$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer (raw, json) Hash identifier: 0M2BBt2TCrW3PwjBouL+KyBfho0+gLwjKCmDt8t7d4M= Subject key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 657546A7FFD0DF3856175D6E1AF30138F5A5F6DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Oct 2024 09:20:50 +0000 Certificate not after: Sat 11 Oct 2025 09:25:50 +0000 Subordinate resources: IP: 103.76.108.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:75:46:a7:ff:d0:df:38:56:17:5d:6e:1a:f3:01:38:f5:a5:f6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 09:20:50 2024 GMT Not After : Oct 11 09:25:50 2025 GMT Subject: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:94:8b:f3:d5:e3:87:d9:66:c5:48:f6:4c: cd:0c:6e:f1:e6:56:cc:22:8d:6b:70:3a:74:13:d1: dc:4b:ef:6d:99:0c:c8:c3:3a:c2:e6:58:01:0e:43: 67:0b:a2:5d:30:c6:45:2e:20:8d:57:5f:05:5f:6f: 4d:e2:8a:6b:91:55:a9:91:a2:09:3b:24:48:b6:4f: 89:f0:2e:63:ef:6b:fc:78:25:ae:eb:a4:1c:c8:96: 2f:30:dd:7d:76:2f:c9:e6:ed:b8:cb:39:a8:61:79: ff:d7:59:c7:df:11:56:22:4c:0f:ef:39:fe:dc:d9: 05:b2:91:26:90:3e:d2:5f:5f:57:bd:15:c7:9e:a7: 94:f7:d4:a4:96:91:f8:c4:dd:4d:55:ab:e8:17:bc: 8d:d8:f5:06:a5:7d:8b:d2:57:71:bd:00:7c:c7:dc: f2:3b:95:23:5a:64:17:0b:0e:da:c5:e7:d4:d7:27: 76:44:02:8b:4e:2e:e1:8a:2f:f6:99:b7:81:b1:4c: 9a:09:67:01:68:e8:02:a0:ab:6f:1d:e7:7e:82:88: 25:6f:bb:a2:c3:ea:29:1f:b4:ee:4b:bb:b7:95:8c: 43:01:c0:4a:a4:74:16:ed:9f:90:8e:79:15:00:80: b2:e0:29:76:f4:1a:6d:12:20:aa:09:1a:be:f2:c2: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.108.0/23 Signature Algorithm: sha256WithRSAEncryption 03:59:5d:48:56:b1:e0:ab:6a:f4:74:1d:8a:fa:d7:d4:21:87: 92:08:4e:b2:16:85:89:aa:ac:63:c5:9f:3c:1e:38:1f:71:55: cd:ed:8f:98:7c:c2:f4:83:a6:32:7b:d2:f1:ef:6a:c1:e3:a0: 3c:2e:63:b7:90:6c:a3:7b:1b:5b:29:40:84:2d:99:fd:6e:a7: 47:4d:20:51:4f:5d:6e:c6:09:da:12:07:f6:c4:43:ac:ae:aa: 18:a4:d2:d9:08:58:68:94:44:f8:be:c8:52:da:3c:84:f2:be: 08:7a:14:b6:f5:1f:d6:36:7c:75:77:b9:de:87:82:3f:a3:b2: 95:dd:7e:42:15:58:4c:8a:71:81:30:f3:70:a6:fc:3a:57:42: ec:82:40:15:ab:01:3c:f2:53:70:98:d8:c7:78:a7:76:5a:0f: 67:a4:a8:ee:b9:c2:40:b0:a1:fd:22:23:32:fe:0c:bb:fc:aa: 6d:2e:75:88:97:00:c4:6a:6f:c4:4c:44:41:4f:ff:ea:e5:b1: b7:39:38:61:83:84:f4:c5:db:34:da:26:f9:11:c7:2b:6e:de: 59:92:6c:ce:8b:da:2f:dc:82:62:99:3d:2a:b7:f6:b8:4b:23: 46:87:e9:b7:bb:3a:3a:c6:ed:ab:e9:2c:ff:46:2e:87:a7:5d: a1:e8:b8:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZXVGp//Q3zhWF11uGvMBOPWl9t4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxMjA5MjA1MFoX DTI1MTAxMTA5MjU1MFowMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNERE OTNDREM3QTUyNzdGRTkzQThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmLlIvz1eOH2WbFSPZMzQxu8eZWzCKNa3A6dBPR3EvvbZkMyMM6wuZYAQ5D ZwuiXTDGRS4gjVdfBV9vTeKKa5FVqZGiCTskSLZPifAuY+9r/HglruukHMiWLzDd fXYvyebtuMs5qGF5/9dZx98RViJMD+85/tzZBbKRJpA+0l9fV70Vx56nlPfUpJaR +MTdTVWr6Be8jdj1BqV9i9JXcb0AfMfc8juVI1pkFwsO2sXn1NcndkQCi04u4Yov 9pm3gbFMmglnAWjoAqCrbx3nfoKIJW+7osPqKR+07ku7t5WMQwHASqR0Fu2fkI55 FQCAsuApdvQabRIgqgkavvLCag0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA+62S9I3xVHfk3ZPNx6Unf+k6jrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MWFmMDIx LTFjMDEtNGEyZS1iNWQzLWMxYmJiMTY1MGM0My8wLzBGQkFEOTJGNDhERjE1NDc3 RTRERDkzQ0RDN0E1Mjc3RkU5M0E4RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnTGwwDQYJKoZIhvcNAQELBQADggEBAANZXUhWseCravR0HYr619Qhh5IITrIW hYmqrGPFnzweOB9xVc3tj5h8wvSDpjJ70vHvasHjoDwuY7eQbKN7G1spQIQtmf1u p0dNIFFPXW7GCdoSB/bEQ6yuqhik0tkIWGiURPi+yFLaPITyvgh6FLb1H9Y2fHV3 ud6Hgj+jspXdfkIVWEyKcYEw83Cm/DpXQuyCQBWrATzyU3CY2Md4p3ZaD2ekqO65 wkCwof0iIzL+DLv8qm0udYiXAMRqb8RMREFP/+rlsbc5OGGDhPTF2zTaJvkRxytu 3lmSbM6L2i/cgmKZPSq39rhLI0aH6be7OjrG7avpLP9GLoenXaHouGY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org