$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer (raw, json) Hash identifier: o5VIc/gGX1xyPyneXqRDS3JYPtY4OzakE6F4qUQ8tU4= Subject key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F5F2CCEA64C85D1BF5F6587E28240FE8624903C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft caRepository: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Sep 2023 15:23:56 +0000 Certificate not after: Tue 24 Sep 2024 15:28:56 +0000 Subordinate resources: IP: 103.3.58.0/24 IP: 103.76.148.0/22 IP: 120.89.90.0/23 IP: 203.29.26.0/24 IP: 2407:6f80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:2c:ce:a6:4c:85:d1:bf:5f:65:87:e2:82:40:fe:86:24:90:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 15:23:56 2023 GMT Not After : Sep 24 15:28:56 2024 GMT Subject: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:76:9f:d6:94:b9:a2:ae:81:79:18:e5:2b: 30:2c:80:cc:9d:bb:5c:5b:6d:94:d3:13:2d:17:3d: 3b:2f:28:b6:16:32:fd:5a:cc:ee:2a:7c:16:a3:8f: 65:4e:10:91:a8:95:9f:48:b1:25:ce:46:69:66:11: 0b:a3:2f:49:44:76:d3:99:98:17:6f:b1:57:36:d8: 46:7a:bd:2f:f9:8d:83:96:1c:26:3d:65:69:95:04: 81:f7:2d:3d:79:95:f0:84:aa:a2:2c:e1:5d:38:ed: 6e:c5:bd:7d:70:f9:18:83:84:1a:a0:68:7f:08:07: bf:59:0c:b9:84:86:e6:b6:48:a4:61:7e:1b:68:92: f5:6d:eb:3f:d3:97:31:6e:69:60:b0:e3:4b:88:c4: 81:8e:c7:f8:09:cc:99:15:43:1b:2e:bd:e3:3e:fb: 4a:85:2f:1a:97:d9:46:53:73:88:61:b9:7b:71:d6: af:21:96:1e:5d:98:d0:7f:15:7c:c0:d6:e7:e0:de: f6:d8:45:89:96:5e:10:05:90:be:f8:d5:ca:ce:74: 29:54:36:d3:06:bf:77:cd:17:1c:92:a7:cf:36:21: 13:a7:74:4b:0e:b5:6b:be:1e:82:78:7c:db:8f:7d: fd:52:9f:b4:ea:ff:75:5d:54:1e:5e:d9:bd:dc:86: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.58.0/24 103.76.148.0/22 120.89.90.0/23 203.29.26.0/24 IPv6: 2407:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 50:91:6a:11:de:f4:51:84:3d:5c:fe:01:87:e2:36:a2:d3:e8: e0:91:a4:cc:df:26:71:e0:c5:ea:06:60:f3:5f:d7:a9:c5:40: bf:01:e4:70:f9:ca:a1:bf:27:46:c1:6a:f4:6f:95:82:0d:e4: da:b1:7f:dc:a2:49:b8:74:04:89:45:93:33:b0:6f:32:72:de: 7e:21:5c:2b:c4:39:2f:d9:42:79:41:5c:19:92:07:f4:fb:d0: d9:4e:7a:f9:d8:9e:69:df:e0:20:01:ae:e5:2f:1b:c3:62:82: 81:db:ad:24:0f:3d:7b:af:25:c1:43:31:75:14:0a:0f:11:3f: b8:0f:4b:92:8a:ce:63:c0:6d:54:bf:10:49:8d:cb:77:da:7c: 67:c3:76:52:c2:61:a6:18:cb:aa:52:34:92:c3:32:d9:24:7e: d9:54:5e:a3:00:89:82:19:e2:33:18:61:ea:29:5d:0e:aa:38: 06:a9:f1:d2:bd:a3:5a:32:63:ef:fc:4d:44:dc:40:b3:d6:d8: a0:f7:8d:11:c5:8b:9d:1a:13:d8:9b:d7:f6:ff:5e:4f:27:3c: 4f:68:0a:bb:27:e0:a1:f1:6d:a1:12:82:7f:e5:6b:31:13:9f: 0a:63:1c:5e:f8:39:5a:4b:0c:e3:b2:8a:92:63:ff:0e:c6:49: c3:41:7d:91 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUX18szqZMhdG/X2WH4oJA/oYkkDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNjE1MjM1NloX DTI0MDkyNDE1Mjg1NlowMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcx QzAzMDVEOUFEODI5Qjk0MTBFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv6dp/WlLmiroF5GOUrMCyAzJ27XFttlNMTLRc9Oy8othYy/VrM7ip8FqOP ZU4QkaiVn0ixJc5GaWYRC6MvSUR205mYF2+xVzbYRnq9L/mNg5YcJj1laZUEgfct PXmV8ISqoizhXTjtbsW9fXD5GIOEGqBofwgHv1kMuYSG5rZIpGF+G2iS9W3rP9OX MW5pYLDjS4jEgY7H+AnMmRVDGy694z77SoUvGpfZRlNziGG5e3HWryGWHl2Y0H8V fMDW5+De9thFiZZeEAWQvvjVys50KVQ20wa/d80XHJKnzzYhE6d0Sw61a74egnh8 2499/VKftOr/dV1UHl7ZvdyG4Z8CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIClfZK41MP/F+ccAwXZrYKblBDpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hN2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNl LTRhNGMtNGRiYy1iNzg1LWRkN2NiZjFhNjdiNy8wLzgwQTU3RDkyQjhENEMzRkYx N0U3MUMwMzA1RDlBRDgyOUI5NDEwRTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BABnAzoDBAJnTJQDBAF4WVoDBADLHRowDQQCAAIwBwMFACQHb4AwDQYJKoZIhvcN AQELBQADggEBAFCRahHe9FGEPVz+AYfiNqLT6OCRpMzfJnHgxeoGYPNf16nFQL8B 5HD5yqG/J0bBavRvlYIN5Nqxf9yiSbh0BIlFkzOwbzJy3n4hXCvEOS/ZQnlBXBmS B/T70NlOevnYnmnf4CABruUvG8NigoHbrSQPPXuvJcFDMXUUCg8RP7gPS5KKzmPA bVS/EEmNy3fafGfDdlLCYaYYy6pSNJLDMtkkftlUXqMAiYIZ4jMYYeopXQ6qOAap 8dK9o1oyY+/8TUTcQLPW2KD3jRHFi50aE9ib1/b/Xk8nPE9oCrsn4KHxbaESgn/l azETnwpjHF74OVpLDOOyipJj/w7GScNBfZE= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org