$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer File: 82FB9CE597D61EC382BA2D63909426959C43F18F.cer (raw, json) Hash identifier: PJBju+ZaPVe3IXBszGA/fP04jD+qksgLkCvYGHJSTMA= Subject key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E280D606CC5D56A42647A31602B03EBD58495D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft caRepository: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Nov 2023 03:18:37 +0000 Certificate not after: Wed 30 Oct 2024 03:23:37 +0000 Subordinate resources: IP: 103.7.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:28:0d:60:6c:c5:d5:6a:42:64:7a:31:60:2b:03:eb:d5:84:95:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 03:18:37 2023 GMT Not After : Oct 30 03:23:37 2024 GMT Subject: CN=82FB9CE597D61EC382BA2D63909426959C43F18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:83:69:79:f2:53:18:9f:95:c2:8a:37:72: bf:32:ad:7c:6f:b8:4b:c2:84:bb:59:a8:2a:62:21: 68:a0:b4:7b:ad:be:8a:19:19:8e:87:f0:26:cf:58: 48:ed:43:aa:e9:ee:7a:9c:8e:50:24:b0:47:d4:bd: c7:83:c0:79:f8:97:99:66:22:5a:4d:81:08:2f:29: 2b:cc:d4:c2:8c:e9:99:81:e5:a6:31:11:94:b1:d5: 75:34:ec:62:57:61:86:3a:c3:a1:f2:b0:21:ba:54: 49:10:21:67:6c:93:0b:20:98:78:ea:85:09:66:25: 06:fe:72:6d:d8:76:df:e9:03:bb:fe:a8:47:4f:3d: 66:0f:45:17:26:0e:47:12:48:bd:a9:bf:d7:07:61: 42:35:2b:05:ad:9c:76:dc:9d:03:2e:7e:9b:6c:0b: 17:32:fa:4f:ff:60:a6:92:25:4f:27:99:f7:de:82: ee:20:07:cb:9e:a0:35:4f:eb:68:ca:29:f1:f6:3c: 0b:a6:a4:66:14:7f:f0:c4:13:94:a9:73:95:60:88: 3a:1c:60:94:fb:b2:b1:c0:41:09:f0:f4:63:da:2c: 27:78:a6:c0:db:7e:b7:48:6a:b9:37:15:44:a4:5b: 88:ac:ea:94:0e:55:0e:88:d7:4c:90:a8:26:be:bb: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.104.0/23 Signature Algorithm: sha256WithRSAEncryption 92:e4:4f:6a:27:67:ae:1e:d7:23:5d:fe:99:ae:37:a6:d7:67: cb:da:fe:33:dc:b2:71:d8:90:01:87:a9:34:2a:49:a9:a4:27: 7f:ef:98:2f:0b:22:21:69:09:63:b5:4c:d0:69:37:9c:76:4e: 5a:68:75:81:68:1b:d3:06:c0:67:9b:97:09:86:ab:ca:fb:49: 8e:3e:18:51:46:cb:2f:4c:1b:4a:2c:4d:9c:14:29:96:16:73: e0:a7:52:b0:65:cd:c4:bb:ce:77:56:27:db:5c:86:bf:f7:3d: 93:2f:0e:d9:a0:c7:db:82:23:4f:21:38:83:1d:62:fe:a8:cb: 58:30:18:34:e2:ff:e0:1e:a5:ab:21:88:8b:f0:c9:53:1d:f0: a9:6b:a7:cb:c6:da:b1:2d:01:55:6b:65:ac:aa:e5:1d:4d:65: 2b:13:73:ef:15:a1:fa:06:62:83:d4:fd:5b:e6:7e:0f:45:66: 72:71:33:95:04:bf:f9:24:2b:61:e5:ca:8e:e1:3d:2c:48:2d: 3e:9f:9b:74:6b:92:6a:10:b2:a4:05:1e:f1:d0:67:22:8d:d9: e0:f8:b2:34:84:e8:0f:4a:0f:46:59:c8:f5:d4:50:16:90:04: f4:0c:06:93:10:2b:34:05:65:52:fd:37:5b:c0:a5:d6:98:09: 7a:b7:f6:f2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDigNYGzF1WpCZHoxYCsD69WEldAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwMTAzMTgzN1oX DTI0MTAzMDAzMjMzN1owMzExMC8GA1UEAxMoODJGQjlDRTU5N0Q2MUVDMzgyQkEy RDYzOTA5NDI2OTU5QzQzRjE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn0g2l58lMYn5XCijdyvzKtfG+4S8KEu1moKmIhaKC0e62+ihkZjofwJs9Y SO1DqunuepyOUCSwR9S9x4PAefiXmWYiWk2BCC8pK8zUwozpmYHlpjERlLHVdTTs YldhhjrDofKwIbpUSRAhZ2yTCyCYeOqFCWYlBv5ybdh23+kDu/6oR089Zg9FFyYO RxJIvam/1wdhQjUrBa2cdtydAy5+m2wLFzL6T/9gppIlTyeZ996C7iAHy56gNU/r aMop8fY8C6akZhR/8MQTlKlzlWCIOhxglPuyscBBCfD0Y9osJ3imwNt+t0hquTcV RKRbiKzqlA5VDojXTJCoJr67+J0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIL7nOWX1h7DgrotY5CUJpWcQ/GPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzZjNzgyNS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3NmM3ODI1 LThiM2QtNDY2Yy1iYTBjLTk5NTUzYzFkNzNlYS8wLzgyRkI5Q0U1OTdENjFFQzM4 MkJBMkQ2MzkwOTQyNjk1OUM0M0YxOEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnB2gwDQYJKoZIhvcNAQELBQADggEBAJLkT2onZ64e1yNd/pmuN6bXZ8va/jPc snHYkAGHqTQqSamkJ3/vmC8LIiFpCWO1TNBpN5x2TlpodYFoG9MGwGeblwmGq8r7 SY4+GFFGyy9MG0osTZwUKZYWc+CnUrBlzcS7zndWJ9tchr/3PZMvDtmgx9uCI08h OIMdYv6oy1gwGDTi/+AepashiIvwyVMd8Klrp8vG2rEtAVVrZayq5R1NZSsTc+8V ofoGYoPU/Vvmfg9FZnJxM5UEv/kkK2Hlyo7hPSxILT6fm3RrkmoQsqQFHvHQZyKN 2eD4sjSE6A9KD0ZZyPXUUBaQBPQMBpMQKzQFZVL9N1vApdaYCXq39vI= -----END CERTIFICATE-----Generated at Wed May 8 18:12:10 2024 by rpki-client on console-fra.rpki-client.org