$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.cer (raw, json) Hash identifier: 8x5PKdKs9vZnEoONxCuE68eQ7jIIwLHCiKOS1q5BxHI= Subject key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30882B94D1C0BB5BADC5806139EA05C1BC2B91EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft caRepository: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 17 Sep 2023 23:51:24 +0000 Certificate not after: Sun 15 Sep 2024 23:56:24 +0000 Subordinate resources: IP: 43.230.128.0/22 IP: 103.238.200.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:88:2b:94:d1:c0:bb:5b:ad:c5:80:61:39:ea:05:c1:bc:2b:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 23:51:24 2023 GMT Not After : Sep 15 23:56:24 2024 GMT Subject: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:05:38:f9:77:65:50:f3:00:78:30:e1:6d: c4:31:73:16:63:5f:c8:18:5f:a4:19:f3:70:21:8b: 70:11:a1:9d:a9:9c:0f:e3:11:47:51:fa:ae:61:86: 9f:e3:0b:58:bc:b5:15:c2:23:2a:23:bb:72:6f:30: 00:49:6e:18:be:d4:5e:b6:33:6c:d8:ca:4d:ca:39: 53:95:43:28:a7:79:11:4f:f8:68:2b:0d:52:97:65: cb:54:dc:ad:6f:86:ba:61:a9:9a:ba:e8:c0:2a:80: 44:3c:2d:49:fd:66:25:3b:46:70:9f:98:ba:e3:35: 2c:9d:dd:e8:29:18:54:25:f3:82:73:7a:54:e6:4b: 98:4d:42:fa:66:6d:a1:8f:8c:e2:54:50:c3:4f:09: 7b:8e:8c:75:2f:d6:00:63:3f:db:84:0b:08:c0:aa: c0:a4:44:13:ec:2e:29:c2:c5:62:74:86:0e:2e:ff: 33:a4:5c:cd:7f:c2:a4:d8:4c:d9:ce:60:40:0f:11: 00:cc:68:7a:8d:f4:db:32:36:bc:b6:64:d0:97:dc: ae:c6:d3:e5:8a:1c:73:f3:b5:dc:33:13:f9:9c:2d: e9:99:d8:21:0b:aa:be:d7:19:d8:d4:38:0a:1b:da: c5:06:49:d9:8e:f0:4b:b5:b4:f7:51:09:cb:31:17: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/22 103.238.200.0/22 Signature Algorithm: sha256WithRSAEncryption 11:65:be:b5:0f:d5:20:96:2d:e3:f4:d5:f5:50:b4:c8:be:3e: b7:58:a8:32:fa:24:49:fd:cd:26:6a:e7:86:c0:ce:38:65:44: f2:d6:bb:c9:c8:db:ce:cc:25:44:67:d6:54:4d:17:a2:33:81: d5:97:ee:1c:94:65:57:63:4d:68:4f:b8:e6:ba:c6:6f:b6:ea: be:14:7e:e7:f3:50:71:b5:f9:16:69:1c:19:54:35:a9:7c:83: ed:33:fe:33:a2:34:e1:c6:53:d8:f8:39:87:ee:63:37:46:33: 9e:c3:80:1f:46:c6:b4:8b:31:4b:4c:e6:d2:85:78:40:4e:44: 8e:5a:94:06:13:5e:6a:18:92:7a:c8:8a:b5:e4:77:42:0e:e1: 6b:cd:24:0f:11:ff:82:c7:cc:2a:bb:55:34:28:90:53:35:01: 32:64:1d:c2:24:bc:00:7b:23:b8:c7:1a:5a:af:50:67:51:27: f6:04:7a:9a:14:1d:2d:d7:b4:9c:2e:1d:bc:62:b6:ce:15:0e: b3:cc:2f:71:90:39:7f:4b:bd:7e:bd:4a:e9:e4:a4:29:15:f3: 29:e5:96:fd:0a:8b:55:4d:9d:ba:7c:72:d5:95:c2:33:86:42: 45:3b:3a:0a:0c:a6:19:29:bc:b8:10:f7:1f:61:0e:88:ba:bb: d0:77:c4:36 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUMIgrlNHAu1utxYBhOeoFwbwrkewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNzIzNTEyNFoX DTI0MDkxNTIzNTYyNFowMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4 RURCQzcwODM0NjgxQjQzQjVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7CBTj5d2VQ8wB4MOFtxDFzFmNfyBhfpBnzcCGLcBGhnamcD+MRR1H6rmGG n+MLWLy1FcIjKiO7cm8wAEluGL7UXrYzbNjKTco5U5VDKKd5EU/4aCsNUpdly1Tc rW+GumGpmrrowCqARDwtSf1mJTtGcJ+YuuM1LJ3d6CkYVCXzgnN6VOZLmE1C+mZt oY+M4lRQw08Je46MdS/WAGM/24QLCMCqwKREE+wuKcLFYnSGDi7/M6RczX/CpNhM 2c5gQA8RAMxoeo302zI2vLZk0JfcrsbT5Yocc/O13DMT+Zwt6ZnYIQuqvtcZ2NQ4 ChvaxQZJ2Y7wS7W091EJyzEXHscCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIYd6G2R5MdQjTiO28cINGgbQ7XKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2OWYyOTg4 LWNhYjMtNDVhYS05N2U1LTYzODVmMDdmZjFjZC8wLzg2MURFODZEOTFFNEM3NTA4 RDM4OEVEQkM3MDgzNDY4MUI0M0I1Q0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIr5oADBAJn7sgwDQYJKoZIhvcNAQELBQADggEBABFlvrUP1SCWLeP01fVQtMi+ PrdYqDL6JEn9zSZq54bAzjhlRPLWu8nI287MJURn1lRNF6IzgdWX7hyUZVdjTWhP uOa6xm+26r4UfufzUHG1+RZpHBlUNal8g+0z/jOiNOHGU9j4OYfuYzdGM57DgB9G xrSLMUtM5tKFeEBORI5alAYTXmoYknrIirXkd0IO4WvNJA8R/4LHzCq7VTQokFM1 ATJkHcIkvAB7I7jHGlqvUGdRJ/YEepoUHS3XtJwuHbxits4VDrPML3GQOX9LvX69 SunkpCkV8ynllv0Ki1VNnbp8ctWVwjOGQkU7OgoMphkpvLgQ9x9hDoi6u9B3xDY= -----END CERTIFICATE-----Generated at Wed May 8 18:12:10 2024 by rpki-client on console-fra.rpki-client.org