$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer (raw, json) Hash identifier: qpl9M48uwoyelw2BlWVJ3ha1YBMyh1jBx+CRFWV1zaE= Subject key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3013CEB1129E20C7751B4B0C33CEBC06B12C92D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft caRepository: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 17 Oct 2024 00:58:05 +0000 Certificate not after: Thu 16 Oct 2025 01:03:05 +0000 Subordinate resources: IP: 103.161.110.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:13:ce:b1:12:9e:20:c7:75:1b:4b:0c:33:ce:bc:06:b1:2c:92:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 00:58:05 2024 GMT Not After : Oct 16 01:03:05 2025 GMT Subject: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:17:9e:c4:75:6e:fa:d6:d5:ae:07:ef:67: 88:dc:bb:5e:f3:37:e7:6c:c4:37:5a:41:66:a3:35: c2:b8:48:5d:39:3a:59:40:53:ea:7a:0a:3f:90:52: 0c:80:fc:8a:17:91:0c:cb:72:0d:a2:aa:2f:f9:19: cb:26:4d:a8:7d:bf:95:f5:80:d9:15:6e:09:9c:ab: 9d:07:f8:68:b5:b2:c2:47:31:45:e5:7b:b9:b0:69: 03:71:07:07:de:8d:1f:76:14:16:89:a9:f7:ae:54: 9d:fd:ce:e0:c8:ae:2d:ab:ef:84:89:2e:0b:f9:1a: 07:dd:0b:a1:21:f2:e0:38:b7:66:fe:da:d3:92:76: a6:23:10:90:e1:3a:ef:c6:f9:b5:06:4d:24:ad:69: 08:61:7b:d5:7f:b9:5a:07:db:2a:d6:ea:d7:09:0a: 9f:c2:2c:7f:c8:52:38:50:95:65:70:01:a0:e5:40: a2:df:37:07:93:3f:96:2a:49:bb:62:99:c0:6b:3f: 7d:bb:74:2a:a5:be:8f:ee:5a:2b:80:1f:92:36:fc: 88:cc:da:b7:ef:bb:d9:3e:2d:e5:d6:79:0d:a4:2e: 7e:4e:31:2e:24:f4:d7:cd:fe:1e:00:25:22:c0:82: f0:08:31:26:fe:90:df:05:97:9a:fb:b5:f9:72:22: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.110.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:7c:cc:88:b8:b0:13:8d:22:5a:22:18:a8:00:ec:e8:a1:33: 23:28:7f:af:15:40:d4:9f:55:28:8c:bd:e2:11:c2:21:c9:ea: 7a:8d:22:84:55:ef:e6:b6:61:51:87:13:65:2c:f2:33:5c:9a: d5:31:c6:12:12:41:9e:8e:3a:cc:58:70:c5:57:6d:8f:87:be: e9:ce:60:1e:f2:ad:5d:18:fa:30:bc:23:5d:7c:19:88:cf:fa: 8a:c7:cb:3a:64:22:65:89:34:2d:fc:80:0d:a4:43:48:14:c9: 53:42:e8:aa:25:8c:35:65:0c:a8:ef:36:9f:1f:f8:5b:7f:f0: 1f:7c:c9:f6:fc:59:e2:d5:50:2e:4f:e0:ec:f6:a1:c5:19:a1: 18:ce:b9:1b:bf:b7:73:4a:ca:2d:9d:31:03:fa:79:9f:3d:2e: 61:5e:c4:31:e0:e8:c1:f6:9f:1c:ac:ef:0c:72:7c:68:d9:dd: 3d:ed:f8:c6:82:78:63:80:8b:61:7b:53:e1:10:aa:29:fa:9c: 9e:a4:76:dc:f7:e1:7c:7b:59:d1:e1:73:0c:54:d7:16:ab:69: ac:46:a6:b2:b2:e6:fb:50:49:df:90:84:b3:84:aa:bb:7c:c4: b1:71:3b:55:7b:a7:8d:1c:0c:ec:20:e2:90:f4:17:b2:6a:ab: 06:90:30:df -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMBPOsRKeIMd1G0sMM868BrEsktMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNzAwNTgwNVoX DTI1MTAxNjAxMDMwNVowMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRB RTI4REE1OTc4NEE1QUFFQUFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKWF57EdW761tWuB+9niNy7XvM352zEN1pBZqM1wrhIXTk6WUBT6noKP5BS DID8iheRDMtyDaKqL/kZyyZNqH2/lfWA2RVuCZyrnQf4aLWywkcxReV7ubBpA3EH B96NH3YUFomp965Unf3O4MiuLavvhIkuC/kaB90LoSHy4Di3Zv7a05J2piMQkOE6 78b5tQZNJK1pCGF71X+5WgfbKtbq1wkKn8Isf8hSOFCVZXABoOVAot83B5M/lipJ u2KZwGs/fbt0KqW+j+5aK4Afkjb8iMzat++72T4t5dZ5DaQufk4xLiT0183+HgAl IsCC8AgxJv6Q3wWXmvu1+XIi03ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGjVeC+625FM/XSuKNpZeEparqr4MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNDA4ZTQ0 LTNlOWMtNDVlNS1iY2E0LTVkZmJkNGIyNzEzMC8wLzY4RDU3ODJGQkFEQjkxNENG RDc0QUUyOERBNTk3ODRBNUFBRUFBRjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoW4wDQYJKoZIhvcNAQELBQADggEBAJp8zIi4sBONIloiGKgA7OihMyMof68V QNSfVSiMveIRwiHJ6nqNIoRV7+a2YVGHE2Us8jNcmtUxxhISQZ6OOsxYcMVXbY+H vunOYB7yrV0Y+jC8I118GYjP+orHyzpkImWJNC38gA2kQ0gUyVNC6KoljDVlDKjv Np8f+Ft/8B98yfb8WeLVUC5P4Oz2ocUZoRjOuRu/t3NKyi2dMQP6eZ89LmFexDHg 6MH2nxys7wxyfGjZ3T3t+MaCeGOAi2F7U+EQqin6nJ6kdtz34Xx7WdHhcwxU1xar aaxGprKy5vtQSd+QhLOEqrt8xLFxO1V7p40cDOwg4pD0F7JqqwaQMN8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:19 2024 by rpki-client on console-fra.rpki-client.org