$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.cer (raw, json) Hash identifier: M++G8aMX7WveDsuuli2GfSERlhF/u9hy0A/OMXl4GmU= Subject key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 61D76197416AF304492AA74157FCC1683F5EE24D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft caRepository: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Aug 2024 03:37:12 +0000 Certificate not after: Mon 18 Aug 2025 03:42:12 +0000 Subordinate resources: IP: 43.230.128.0/22 IP: 103.238.200.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d7:61:97:41:6a:f3:04:49:2a:a7:41:57:fc:c1:68:3f:5e:e2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 03:37:12 2024 GMT Not After : Aug 18 03:42:12 2025 GMT Subject: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:05:38:f9:77:65:50:f3:00:78:30:e1:6d: c4:31:73:16:63:5f:c8:18:5f:a4:19:f3:70:21:8b: 70:11:a1:9d:a9:9c:0f:e3:11:47:51:fa:ae:61:86: 9f:e3:0b:58:bc:b5:15:c2:23:2a:23:bb:72:6f:30: 00:49:6e:18:be:d4:5e:b6:33:6c:d8:ca:4d:ca:39: 53:95:43:28:a7:79:11:4f:f8:68:2b:0d:52:97:65: cb:54:dc:ad:6f:86:ba:61:a9:9a:ba:e8:c0:2a:80: 44:3c:2d:49:fd:66:25:3b:46:70:9f:98:ba:e3:35: 2c:9d:dd:e8:29:18:54:25:f3:82:73:7a:54:e6:4b: 98:4d:42:fa:66:6d:a1:8f:8c:e2:54:50:c3:4f:09: 7b:8e:8c:75:2f:d6:00:63:3f:db:84:0b:08:c0:aa: c0:a4:44:13:ec:2e:29:c2:c5:62:74:86:0e:2e:ff: 33:a4:5c:cd:7f:c2:a4:d8:4c:d9:ce:60:40:0f:11: 00:cc:68:7a:8d:f4:db:32:36:bc:b6:64:d0:97:dc: ae:c6:d3:e5:8a:1c:73:f3:b5:dc:33:13:f9:9c:2d: e9:99:d8:21:0b:aa:be:d7:19:d8:d4:38:0a:1b:da: c5:06:49:d9:8e:f0:4b:b5:b4:f7:51:09:cb:31:17: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/22 103.238.200.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:c5:ec:b5:e9:65:15:7b:a7:5e:c2:a7:cb:5b:2f:90:4d:06: bf:38:3c:de:ca:f3:bd:59:1e:9f:2e:da:19:b2:12:70:c7:2f: 9a:1a:69:1a:82:48:cb:95:3b:7c:64:58:2d:8f:74:8d:0b:39: 4d:ff:7a:bf:ed:aa:03:92:17:4c:20:c2:88:99:dd:19:7f:e7: 3a:98:2f:a6:42:85:14:bc:4a:d3:c1:81:62:67:c8:e3:b2:cd: 77:b4:e9:ff:40:bd:d8:4e:6a:f0:32:8a:21:d3:cd:e7:10:42: 6f:1d:76:19:0a:1b:dd:b0:68:57:e9:ef:7f:e8:c4:4a:fa:60: 71:3d:d0:86:61:ea:81:1c:b3:d9:95:e4:9b:94:0d:63:d9:88: 98:a9:ac:0d:2a:28:55:99:6c:65:f7:2e:1c:99:26:3b:c6:57: 0b:26:63:5e:22:d8:87:76:9a:4f:41:f2:96:31:c3:ab:fb:26: c8:fa:d0:85:87:ff:ff:9a:23:aa:da:0f:8b:b6:25:2d:c6:db: 44:c6:61:95:40:bf:a9:96:3d:5c:9e:da:3e:e7:9c:6c:6d:53: 5b:b6:64:8a:81:42:bb:30:91:d6:d1:4a:14:c0:5b:c3:95:86: 33:93:b3:2d:bd:a5:68:96:51:a0:3c:ce:6d:03:ac:76:b1:51: f6:29:6b:d6 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYddhl0Fq8wRJKqdBV/zBaD9e4k0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxOTAzMzcxMloX DTI1MDgxODAzNDIxMlowMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4 RURCQzcwODM0NjgxQjQzQjVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7CBTj5d2VQ8wB4MOFtxDFzFmNfyBhfpBnzcCGLcBGhnamcD+MRR1H6rmGG n+MLWLy1FcIjKiO7cm8wAEluGL7UXrYzbNjKTco5U5VDKKd5EU/4aCsNUpdly1Tc rW+GumGpmrrowCqARDwtSf1mJTtGcJ+YuuM1LJ3d6CkYVCXzgnN6VOZLmE1C+mZt oY+M4lRQw08Je46MdS/WAGM/24QLCMCqwKREE+wuKcLFYnSGDi7/M6RczX/CpNhM 2c5gQA8RAMxoeo302zI2vLZk0JfcrsbT5Yocc/O13DMT+Zwt6ZnYIQuqvtcZ2NQ4 ChvaxQZJ2Y7wS7W091EJyzEXHscCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIYd6G2R5MdQjTiO28cINGgbQ7XKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2OWYyOTg4 LWNhYjMtNDVhYS05N2U1LTYzODVmMDdmZjFjZC8wLzg2MURFODZEOTFFNEM3NTA4 RDM4OEVEQkM3MDgzNDY4MUI0M0I1Q0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIr5oADBAJn7sgwDQYJKoZIhvcNAQELBQADggEBAE7F7LXpZRV7p17Cp8tbL5BN Br84PN7K871ZHp8u2hmyEnDHL5oaaRqCSMuVO3xkWC2PdI0LOU3/er/tqgOSF0wg woiZ3Rl/5zqYL6ZChRS8StPBgWJnyOOyzXe06f9AvdhOavAyiiHTzecQQm8ddhkK G92waFfp73/oxEr6YHE90IZh6oEcs9mV5JuUDWPZiJiprA0qKFWZbGX3LhyZJjvG VwsmY14i2Id2mk9B8pYxw6v7Jsj60IWH//+aI6raD4u2JS3G20TGYZVAv6mWPVye 2j7nnGxtU1u2ZIqBQrswkdbRShTAW8OVhjOTsy29pWiWUaA8zm0DrHaxUfYpa9Y= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:50 2024 by rpki-client on console-fra.rpki-client.org