$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.cer (raw, json) Hash identifier: 5be9J6jeccSXg8m9neC3E431bBuF3tCqXjXzV4eZEF4= Subject key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E454F0785DAA1C798343523780715A0E53EF52D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft caRepository: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Nov 2024 16:19:42 +0000 Certificate not after: Fri 21 Nov 2025 16:24:42 +0000 Subordinate resources: IP: 103.16.223.0/24 IP: 103.51.131.0/24 IP: 103.108.119.0/24 IP: 2001:df5:3200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:45:4f:07:85:da:a1:c7:98:34:35:23:78:07:15:a0:e5:3e:f5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 22 16:19:42 2024 GMT Not After : Nov 21 16:24:42 2025 GMT Subject: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:d7:f3:b8:f9:f6:9f:d2:b0:41:b8:65:fc: db:63:07:7d:01:10:d1:fa:0f:1a:0c:8a:50:6e:c9: e7:37:02:6a:6c:f2:65:f6:af:5f:8c:30:91:21:f3: 4c:69:85:10:58:8c:d5:b1:18:f8:72:9c:ed:da:4f: c5:06:58:f2:cd:5f:b2:75:a0:f6:28:c7:5b:fe:6a: dc:6b:b8:34:c5:af:89:f9:0f:34:ee:ef:01:5d:86: b4:ae:d6:fd:ce:3a:2f:69:85:a9:48:03:ac:21:2f: bc:ca:d7:07:23:7a:9f:cc:f6:e3:93:39:2c:7e:7b: bf:65:ed:72:b5:1b:18:e0:08:a3:2a:a1:71:79:13: 51:f3:ef:07:5b:6a:80:d6:f2:53:d8:58:22:b1:65: 74:18:2f:5c:88:a8:5b:0c:80:1b:38:51:be:9f:e3: 49:73:8b:ea:aa:14:69:42:4a:89:6d:29:fc:49:10: 06:53:e5:91:ae:41:0e:39:3b:27:e6:cf:77:35:ec: ca:9d:ab:d6:f6:80:5a:bd:04:9e:e3:10:75:71:40: 80:33:c6:57:29:23:93:d9:9c:5e:39:a9:74:9e:9f: ab:d4:d1:83:85:9d:17:7f:a7:9a:8a:6d:2e:06:6c: 87:83:2c:0f:59:9e:34:81:7e:2d:7a:4f:5d:1d:7d: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.223.0/24 103.51.131.0/24 103.108.119.0/24 IPv6: 2001:df5:3200::/48 Signature Algorithm: sha256WithRSAEncryption 68:27:6f:ad:b1:9e:2b:17:0c:6e:08:36:10:97:75:a1:5b:be: 8e:6f:4f:09:0e:cf:80:51:fc:19:e6:3e:1e:7b:19:c8:7f:cb: 7c:ea:05:6b:1a:ec:36:ff:05:34:d9:8c:df:65:34:4a:84:3a: 6b:72:7a:b3:4c:c3:64:1b:bc:b0:46:74:47:71:48:8a:89:37: 56:03:05:b2:fb:b7:07:9f:ef:f8:06:98:87:6d:27:e8:09:af: 38:f3:11:6c:b0:5f:d8:e8:a6:6a:b4:19:25:d4:93:52:20:96: cc:71:63:2c:72:c8:02:55:76:af:44:8b:81:20:52:b0:ad:d2: 67:77:5a:54:34:cf:16:97:85:37:70:f6:61:58:e2:83:7a:44: fa:fa:d0:11:bd:33:97:63:8b:9c:25:c8:6e:a8:4f:9e:a7:9b: 11:d0:97:e3:6a:c7:aa:13:d1:80:4d:a0:42:bb:37:c9:34:cf: 77:90:03:1f:e9:f2:a2:b0:bb:1a:00:6d:5a:34:f2:03:cc:c5: 4f:72:b2:f0:74:65:18:cb:fc:45:4f:53:76:8d:8c:6e:3e:b9: 08:8b:f3:f6:4f:12:1f:64:9b:28:6f:75:ad:1c:ee:a2:22:58: 2b:89:51:d4:3d:d6:7d:96:7b:31:64:a9:60:67:64:4d:8d:78: 59:8c:05:3a -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIULkVPB4XaoceYNDUjeAcVoOU+9S0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMjE2MTk0MloX DTI1MTEyMTE2MjQ0MlowMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0 ODJBMDMwMkFGMTJCM0NCQzY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1G1/O4+faf0rBBuGX822MHfQEQ0foPGgyKUG7J5zcCamzyZfavX4wwkSHz TGmFEFiM1bEY+HKc7dpPxQZY8s1fsnWg9ijHW/5q3Gu4NMWvifkPNO7vAV2GtK7W /c46L2mFqUgDrCEvvMrXByN6n8z245M5LH57v2XtcrUbGOAIoyqhcXkTUfPvB1tq gNbyU9hYIrFldBgvXIioWwyAGzhRvp/jSXOL6qoUaUJKiW0p/EkQBlPlka5BDjk7 J+bPdzXsyp2r1vaAWr0EnuMQdXFAgDPGVykjk9mcXjmpdJ6fq9TRg4WdF3+nmopt LgZsh4MsD1meNIF+LXpPXR19wwUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIBDetrd9chSKEVIKgMCrxKzy8Z9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JiYzgzYjU1 LWM4YzEtNDYxZC1iMjhiLTBkNGE5OTUzZTFkZC8wLzgwNDM3QURBRERGNUM4NTIy ODQ1NDgyQTAzMDJBRjEyQjNDQkM2N0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnEN8DBABnM4MDBABnbHcwDwQCAAIwCQMHACABDfUyADANBgkqhkiG9w0BAQsF AAOCAQEAaCdvrbGeKxcMbgg2EJd1oVu+jm9PCQ7PgFH8GeY+HnsZyH/LfOoFaxrs Nv8FNNmM32U0SoQ6a3J6s0zDZBu8sEZ0R3FIiok3VgMFsvu3B5/v+AaYh20n6Amv OPMRbLBf2OimarQZJdSTUiCWzHFjLHLIAlV2r0SLgSBSsK3SZ3daVDTPFpeFN3D2 YVjig3pE+vrQEb0zl2OLnCXIbqhPnqebEdCX42rHqhPRgE2gQrs3yTTPd5ADH+ny orC7GgBtWjTyA8zFT3Ky8HRlGMv8RU9Tdo2Mbj65CIvz9k8SH2SbKG91rRzuoiJY K4lR1D3WfZZ7MWSpYGdkTY14WYwFOg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:50 2024 by rpki-client on console-fra.rpki-client.org