$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer File: 889933E416F356762F7F72858168C9C8A2E241C7.cer (raw, json) Hash identifier: RrXT+myd4hVpwj/jhcNPNl4Q+ZmdTUNr3FdpCl2ZUyc= Subject key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1CDDE2F661920CC1F65DAECBE5BA62D355D70A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 28 Aug 2023 11:47:11 +0000 Certificate not after: Mon 26 Aug 2024 11:52:11 +0000 Subordinate resources: IP: 103.167.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:e2:f6:61:92:0c:c1:f6:5d:ae:cb:e5:ba:62:d3:55:d7:0a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 28 11:47:11 2023 GMT Not After : Aug 26 11:52:11 2024 GMT Subject: CN=889933E416F356762F7F72858168C9C8A2E241C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:fe:1a:0c:5f:ac:f1:5c:47:35:e6:29:ef: 44:44:94:55:cb:d0:40:ad:33:07:de:9a:c0:dd:73: 81:91:ea:1d:6e:37:bd:ca:1c:4a:30:13:36:ce:63: 51:42:74:36:be:92:04:b0:a6:6d:2b:ea:20:a9:0d: c5:f3:7d:65:cb:e2:85:90:85:34:6d:cb:f0:a4:d2: 0e:13:ba:7e:eb:0b:36:41:22:79:68:12:92:86:5e: 48:4f:9d:4b:95:67:ae:7c:c4:db:91:37:e4:c7:47: cb:9c:84:73:15:2f:6c:d4:45:39:f1:85:83:47:8e: e4:62:ee:b2:98:67:4b:c8:b2:ba:3d:de:a7:92:9d: e2:7a:a1:0a:64:80:a9:9b:38:91:be:c8:4e:af:28: 1f:13:5f:6b:ff:ad:fe:cc:12:b2:0b:27:37:be:86: 46:5f:73:26:cd:20:0b:05:ca:dc:99:47:ac:8a:74: 09:68:1f:e4:f4:6d:67:72:98:c0:90:ff:96:df:ce: 8a:a0:26:5d:bc:96:57:59:f8:28:d9:94:86:d0:23: 3f:99:a5:86:30:78:89:82:b1:a2:9e:be:fc:a1:1a: d9:8f:84:53:ea:f7:0d:7b:60:84:1a:ad:6f:5b:39: ae:a9:21:ab:49:16:04:f8:e8:00:9d:83:a9:67:28: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.236.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:d6:b1:0b:c6:33:27:aa:50:e1:be:35:34:db:6b:0f:08:d6: ee:a9:19:01:84:84:e8:28:7b:de:fc:41:98:68:33:85:b9:b0: 18:b5:b1:94:70:b7:74:38:bf:ee:67:ed:fe:d5:85:da:48:6e: dd:e7:ba:1b:a8:a0:76:30:b8:9b:5f:70:09:61:f0:dd:4a:2c: d5:19:de:6c:6b:7e:e7:42:27:ea:62:ec:4f:5d:4e:32:ae:5a: bc:de:55:06:99:38:43:68:2c:51:f5:d4:42:3b:72:2f:78:39: 1f:44:ea:f6:42:5e:85:44:f5:98:05:97:5a:ad:39:2c:2b:5c: 47:f7:68:66:11:14:37:79:d8:2a:49:94:04:70:3b:0c:35:56: 10:2d:1a:0c:c4:1d:bd:cc:72:da:47:4b:cd:3c:08:46:36:7b: 20:95:93:13:2f:19:29:77:43:a6:0f:38:81:2a:b3:5b:12:a6: 58:f0:1a:8a:9f:c5:33:38:59:82:f3:85:98:af:c6:0d:38:a0: 12:bd:9a:71:c3:ba:a6:f9:1c:4d:a7:66:4a:ee:b9:49:50:30: d1:e7:14:a8:48:ca:99:0f:ef:48:e8:20:52:5b:fc:7e:1a:e6: 76:f5:24:5d:38:8c:86:bc:08:a3:5b:db:ad:f1:70:e4:52:1f: 55:99:8f:b5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHN3i9mGSDMH2Xa7L5bpi01XXCi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyODExNDcxMVoX DTI0MDgyNjExNTIxMVowMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3 Mjg1ODE2OEM5QzhBMkUyNDFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEG/hoMX6zxXEc15invRESUVcvQQK0zB96awN1zgZHqHW43vcocSjATNs5j UUJ0Nr6SBLCmbSvqIKkNxfN9ZcvihZCFNG3L8KTSDhO6fusLNkEieWgSkoZeSE+d S5VnrnzE25E35MdHy5yEcxUvbNRFOfGFg0eO5GLusphnS8iyuj3ep5Kd4nqhCmSA qZs4kb7ITq8oHxNfa/+t/swSsgsnN76GRl9zJs0gCwXK3JlHrIp0CWgf5PRtZ3KY wJD/lt/OiqAmXbyWV1n4KNmUhtAjP5mlhjB4iYKxop6+/KEa2Y+EU+r3DXtghBqt b1s5rqkhq0kWBPjoAJ2DqWcoz6ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIiZM+QW81Z2L39yhYFoycii4kHHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlY2ZkM2Y1 LTg1ZGEtNDhhNy1iNTAyLWY2MWE1OTc5NmMzMy8wLzg4OTkzM0U0MTZGMzU2NzYy RjdGNzI4NTgxNjhDOUM4QTJFMjQxQzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp+wwDQYJKoZIhvcNAQELBQADggEBAFrWsQvGMyeqUOG+NTTbaw8I1u6pGQGE hOgoe978QZhoM4W5sBi1sZRwt3Q4v+5n7f7VhdpIbt3nuhuooHYwuJtfcAlh8N1K LNUZ3mxrfudCJ+pi7E9dTjKuWrzeVQaZOENoLFH11EI7ci94OR9E6vZCXoVE9ZgF l1qtOSwrXEf3aGYRFDd52CpJlARwOww1VhAtGgzEHb3MctpHS808CEY2eyCVkxMv GSl3Q6YPOIEqs1sSpljwGoqfxTM4WYLzhZivxg04oBK9mnHDuqb5HE2nZkruuUlQ MNHnFKhIypkP70joIFJb/H4a5nb1JF04jIa8CKNb263xcORSH1WZj7U= -----END CERTIFICATE-----Generated at Wed May 8 10:06:50 2024 by rpki-client on console-ams.rpki-client.org