$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer File: 809C666CC84F942588E109E6E6C454A9CD0524EB.cer (raw, json) Hash identifier: wn5bSCZU1EKrTuQMHsCNLKwY1M4Gw57VfMtPIdkc5gw= Subject key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35A0AEB563F46ECA04201575BBFA68638F2046F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Jul 2023 17:30:36 +0000 Certificate not after: Fri 19 Jul 2024 17:35:36 +0000 Subordinate resources: IP: 103.131.61.0/24 IP: 2001:df7:300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a0:ae:b5:63:f4:6e:ca:04:20:15:75:bb:fa:68:63:8f:20:46:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 17:30:36 2023 GMT Not After : Jul 19 17:35:36 2024 GMT Subject: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:3f:93:6f:fd:dc:42:6b:b8:ae:2f:b7:a5: c9:67:53:e3:7d:47:de:21:49:5a:2d:0b:59:7f:1c: e8:7a:90:88:9b:e0:06:d7:cf:c6:7b:81:1f:7c:78: de:30:6f:37:d3:f5:2e:e9:2f:1e:7a:26:c6:a5:83: 06:59:44:4b:9b:46:fd:c2:7c:a8:20:2a:3c:e4:d7: 4b:de:12:6b:ff:2d:6c:71:fc:18:16:2d:fd:28:a9: 47:fc:7c:f3:c5:a9:71:42:e8:d2:e6:51:ec:15:66: 18:e7:f7:93:fd:93:69:19:20:c2:31:fd:a5:e1:76: ac:97:19:aa:5e:a4:d0:25:7b:b7:02:7b:dc:09:40: 91:28:50:43:5b:8b:de:f3:7c:53:57:12:7b:63:1c: f1:b6:eb:c6:e2:30:a5:46:29:5b:79:87:cb:a0:ef: 0e:5e:e0:22:d9:00:41:2c:b2:93:12:1f:14:53:01: c8:a0:42:89:90:a7:8a:51:1e:e2:14:ea:6d:8e:81: bf:4c:98:c7:d4:4a:00:e1:19:ac:bb:62:59:65:02: 5f:c0:30:29:1a:c4:b1:2d:99:e4:4d:9a:e1:7c:01: 97:36:6f:fd:43:37:2b:00:52:0c:cf:f9:56:10:9b: ee:d9:90:be:ab:c1:15:c0:3c:75:25:ad:06:c8:81: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.61.0/24 IPv6: 2001:df7:300::/48 Signature Algorithm: sha256WithRSAEncryption 3f:37:04:1b:40:a2:f7:63:73:35:fb:eb:59:74:f2:ab:a4:85: ea:42:ae:2d:0e:29:5c:40:4b:2d:06:c8:cc:bf:ae:4c:07:e5: e5:a5:14:73:c7:87:ac:8c:18:68:a3:00:33:28:cc:78:34:e4: 4d:b7:fe:bb:79:c6:21:1f:87:32:d6:7c:9a:c9:b2:e5:8c:ad: af:f1:f5:1e:1a:0c:52:11:57:63:48:2f:4b:67:23:dd:76:4e: 38:32:75:17:03:2e:f8:5e:21:81:db:30:fa:df:2a:97:8f:f1: 4a:f3:3e:13:0d:0e:04:b2:bc:08:df:1f:29:9c:a3:ea:32:d9: c7:b5:7e:a1:e4:fd:6a:99:99:21:9b:90:23:de:25:99:22:e3: 03:cf:23:ea:69:d7:1d:4a:3c:68:6c:43:71:4d:76:26:60:82: 49:5a:7d:0f:d6:99:e0:8d:4b:0d:41:ea:8f:21:33:e5:88:25: 7a:c2:86:01:8b:0e:33:69:5f:ca:2b:d2:ff:6f:53:81:2c:9e: eb:1a:db:d8:51:e1:ca:c5:d1:07:ca:fc:84:98:eb:f5:9d:72: 9b:83:7f:b1:88:f6:8a:df:b2:53:03:78:35:18:ed:c5:09:96: ea:5c:99:10:38:4c:5d:4a:97:c1:8c:bf:bb:f1:54:cd:8d:0a: 56:51:85:cc -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUNaCutWP0bsoEIBV1u/poY48gRvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyMTE3MzAzNloX DTI0MDcxOTE3MzUzNlowMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEw OUU2RTZDNDU0QTlDRDA1MjRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbwP5Nv/dxCa7iuL7elyWdT431H3iFJWi0LWX8c6HqQiJvgBtfPxnuBH3x4 3jBvN9P1LukvHnomxqWDBllES5tG/cJ8qCAqPOTXS94Sa/8tbHH8GBYt/SipR/x8 88WpcULo0uZR7BVmGOf3k/2TaRkgwjH9peF2rJcZql6k0CV7twJ73AlAkShQQ1uL 3vN8U1cSe2Mc8bbrxuIwpUYpW3mHy6DvDl7gItkAQSyykxIfFFMByKBCiZCnilEe 4hTqbY6Bv0yYx9RKAOEZrLtiWWUCX8AwKRrEsS2Z5E2a4XwBlzZv/UM3KwBSDM/5 VhCb7tmQvqvBFcA8dSWtBsiBAQUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICcZmzIT5QliOEJ5ubEVKnNBSTrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZDU3MjAx LTdlMmYtNDliYi05NDFkLTlmY2FiZTg2MjNmNS8wLzgwOUM2NjZDQzg0Rjk0MjU4 OEUxMDlFNkU2QzQ1NEE5Q0QwNTI0RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngz0wDwQCAAIwCQMHACABDfcDADANBgkqhkiG9w0BAQsFAAOCAQEAPzcEG0Ci 92NzNfvrWXTyq6SF6kKuLQ4pXEBLLQbIzL+uTAfl5aUUc8eHrIwYaKMAMyjMeDTk Tbf+u3nGIR+HMtZ8msmy5Yytr/H1HhoMUhFXY0gvS2cj3XZOODJ1FwMu+F4hgdsw +t8ql4/xSvM+Ew0OBLK8CN8fKZyj6jLZx7V+oeT9apmZIZuQI94lmSLjA88j6mnX HUo8aGxDcU12JmCCSVp9D9aZ4I1LDUHqjyEz5YglesKGAYsOM2lfyivS/29TgSye 6xrb2FHhysXRB8r8hJjr9Z1ym4N/sYj2it+yUwN4NRjtxQmW6lyZEDhMXUqXwYy/ u/FUzY0KVlGFzA== -----END CERTIFICATE-----Generated at Wed May 8 10:06:49 2024 by rpki-client on console-ams.rpki-client.org