$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.cer (raw, json) Hash identifier: Y8xlpMsbwyM6QxJr6ms3FkM3AaacTljEz6PQT85itp8= Subject key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D20AE94A2FD663C8F4AFAC22FBB2F962BF6AFDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft caRepository: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Dec 2023 08:14:48 +0000 Certificate not after: Fri 20 Dec 2024 08:19:48 +0000 Subordinate resources: IP: 103.16.223.0/24 IP: 103.51.131.0/24 IP: 103.108.119.0/24 IP: 2001:df5:3200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:20:ae:94:a2:fd:66:3c:8f:4a:fa:c2:2f:bb:2f:96:2b:f6:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 08:14:48 2023 GMT Not After : Dec 20 08:19:48 2024 GMT Subject: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:d7:f3:b8:f9:f6:9f:d2:b0:41:b8:65:fc: db:63:07:7d:01:10:d1:fa:0f:1a:0c:8a:50:6e:c9: e7:37:02:6a:6c:f2:65:f6:af:5f:8c:30:91:21:f3: 4c:69:85:10:58:8c:d5:b1:18:f8:72:9c:ed:da:4f: c5:06:58:f2:cd:5f:b2:75:a0:f6:28:c7:5b:fe:6a: dc:6b:b8:34:c5:af:89:f9:0f:34:ee:ef:01:5d:86: b4:ae:d6:fd:ce:3a:2f:69:85:a9:48:03:ac:21:2f: bc:ca:d7:07:23:7a:9f:cc:f6:e3:93:39:2c:7e:7b: bf:65:ed:72:b5:1b:18:e0:08:a3:2a:a1:71:79:13: 51:f3:ef:07:5b:6a:80:d6:f2:53:d8:58:22:b1:65: 74:18:2f:5c:88:a8:5b:0c:80:1b:38:51:be:9f:e3: 49:73:8b:ea:aa:14:69:42:4a:89:6d:29:fc:49:10: 06:53:e5:91:ae:41:0e:39:3b:27:e6:cf:77:35:ec: ca:9d:ab:d6:f6:80:5a:bd:04:9e:e3:10:75:71:40: 80:33:c6:57:29:23:93:d9:9c:5e:39:a9:74:9e:9f: ab:d4:d1:83:85:9d:17:7f:a7:9a:8a:6d:2e:06:6c: 87:83:2c:0f:59:9e:34:81:7e:2d:7a:4f:5d:1d:7d: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.223.0/24 103.51.131.0/24 103.108.119.0/24 IPv6: 2001:df5:3200::/48 Signature Algorithm: sha256WithRSAEncryption 98:9a:f3:b9:07:92:05:94:22:63:2f:cc:78:c3:15:6a:1c:f7: 39:fd:e6:a1:96:bf:45:94:0f:96:73:f5:ef:4e:ea:a3:7d:81: 58:6b:96:0f:1e:c4:92:62:6f:ed:1f:3b:7d:7d:97:b2:de:e1: 07:44:b1:44:cf:f9:0d:15:d0:42:3c:75:50:01:e9:9f:f0:59: cc:80:d9:bb:94:ab:2f:22:bc:22:c4:09:16:be:5d:6c:55:63: d3:8d:84:d6:d1:42:ac:39:4d:8d:cc:97:be:a6:29:9f:86:87: 2a:6c:b8:f3:47:39:14:e8:61:21:7b:77:f6:d5:3b:2a:73:75: 0b:75:f3:ce:56:50:86:26:97:70:08:70:bb:c9:f2:24:50:10: de:ec:3f:ca:da:da:f9:22:15:a0:e8:6a:57:3f:5d:90:f5:75: 17:b0:ab:2f:8e:03:d7:2b:1d:98:ee:1a:19:16:e1:9a:5e:cd: 3d:bb:2a:40:45:2d:98:ea:e7:83:e9:86:48:62:64:35:02:1c: 6c:56:d0:20:2c:69:9d:60:db:36:79:b3:a7:48:a0:cc:e1:76: 34:41:21:10:22:a2:58:26:2f:6a:ce:9a:fc:3c:c6:f1:f3:0e: 00:5b:2a:3b:3f:5b:61:cd:4a:b3:30:d4:6b:e9:cf:09:b4:8a: 45:30:9e:6e -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUTSCulKL9ZjyPSvrCL7svliv2r98wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMjA4MTQ0OFoX DTI0MTIyMDA4MTk0OFowMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0 ODJBMDMwMkFGMTJCM0NCQzY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1G1/O4+faf0rBBuGX822MHfQEQ0foPGgyKUG7J5zcCamzyZfavX4wwkSHz TGmFEFiM1bEY+HKc7dpPxQZY8s1fsnWg9ijHW/5q3Gu4NMWvifkPNO7vAV2GtK7W /c46L2mFqUgDrCEvvMrXByN6n8z245M5LH57v2XtcrUbGOAIoyqhcXkTUfPvB1tq gNbyU9hYIrFldBgvXIioWwyAGzhRvp/jSXOL6qoUaUJKiW0p/EkQBlPlka5BDjk7 J+bPdzXsyp2r1vaAWr0EnuMQdXFAgDPGVykjk9mcXjmpdJ6fq9TRg4WdF3+nmopt LgZsh4MsD1meNIF+LXpPXR19wwUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIBDetrd9chSKEVIKgMCrxKzy8Z9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JiYzgzYjU1 LWM4YzEtNDYxZC1iMjhiLTBkNGE5OTUzZTFkZC8wLzgwNDM3QURBRERGNUM4NTIy ODQ1NDgyQTAzMDJBRjEyQjNDQkM2N0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnEN8DBABnM4MDBABnbHcwDwQCAAIwCQMHACABDfUyADANBgkqhkiG9w0BAQsF AAOCAQEAmJrzuQeSBZQiYy/MeMMVahz3Of3moZa/RZQPlnP1707qo32BWGuWDx7E kmJv7R87fX2Xst7hB0SxRM/5DRXQQjx1UAHpn/BZzIDZu5SrLyK8IsQJFr5dbFVj 042E1tFCrDlNjcyXvqYpn4aHKmy480c5FOhhIXt39tU7KnN1C3XzzlZQhiaXcAhw u8nyJFAQ3uw/ytra+SIVoOhqVz9dkPV1F7CrL44D1ysdmO4aGRbhml7NPbsqQEUt mOrng+mGSGJkNQIcbFbQICxpnWDbNnmzp0igzOF2NEEhECKiWCYvas6a/DzG8fMO AFsqOz9bYc1KszDUa+nPCbSKRTCebg== -----END CERTIFICATE-----Generated at Wed May 8 15:17:38 2024 by rpki-client on console-fra.rpki-client.org