$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer (raw, json) Hash identifier: ZBna65JP52JZwC7+hY9xzUfZ6SZ8RWfPhZGNapZ432w= Subject key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CE90AF87E96E2E042B8027E00CB936821DB086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Aug 2023 13:06:35 +0000 Certificate not after: Thu 01 Aug 2024 13:11:35 +0000 Subordinate resources: IP: 103.189.254.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e9:0a:f8:7e:96:e2:e0:42:b8:02:7e:00:cb:93:68:21:db:08:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 3 13:06:35 2023 GMT Not After : Aug 1 13:11:35 2024 GMT Subject: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:73:e8:86:f6:8f:85:40:9d:28:f6:17:f8: 45:61:19:23:e3:0a:07:89:bb:1d:25:28:0f:66:78: 9c:4e:00:07:2a:02:39:a5:d5:c4:ab:2a:39:ae:80: 56:8a:3b:80:69:18:03:2e:27:60:80:72:a3:06:31: 6c:a1:98:75:3e:d3:b0:4a:8b:23:60:61:2a:1c:43: 6f:68:24:00:0f:5d:51:c4:87:bd:95:76:ef:62:c6: 1c:01:8e:39:d9:95:03:e8:22:1c:57:ed:fd:fd:d7: 97:b4:76:41:cc:3c:9d:2a:cd:d4:54:38:43:d3:f7: 59:ea:de:4f:16:29:bc:09:e5:8f:ec:fd:47:37:3b: 84:26:89:95:79:d6:f4:4e:68:6f:90:d7:21:cb:92: 73:56:0c:78:20:e5:3d:26:af:d4:24:3b:28:0f:f9: d5:fc:14:ff:81:9f:ca:68:de:d5:a1:fc:fb:eb:0e: ad:61:01:7b:bb:19:f0:ef:b6:88:70:93:ee:70:3e: 40:96:d5:71:d8:05:5a:bd:c6:77:51:a3:e0:aa:c8: 81:ab:4f:22:17:d1:b2:8d:34:6f:39:6f:d7:bd:93: 6c:48:db:6d:dc:03:46:b5:8a:fd:79:d0:cd:f8:62: 02:02:84:35:8f:4b:af:c2:32:5f:4d:a8:e8:8d:ef: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.254.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:5a:7b:4c:95:d0:b0:c8:fd:10:e1:85:70:db:e5:7f:80:d1: ab:85:6b:a8:39:f8:53:c4:c1:e7:90:a5:63:58:fb:1b:9c:b9: 66:e9:f8:9e:b0:ec:cc:79:07:b2:ba:a0:32:9c:c4:06:5c:d7: 2c:d6:0d:a2:e1:4f:2b:4a:18:25:28:ef:e4:69:76:6e:89:82: 80:62:22:22:01:53:67:ce:87:f6:05:90:bf:a6:04:fd:9e:a4: 13:f2:27:1a:5a:6c:6f:60:32:22:32:83:85:02:b2:4e:67:cc: 64:df:f6:7e:96:db:6f:7d:fb:05:de:67:e7:fc:67:b2:4f:ff: 17:47:50:91:0f:9a:a3:37:03:23:49:e9:2b:20:ea:44:c7:1a: 57:22:90:e4:b4:d3:37:75:c4:40:4a:87:f3:94:7f:75:2c:3c: 99:12:80:1b:e9:dd:fe:0e:3e:40:b5:9a:43:1a:ba:37:72:5a: 87:09:a8:59:b8:3b:aa:b8:6c:21:5c:ee:0d:92:10:c8:f5:48: ff:f2:e1:a4:fa:64:6d:7d:23:fd:84:96:fb:02:76:45:50:c8: b2:34:63:8a:80:a6:87:39:3f:13:3e:67:ef:da:60:30:b1:00: 9e:de:13:c5:c8:f1:23:8e:df:a5:26:04:fa:53:b6:5f:7d:a2: 03:39:d3:03 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfOkK+H6W4uBCuAJ+AMuTaCHbCG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMzEzMDYzNVoX DTI0MDgwMTEzMTEzNVowMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4 RTlCQzFDMEQwMTVGNDM2RkZERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsOc+iG9o+FQJ0o9hf4RWEZI+MKB4m7HSUoD2Z4nE4AByoCOaXVxKsqOa6A Voo7gGkYAy4nYIByowYxbKGYdT7TsEqLI2BhKhxDb2gkAA9dUcSHvZV272LGHAGO OdmVA+giHFft/f3Xl7R2Qcw8nSrN1FQ4Q9P3WereTxYpvAnlj+z9Rzc7hCaJlXnW 9E5ob5DXIcuSc1YMeCDlPSav1CQ7KA/51fwU/4Gfymje1aH8++sOrWEBe7sZ8O+2 iHCT7nA+QJbVcdgFWr3Gd1Gj4KrIgatPIhfRso00bzlv172TbEjbbdwDRrWK/XnQ zfhiAgKENY9Lr8IyX02o6I3vJxkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIAw7YpI7ZhaXdiOm8HA0BX0Nv/fMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDA1NmI0 LWYwMjctNDRmYS05NzRkLTRhMWVkMTkxYWU1Ni8wLzgwMzBFRDhBNDhFRDk4NUE1 REQ4OEU5QkMxQzBEMDE1RjQzNkZGREYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvf4wDQYJKoZIhvcNAQELBQADggEBAHxae0yV0LDI/RDhhXDb5X+A0auFa6g5 +FPEweeQpWNY+xucuWbp+J6w7Mx5B7K6oDKcxAZc1yzWDaLhTytKGCUo7+Rpdm6J goBiIiIBU2fOh/YFkL+mBP2epBPyJxpabG9gMiIyg4UCsk5nzGTf9n6W2299+wXe Z+f8Z7JP/xdHUJEPmqM3AyNJ6Ssg6kTHGlcikOS00zd1xEBKh/OUf3UsPJkSgBvp 3f4OPkC1mkMaujdyWocJqFm4O6q4bCFc7g2SEMj1SP/y4aT6ZG19I/2ElvsCdkVQ yLI0Y4qApoc5PxM+Z+/aYDCxAJ7eE8XI8SOO36UmBPpTtl99ogM50wM= -----END CERTIFICATE-----Generated at Thu May 9 00:37:02 2024 by rpki-client on console-fra.rpki-client.org