 aIiGoTF7/+qNG1IPxJk9QCXtyGPIO2hI0x80qHQ9D1IqRSOVg2ErsWUJfRPzuAhM WhCGIkiVr66WXe9gFY+lRC5h6xzR0AcJZuK8QmWzxqsB1ivZmATXfrRhqk0t6fnT R5Jida7RYQZihLJyBurzyX2wMoRHRaNV95t7PdLgnryuj8XbdALUrRg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org