$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer File: 882209E37356E0512FBE4E81B00E4F2481865087.cer (raw, json) Hash identifier: fVgCKDz+JAAk3qUmW2o9lgPxGpJ/JPcjnaNURu5lXdI= Subject key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56A994DF46391F973FCF4A04C8080CD52418463C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft caRepository: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 00:20:53 +0000 Certificate not after: Tue 01 Jul 2025 00:25:53 +0000 Subordinate resources: IP: 45.118.112.0/22 IP: 103.14.20.0/23 IP: 103.25.166.0/23 IP: 2401:10c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a9:94:df:46:39:1f:97:3f:cf:4a:04:c8:08:0c:d5:24:18:46:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 00:20:53 2024 GMT Not After : Jul 1 00:25:53 2025 GMT Subject: CN=882209E37356E0512FBE4E81B00E4F2481865087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:ea:0a:79:fc:d6:45:be:b7:30:19:cc:94: a7:41:77:28:9e:19:9c:15:a1:19:c1:f8:87:49:f7: ed:d8:6d:76:b2:29:36:d6:d1:e3:56:db:41:f1:cb: fb:e2:f3:4f:b7:21:2d:95:5e:59:ec:cd:26:11:76: b0:c9:c6:c1:7a:35:c5:85:51:dd:96:ce:80:24:94: 5c:ef:d4:14:43:b4:86:ea:28:b0:f4:81:e7:a8:6e: 03:2c:aa:96:db:cc:69:0b:4b:57:d2:d1:d1:06:fc: ae:2c:69:31:6a:02:84:98:ad:0d:71:4f:96:22:7c: d1:35:9e:a2:f0:63:53:08:28:a8:d1:a6:6b:fe:b4: cd:df:fe:a4:6d:f0:6d:63:32:b6:1a:36:90:3a:12: cb:15:43:31:6d:93:ba:1f:0e:7d:3e:e1:a9:13:65: ca:ff:2c:be:16:48:de:d6:c0:af:1e:07:5b:dc:17: 87:81:64:ac:12:33:d9:13:a2:5f:2a:d6:3d:74:1d: ea:0f:44:eb:b5:25:f0:b2:46:89:df:9d:c3:b2:78: 04:85:a8:3a:0d:19:9b:64:8c:9a:79:ab:2b:13:e8: 21:a0:5a:97:2d:28:69:3c:2a:09:d7:f8:46:d1:0f: 87:cb:a1:a0:e1:e2:e0:f9:6e:57:a7:33:04:0e:a0: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.112.0/22 103.14.20.0/23 103.25.166.0/23 IPv6: 2401:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:8e:54:c9:64:df:01:17:07:c7:f8:5b:bd:b7:da:d4:5b:a0: c2:b0:ff:aa:6f:e9:8f:1c:22:74:c8:e4:21:a4:e6:e0:16:89: a3:24:2a:ed:82:4e:82:6d:61:6f:fe:16:0d:8b:96:7b:ff:73: 2f:26:89:fd:a7:94:93:b8:2b:3f:64:d4:ac:99:88:3d:ed:63: 22:19:9f:4b:21:e6:31:f5:43:a5:39:52:e6:1a:ce:7d:f8:5b: 15:0f:2d:dc:94:19:06:e1:1e:ff:8f:c5:eb:32:66:68:ff:92: be:8e:2d:0b:d8:0a:5b:f5:39:89:0a:b3:9b:e3:ac:a9:11:bd: 35:29:6f:ee:f7:6f:d6:c8:ad:8c:7f:e2:e0:33:4f:37:21:7f: 57:14:f6:9d:51:bd:8a:3c:0c:6b:92:5b:40:4c:d5:78:3d:b4: cb:95:46:3d:39:60:fc:e5:35:be:6d:a1:50:b4:1b:21:3a:09: 06:46:fe:da:20:d8:55:34:b7:e7:9f:51:fb:c3:2c:12:4e:9d: 26:dc:2b:95:90:83:c5:01:6d:9d:2b:22:56:67:7d:77:1a:62: d4:2f:62:ed:1c:c0:3f:32:6e:9c:58:21:d1:e9:b9:24:27:78: 9a:70:6d:5f:34:47:95:dc:20:96:16:58:63:28:e0:a7:e5:3e: fb:19:d2:7b -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUVqmU30Y5H5c/z0oEyAgM1SQYRjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAwMjA1M1oX DTI1MDcwMTAwMjU1M1owMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0 RTgxQjAwRTRGMjQ4MTg2NTA4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa66gp5/NZFvrcwGcyUp0F3KJ4ZnBWhGcH4h0n37dhtdrIpNtbR41bbQfHL ++LzT7chLZVeWezNJhF2sMnGwXo1xYVR3ZbOgCSUXO/UFEO0huoosPSB56huAyyq ltvMaQtLV9LR0Qb8rixpMWoChJitDXFPliJ80TWeovBjUwgoqNGma/60zd/+pG3w bWMytho2kDoSyxVDMW2Tuh8OfT7hqRNlyv8svhZI3tbArx4HW9wXh4FkrBIz2ROi XyrWPXQd6g9E67Ul8LJGid+dw7J4BIWoOg0Zm2SMmnmrKxPoIaBaly0oaTwqCdf4 RtEPh8uhoOHi4PluV6czBA6gtI0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIgiCeNzVuBRL75OgbAOTySBhlCHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEz LWVlNTMtNDk5Yy05ZjJkLWNmMTZiMWU0YTM1My8wLzg4MjIwOUUzNzM1NkUwNTEy RkJFNEU4MUIwMEU0RjI0ODE4NjUwODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAItdnADBAFnDhQDBAFnGaYwDQQCAAIwBwMFACQBEMAwDQYJKoZIhvcNAQELBQAD ggEBAG2OVMlk3wEXB8f4W7232tRboMKw/6pv6Y8cInTI5CGk5uAWiaMkKu2CToJt YW/+Fg2Llnv/cy8mif2nlJO4Kz9k1KyZiD3tYyIZn0sh5jH1Q6U5UuYazn34WxUP LdyUGQbhHv+PxesyZmj/kr6OLQvYClv1OYkKs5vjrKkRvTUpb+73b9bIrYx/4uAz Tzchf1cU9p1RvYo8DGuSW0BM1Xg9tMuVRj05YPzlNb5toVC0GyE6CQZG/tog2FU0 t+efUfvDLBJOnSbcK5WQg8UBbZ0rIlZnfXcaYtQvYu0cwD8ybpxYIdHpuSQneJpw bV80R5XcIJYWWGMo4KflPvsZ0ns= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org