$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer File: 809C666CC84F942588E109E6E6C454A9CD0524EB.cer (raw, json) Hash identifier: s3zNffl8F7e/pabACt5H2VDy95ANxaG7oKSK4RjPEwg= Subject key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B88656CF817D57516BA2ED803E4EFEFC4E94093 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Jun 2024 20:27:59 +0000 Certificate not after: Fri 20 Jun 2025 20:32:59 +0000 Subordinate resources: IP: 103.131.61.0/24 IP: 2001:df7:300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:88:65:6c:f8:17:d5:75:16:ba:2e:d8:03:e4:ef:ef:c4:e9:40:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 20:27:59 2024 GMT Not After : Jun 20 20:32:59 2025 GMT Subject: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:3f:93:6f:fd:dc:42:6b:b8:ae:2f:b7:a5: c9:67:53:e3:7d:47:de:21:49:5a:2d:0b:59:7f:1c: e8:7a:90:88:9b:e0:06:d7:cf:c6:7b:81:1f:7c:78: de:30:6f:37:d3:f5:2e:e9:2f:1e:7a:26:c6:a5:83: 06:59:44:4b:9b:46:fd:c2:7c:a8:20:2a:3c:e4:d7: 4b:de:12:6b:ff:2d:6c:71:fc:18:16:2d:fd:28:a9: 47:fc:7c:f3:c5:a9:71:42:e8:d2:e6:51:ec:15:66: 18:e7:f7:93:fd:93:69:19:20:c2:31:fd:a5:e1:76: ac:97:19:aa:5e:a4:d0:25:7b:b7:02:7b:dc:09:40: 91:28:50:43:5b:8b:de:f3:7c:53:57:12:7b:63:1c: f1:b6:eb:c6:e2:30:a5:46:29:5b:79:87:cb:a0:ef: 0e:5e:e0:22:d9:00:41:2c:b2:93:12:1f:14:53:01: c8:a0:42:89:90:a7:8a:51:1e:e2:14:ea:6d:8e:81: bf:4c:98:c7:d4:4a:00:e1:19:ac:bb:62:59:65:02: 5f:c0:30:29:1a:c4:b1:2d:99:e4:4d:9a:e1:7c:01: 97:36:6f:fd:43:37:2b:00:52:0c:cf:f9:56:10:9b: ee:d9:90:be:ab:c1:15:c0:3c:75:25:ad:06:c8:81: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.61.0/24 IPv6: 2001:df7:300::/48 Signature Algorithm: sha256WithRSAEncryption 3c:3f:c0:99:90:a8:98:9d:05:3b:cc:e3:8d:61:6c:b6:4f:44: 16:31:1c:fb:95:89:fc:46:37:c6:fd:56:3c:6f:ac:ee:39:e1: 1a:5c:b3:24:91:1e:56:33:4a:a8:62:f6:84:30:f2:69:6f:93: bc:03:e4:3c:c8:e3:6d:7d:b0:9f:a8:7b:33:74:3a:48:77:18: 6f:e3:37:4f:b8:d9:a2:e3:91:4a:67:77:45:f8:47:d9:4b:90: 12:35:51:26:56:de:50:39:54:5b:86:e1:c1:5b:e8:1b:09:1d: 19:7e:58:45:21:64:21:ef:d4:d1:56:56:eb:e3:33:f4:1e:90: ca:62:46:4d:32:d0:21:0b:f4:cc:95:3e:67:34:e6:98:8b:5a: ed:b5:fb:a0:4f:1b:84:f3:c8:c3:e7:9d:10:3e:ae:ab:37:11: 3e:30:ae:f4:0f:52:e9:dd:c7:83:5e:1a:49:2a:8a:bc:91:84: 80:1e:20:83:67:ca:ac:78:74:f5:72:25:d4:a4:5f:7f:af:7a: 17:70:db:eb:3d:52:93:61:ed:2d:3d:f7:95:e5:17:02:c1:4d: c2:15:06:05:d8:9c:d8:6c:eb:cc:b5:e9:a0:77:d6:11:c0:94: 7b:84:d9:ff:84:b2:be:18:50:b9:f1:4f:25:2f:ca:88:ec:30: ab:a6:e3:7c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUe4hlbPgX1XUWui7YA+Tv78TpQJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyMTIwMjc1OVoX DTI1MDYyMDIwMzI1OVowMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEw OUU2RTZDNDU0QTlDRDA1MjRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbwP5Nv/dxCa7iuL7elyWdT431H3iFJWi0LWX8c6HqQiJvgBtfPxnuBH3x4 3jBvN9P1LukvHnomxqWDBllES5tG/cJ8qCAqPOTXS94Sa/8tbHH8GBYt/SipR/x8 88WpcULo0uZR7BVmGOf3k/2TaRkgwjH9peF2rJcZql6k0CV7twJ73AlAkShQQ1uL 3vN8U1cSe2Mc8bbrxuIwpUYpW3mHy6DvDl7gItkAQSyykxIfFFMByKBCiZCnilEe 4hTqbY6Bv0yYx9RKAOEZrLtiWWUCX8AwKRrEsS2Z5E2a4XwBlzZv/UM3KwBSDM/5 VhCb7tmQvqvBFcA8dSWtBsiBAQUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICcZmzIT5QliOEJ5ubEVKnNBSTrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZDU3MjAx LTdlMmYtNDliYi05NDFkLTlmY2FiZTg2MjNmNS8wLzgwOUM2NjZDQzg0Rjk0MjU4 OEUxMDlFNkU2QzQ1NEE5Q0QwNTI0RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngz0wDwQCAAIwCQMHACABDfcDADANBgkqhkiG9w0BAQsFAAOCAQEAPD/AmZCo mJ0FO8zjjWFstk9EFjEc+5WJ/EY3xv1WPG+s7jnhGlyzJJEeVjNKqGL2hDDyaW+T vAPkPMjjbX2wn6h7M3Q6SHcYb+M3T7jZouORSmd3RfhH2UuQEjVRJlbeUDlUW4bh wVvoGwkdGX5YRSFkIe/U0VZW6+Mz9B6QymJGTTLQIQv0zJU+ZzTmmIta7bX7oE8b hPPIw+edED6uqzcRPjCu9A9S6d3Hg14aSSqKvJGEgB4gg2fKrHh09XIl1KRff696 F3Db6z1Sk2HtLT33leUXAsFNwhUGBdic2GzrzLXpoHfWEcCUe4TZ/4SyvhhQufFP JS/KiOwwq6bjfA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org