$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer File: 82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer (raw, json) Hash identifier: hjZ5TR6v75a6Hstz60cwu+EHmBVdONny7h65pG9tfTI= Subject key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44A2228962E66F96ACFD6B90A2200396EB69679F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft caRepository: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Apr 2024 04:06:50 +0000 Certificate not after: Wed 09 Apr 2025 04:11:50 +0000 Subordinate resources: IP: 103.4.0.0/22 IP: 116.90.160.0/20 IP: 122.128.24.0/21 IP: 150.107.108.0/22 IP: 202.43.160.0/20 IP: 202.78.192.0/20 IP: 203.134.232.0/21 IP: 203.173.92.0/22 IP: 2404:1b0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a2:22:89:62:e6:6f:96:ac:fd:6b:90:a2:20:03:96:eb:69:67:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 04:06:50 2024 GMT Not After : Apr 9 04:11:50 2025 GMT Subject: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:78:e4:1f:26:81:37:3b:3f:5f:5e:35:2f: 30:95:f2:ba:31:fb:59:a0:c0:f9:72:c7:b9:3c:a1: 14:b6:ca:83:2f:cc:a8:0f:2b:c5:02:ad:62:3c:6c: 46:f1:7a:79:14:86:63:5a:4e:76:25:cb:bf:0d:89: 2f:69:41:65:e3:9e:09:15:35:20:0d:e7:6a:8f:5b: f6:05:db:11:14:7b:67:09:c2:43:f6:b9:21:d8:06: 06:62:de:a8:f2:96:cc:ff:cb:dd:c3:e7:2e:36:6b: 6a:91:2b:c5:f1:6b:8f:ce:e1:b2:eb:e5:d1:4b:77: 78:98:de:30:85:9f:5d:7b:a5:69:b4:46:a0:3f:9d: c9:9b:d7:28:a9:a6:ec:9c:05:2a:86:ab:eb:d1:c2: 0e:b3:da:7f:38:5b:b6:e0:5f:08:cd:91:26:3f:81: ad:89:b2:47:f6:dd:39:72:54:a3:a5:fc:f6:46:79: df:b3:ab:f2:76:67:07:d3:91:f4:4b:bc:80:85:58: 1a:8d:79:69:9b:51:57:e7:35:cb:2f:3d:97:e0:e2: fe:e2:28:fb:33:01:8a:80:04:52:37:84:34:ba:2c: 49:fa:d8:71:57:66:5a:11:e2:3d:aa:60:12:b9:19: 4e:40:50:25:0c:f8:e3:6f:ba:1d:df:d9:a4:44:23: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.0.0/22 116.90.160.0/20 122.128.24.0/21 150.107.108.0/22 202.43.160.0/20 202.78.192.0/20 203.134.232.0/21 203.173.92.0/22 IPv6: 2404:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 65:a1:f8:93:40:6d:71:63:c5:b8:72:b1:6f:81:9b:33:54:9c: bd:ff:8e:9d:99:e3:f6:98:de:a7:3e:16:16:f4:d0:8b:31:66: 7f:c9:b5:56:9e:b4:92:ba:8e:76:7c:53:f1:d3:ce:13:da:5e: 31:2a:03:e9:71:a3:cc:b3:f8:13:a9:1a:b8:1e:b7:e1:7e:f3: 89:8d:11:4b:c8:4d:9d:ee:68:14:cb:6c:a0:9b:c4:df:83:8f: ee:66:30:e5:ba:cd:c0:52:f7:55:78:31:60:91:97:9c:36:c3: 11:f4:c4:ac:41:bb:a9:49:4c:44:d5:8c:ec:ca:7d:f1:52:62: 8c:87:8b:ac:e4:c8:22:17:63:b7:67:15:1c:7b:1f:c7:a0:49: 9e:c7:45:a8:56:ed:a4:ac:47:87:10:07:b5:ef:5d:0d:26:06: 0a:04:01:e1:d2:50:66:88:8b:0a:76:24:22:35:c7:76:83:2e: 6f:53:a0:e4:68:13:7b:50:ea:47:85:d8:1f:86:23:1e:d5:f8: 1d:4f:ab:f8:d8:fa:45:53:22:22:5f:f3:a3:2a:73:35:4b:ea: af:85:5f:59:37:02:e2:84:c1:cc:2a:ef:63:a5:0f:62:fa:c4: 28:01:85:79:d6:0f:01:32:d0:6b:05:6d:39:f4:e2:f4:32:45: 4c:9d:80:ac -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIURKIiiWLmb5as/WuQoiADlutpZ58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMDA0MDY1MFoX DTI1MDQwOTA0MTE1MFowMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdD RTFBQ0U5NUE1MUM2QzhBMUQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2AeOQfJoE3Oz9fXjUvMJXyujH7WaDA+XLHuTyhFLbKgy/MqA8rxQKtYjxs RvF6eRSGY1pOdiXLvw2JL2lBZeOeCRU1IA3nao9b9gXbERR7ZwnCQ/a5IdgGBmLe qPKWzP/L3cPnLjZrapErxfFrj87hsuvl0Ut3eJjeMIWfXXulabRGoD+dyZvXKKmm 7JwFKoar69HCDrPafzhbtuBfCM2RJj+BrYmyR/bdOXJUo6X89kZ537Or8nZnB9OR 9Eu8gIVYGo15aZtRV+c1yy89l+Di/uIo+zMBioAEUjeENLosSfrYcVdmWhHiPapg ErkZTkBQJQz442+6Hd/ZpEQjl5ECAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIKIQVGlKD9DypfOGs6VpRxsih2OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYz LTEyYjYtNGQ4Zi1hZDBiLTRjZDViNjE5NTllZi8wLzgyODg0MTUxQTUyODNGNDND QTk3Q0UxQUNFOTVBNTFDNkM4QTFEOEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDAD BAJnBAADBAR0WqADBAN6gBgDBAKWa2wDBATKK6ADBATKTsADBAPLhugDBALLrVww DQQCAAIwBwMFACQEAbAwDQYJKoZIhvcNAQELBQADggEBAGWh+JNAbXFjxbhysW+B mzNUnL3/jp2Z4/aY3qc+Fhb00IsxZn/JtVaetJK6jnZ8U/HTzhPaXjEqA+lxo8yz +BOpGrget+F+84mNEUvITZ3uaBTLbKCbxN+Dj+5mMOW6zcBS91V4MWCRl5w2wxH0 xKxBu6lJTETVjOzKffFSYoyHi6zkyCIXY7dnFRx7H8egSZ7HRahW7aSsR4cQB7Xv XQ0mBgoEAeHSUGaIiwp2JCI1x3aDLm9ToORoE3tQ6keF2B+GIx7V+B1Pq/jY+kVT IiJf86MqczVL6q+FX1k3AuKEwcwq72OlD2L6xCgBhXnWDwEy0GsFbTn04vQyRUyd gKw= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org