$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer (raw, json) Hash identifier: W411TLfLVJdAuT6BEZeQX9J+oKdO2jCbUMJCSvAnmQA= Subject key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 061323C11DDE53C72EDDA2983C729BA103791615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft caRepository: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Aug 2024 07:33:54 +0000 Certificate not after: Fri 22 Aug 2025 07:38:54 +0000 Subordinate resources: IP: 103.62.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Oct 2024 06:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:13:23:c1:1d:de:53:c7:2e:dd:a2:98:3c:72:9b:a1:03:79:16:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 23 07:33:54 2024 GMT Not After : Aug 22 07:38:54 2025 GMT Subject: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:17:4e:db:85:5f:56:f7:3d:1e:3c:22:d2: 70:a3:3b:11:1e:2e:ce:1d:05:fc:80:53:54:94:4b: f5:80:e3:28:71:f0:3f:55:cc:98:3f:11:38:20:a4: 6d:64:40:5a:74:fa:d1:61:59:ab:de:9b:39:2d:44: de:2b:86:02:94:6a:84:c5:76:3e:43:6b:75:2f:a8: 07:db:c5:cc:23:93:e6:8d:aa:34:6c:ce:36:82:22: f0:61:1b:50:42:e7:d3:d5:9c:4b:95:1f:b5:bc:ae: ad:77:09:ff:13:0d:c7:d8:ec:42:6d:6b:e6:7b:cb: 83:37:36:22:f6:f5:d9:57:1b:95:dc:df:4b:25:8d: 57:3d:aa:aa:ea:ca:69:20:72:c1:45:f5:2c:b8:c8: 9a:20:32:f6:ab:50:9f:9d:cd:13:a4:84:67:29:e7: 7d:c1:74:97:6d:55:d9:19:a4:5e:0a:c4:24:9f:5e: a9:25:90:00:1d:bf:36:bd:ca:76:e1:26:cc:d5:fd: 9a:27:32:4f:1d:3f:ab:f6:4c:82:57:97:d1:4c:0e: 3d:61:e0:c9:7c:ca:9e:15:84:b5:7e:c2:4b:34:c1: ec:7c:92:e0:d8:e4:73:42:bf:c8:14:0e:b2:b5:f7: 69:87:ab:af:d4:fd:bd:7c:4f:40:0b:e5:88:b1:ec: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.202.0/23 Signature Algorithm: sha256WithRSAEncryption 59:a4:b2:46:9c:20:71:04:f2:b4:5e:ec:e3:d2:f6:dc:47:3a: 3a:b7:ff:e8:61:1b:cd:ac:2a:d0:ba:32:36:ca:2a:23:f4:37: 8c:79:49:e6:4f:ff:e6:7c:7b:ff:14:d3:c5:88:bb:9c:ff:66: 7e:00:33:9d:ca:b3:f9:c8:54:39:f6:fa:14:8a:09:8b:b7:2f: c8:f8:a0:e0:8d:80:7d:bd:49:88:58:6f:2b:48:32:43:28:c7: 19:e5:a0:95:d3:8a:c3:a4:a5:5a:0c:4d:3b:67:d9:05:0e:ed: 83:18:d0:a8:7f:a4:74:49:2e:cb:4f:f1:9f:78:5a:5e:fa:ab: 31:6b:c3:b3:1b:41:02:0b:ef:fd:dc:cb:a3:d6:e5:4f:29:56: bc:f4:a9:70:9a:75:ea:fb:2c:37:fa:d4:13:b7:af:19:41:67: 9d:ce:6c:d1:8f:b4:a4:63:82:0e:22:a8:a3:63:f4:76:50:5f: 0b:c4:9c:89:45:b9:79:9f:b9:a1:2a:9a:1c:20:b4:bd:0b:2f: 57:72:53:61:54:17:8e:3f:a8:d7:1f:e7:9b:12:48:2f:5f:96: 52:6d:e7:fb:79:6d:ac:38:70:c5:c1:cf:23:af:d9:0c:4c:8a: ae:31:32:30:12:aa:a2:f9:72:85:1b:62:c0:af:0d:0c:32:77: ef:6b:69:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBhMjwR3eU8cu3aKYPHKboQN5FhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMzA3MzM1NFoX DTI1MDgyMjA3Mzg1NFowMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQz OEE4QURGRkNEOUVGM0EyNzJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMn1F07bhV9W9z0ePCLScKM7ER4uzh0F/IBTVJRL9YDjKHHwP1XMmD8ROCCk bWRAWnT60WFZq96bOS1E3iuGApRqhMV2PkNrdS+oB9vFzCOT5o2qNGzONoIi8GEb UELn09WcS5UftbyurXcJ/xMNx9jsQm1r5nvLgzc2Ivb12VcbldzfSyWNVz2qqurK aSBywUX1LLjImiAy9qtQn53NE6SEZynnfcF0l21V2RmkXgrEJJ9eqSWQAB2/Nr3K duEmzNX9micyTx0/q/ZMgleX0UwOPWHgyXzKnhWEtX7CSzTB7HyS4Njkc0K/yBQO srX3aYerr9T9vXxPQAvliLHsD+8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICZkXR1AaPNWKQ4qK3/zZ7zonLlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4MWY0NGFh LTg5YTMtNGJjMy1iYjI5LWRiNmM5ODJhMTM2Yi8wLzgwOTk5MTc0NzUwMUEzQ0Q1 OEE0MzhBOEFERkZDRDlFRjNBMjcyRTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnPsowDQYJKoZIhvcNAQELBQADggEBAFmkskacIHEE8rRe7OPS9txHOjq3/+hh G82sKtC6MjbKKiP0N4x5SeZP/+Z8e/8U08WIu5z/Zn4AM53Ks/nIVDn2+hSKCYu3 L8j4oOCNgH29SYhYbytIMkMoxxnloJXTisOkpVoMTTtn2QUO7YMY0Kh/pHRJLstP 8Z94Wl76qzFrw7MbQQIL7/3cy6PW5U8pVrz0qXCader7LDf61BO3rxlBZ53ObNGP tKRjgg4iqKNj9HZQXwvEnIlFuXmfuaEqmhwgtL0LL1dyU2FUF44/qNcf55sSSC9f llJt5/t5baw4cMXBzyOv2QxMiq4xMjASqqL5coUbYsCvDQwyd+9raVM= -----END CERTIFICATE-----Generated at Sat Sep 28 06:50:29 2024 by rpki-client on console-fra.rpki-client.org