$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer (raw, json) Hash identifier: sTZHzF66JtmBQmv7cZIWgCNdnll+B6Vuabce4wSceWU= Subject key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57B39063A6DB8579B8DF7B686EB259C7F5DDA031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft caRepository: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Sep 2024 16:56:38 +0000 Certificate not after: Thu 25 Sep 2025 17:01:38 +0000 Subordinate resources: IP: 103.96.146.0/23 IP: 2001:df2:e9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b3:90:63:a6:db:85:79:b8:df:7b:68:6e:b2:59:c7:f5:dd:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 16:56:38 2024 GMT Not After : Sep 25 17:01:38 2025 GMT Subject: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:08:f8:cf:26:3a:eb:5f:a1:e0:33:57:e1: f1:7b:e2:f7:1d:45:8a:0e:40:55:07:96:5c:a2:2c: bc:8a:59:bd:1c:1b:60:da:26:ad:78:ba:b6:3c:6f: 1f:84:51:6b:7b:ff:28:0d:d6:9e:61:c5:e1:8f:b8: cc:48:82:f7:92:a0:58:90:50:f1:9f:c2:b5:aa:c6: 31:aa:05:fb:64:07:c2:3a:2a:24:d9:32:33:bb:b2: 07:ec:34:60:94:68:1a:6c:41:3c:bc:12:97:97:fa: fb:9f:b0:82:8a:c8:aa:7d:e7:d2:15:65:1e:2b:2d: 09:ec:f2:3f:cc:4b:c1:dc:37:72:33:57:9e:9c:ae: 62:4e:9a:6d:3f:76:c1:2a:32:dd:d8:bb:f8:b2:79: 1e:c3:e1:1a:a3:99:1c:06:ff:5e:a8:e2:94:12:43: 80:8b:86:14:0b:6f:b5:2b:60:75:b0:2b:e7:c4:aa: b0:e9:fc:88:49:77:68:b2:3a:30:87:69:51:4d:68: 73:39:22:78:c2:01:13:be:91:52:ed:80:e4:af:0f: 88:ed:10:b5:1e:63:bb:46:57:92:40:c9:e7:2e:39: 53:9e:e0:8f:47:24:ed:64:65:ba:db:ab:27:55:f5: e2:f9:05:87:e2:4f:76:49:93:0d:12:37:aa:55:e6: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.146.0/23 IPv6: 2001:df2:e9c0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:9a:6c:29:77:6c:3a:ed:f1:88:7f:ed:b9:e0:c2:40:85:bc: b2:69:cd:36:b2:20:bf:ce:61:1b:1c:df:cf:4e:55:3f:54:92: f1:cd:9a:cf:59:b7:81:56:a6:e6:8f:80:48:93:67:ae:63:f9: 7f:da:0a:93:57:b3:65:78:18:b4:12:33:20:48:f7:65:ed:4c: 62:b7:85:c3:f8:02:41:69:c1:9d:e9:6f:b5:ab:70:3f:93:fd: bb:e7:34:0e:d2:21:d0:06:a6:91:5c:86:e1:a8:86:c7:23:87: eb:e9:14:a6:e1:63:26:bc:ad:15:77:1a:4f:1c:1c:9e:45:95: 3a:bb:2d:ea:2f:73:68:d0:7c:81:fa:67:58:86:8b:ce:68:9c: dd:b4:0f:4e:87:50:a7:b0:31:c9:36:d8:b6:9d:f4:c0:d4:f3: 26:8f:6f:f5:ca:48:a5:e2:27:da:46:a1:32:56:1d:29:a4:48: c9:e6:c6:18:89:d0:4b:89:32:65:ba:49:f4:ac:69:e2:0a:87: 1c:e5:77:39:62:90:84:31:f0:af:48:c4:6c:b2:51:b2:fc:86: 86:91:f7:69:b9:2c:72:7f:b6:95:5a:0f:22:4c:bf:ff:78:69: 9d:23:2e:5b:a2:6d:9d:23:cf:aa:bb:9d:3e:dc:f4:7a:48:8e: ac:e2:b8:9b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUV7OQY6bbhXm433tobrJZx/XdoDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyNjE2NTYzOFoX DTI1MDkyNTE3MDEzOFowMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1 RkI0QTVERDg0QzZGQTJEQ0QwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsICPjPJjrrX6HgM1fh8Xvi9x1Fig5AVQeWXKIsvIpZvRwbYNomrXi6tjxv H4RRa3v/KA3WnmHF4Y+4zEiC95KgWJBQ8Z/CtarGMaoF+2QHwjoqJNkyM7uyB+w0 YJRoGmxBPLwSl5f6+5+wgorIqn3n0hVlHistCezyP8xLwdw3cjNXnpyuYk6abT92 wSoy3di7+LJ5HsPhGqOZHAb/XqjilBJDgIuGFAtvtStgdbAr58SqsOn8iEl3aLI6 MIdpUU1oczkieMIBE76RUu2A5K8PiO0QtR5ju0ZXkkDJ5y45U57gj0ck7WRlutur J1X14vkFh+JPdkmTDRI3qlXmS00CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIHCA89Fjkio/zRftKXdhMb6Lc0KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhNDc0NmI3 LTVmZjItNDU1Ni04YTNlLTVhODZjYmNjODU5OC8wLzgxQzIwM0NGNDU4RTQ4QThG RjM0NUZCNEE1REQ4NEM2RkEyRENEMEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnYJIwDwQCAAIwCQMHACABDfLpwDANBgkqhkiG9w0BAQsFAAOCAQEAKppsKXds Ou3xiH/tueDCQIW8smnNNrIgv85hGxzfz05VP1SS8c2az1m3gVam5o+ASJNnrmP5 f9oKk1ezZXgYtBIzIEj3Ze1MYreFw/gCQWnBnelvtatwP5P9u+c0DtIh0AamkVyG 4aiGxyOH6+kUpuFjJrytFXcaTxwcnkWVOrst6i9zaNB8gfpnWIaLzmic3bQPTodQ p7AxyTbYtp30wNTzJo9v9cpIpeIn2kahMlYdKaRIyebGGInQS4kyZbpJ9Kxp4gqH HOV3OWKQhDHwr0jEbLJRsvyGhpH3abkscn+2lVoPIky//3hpnSMuW6JtnSPPqrud Ptz0ekiOrOK4mw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:50 2024 by rpki-client on console-fra.rpki-client.org