$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer File: 889933E416F356762F7F72858168C9C8A2E241C7.cer (raw, json) Hash identifier: 1CALa1G9nEu3J89OVdOooFIJfyEB/6WaIe41tLSuU9c= Subject key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DA9991295E30C84A78E9A8033D408C95B3465FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jul 2024 12:43:35 +0000 Certificate not after: Mon 28 Jul 2025 12:48:35 +0000 Subordinate resources: IP: 103.167.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a9:99:12:95:e3:0c:84:a7:8e:9a:80:33:d4:08:c9:5b:34:65:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 29 12:43:35 2024 GMT Not After : Jul 28 12:48:35 2025 GMT Subject: CN=889933E416F356762F7F72858168C9C8A2E241C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:fe:1a:0c:5f:ac:f1:5c:47:35:e6:29:ef: 44:44:94:55:cb:d0:40:ad:33:07:de:9a:c0:dd:73: 81:91:ea:1d:6e:37:bd:ca:1c:4a:30:13:36:ce:63: 51:42:74:36:be:92:04:b0:a6:6d:2b:ea:20:a9:0d: c5:f3:7d:65:cb:e2:85:90:85:34:6d:cb:f0:a4:d2: 0e:13:ba:7e:eb:0b:36:41:22:79:68:12:92:86:5e: 48:4f:9d:4b:95:67:ae:7c:c4:db:91:37:e4:c7:47: cb:9c:84:73:15:2f:6c:d4:45:39:f1:85:83:47:8e: e4:62:ee:b2:98:67:4b:c8:b2:ba:3d:de:a7:92:9d: e2:7a:a1:0a:64:80:a9:9b:38:91:be:c8:4e:af:28: 1f:13:5f:6b:ff:ad:fe:cc:12:b2:0b:27:37:be:86: 46:5f:73:26:cd:20:0b:05:ca:dc:99:47:ac:8a:74: 09:68:1f:e4:f4:6d:67:72:98:c0:90:ff:96:df:ce: 8a:a0:26:5d:bc:96:57:59:f8:28:d9:94:86:d0:23: 3f:99:a5:86:30:78:89:82:b1:a2:9e:be:fc:a1:1a: d9:8f:84:53:ea:f7:0d:7b:60:84:1a:ad:6f:5b:39: ae:a9:21:ab:49:16:04:f8:e8:00:9d:83:a9:67:28: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.236.0/23 Signature Algorithm: sha256WithRSAEncryption 94:e3:47:98:56:24:7e:57:de:f8:94:92:51:e6:99:f4:ec:94: 49:04:e7:35:e8:0a:f2:07:94:41:ec:25:83:34:7c:64:92:f7: c8:05:7e:64:b7:43:01:46:8b:e4:cc:59:cb:4e:dd:48:97:50: 5d:8a:2f:12:76:ac:d2:99:e8:64:76:e1:45:a0:f7:64:e4:66: e0:a2:6d:01:12:2b:aa:c3:5c:84:8f:3d:f9:e8:44:42:91:fe: e9:ec:62:f3:0c:5c:ff:01:c4:da:a9:27:b6:39:45:a4:ef:1d: d8:66:7f:d9:50:90:83:33:c3:db:b9:02:47:c3:12:17:8b:79: b8:98:89:b6:e4:55:99:5d:33:e1:ad:bd:3e:b0:b3:eb:d3:e5: 7b:d1:62:88:d3:5e:d5:4b:3a:6b:67:ae:21:41:33:8a:f9:09: 41:e8:da:df:4a:79:53:47:f4:58:35:3e:ed:71:c6:e9:72:99: 98:72:85:61:cf:2b:19:b9:ec:7e:a7:e2:7b:0d:d0:54:9b:5e: dc:d1:6c:60:74:ad:16:a7:5e:e1:24:5d:38:8e:ec:72:e7:29: 49:6a:30:13:a2:8c:fc:1f:e2:ef:8b:60:86:63:9e:57:b0:f4: 40:a2:71:b2:c9:95:0f:ec:30:77:fe:46:66:28:8a:25:30:56: b6:84:c1:52 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXamZEpXjDISnjpqAM9QIyVs0Zf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyOTEyNDMzNVoX DTI1MDcyODEyNDgzNVowMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3 Mjg1ODE2OEM5QzhBMkUyNDFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEG/hoMX6zxXEc15invRESUVcvQQK0zB96awN1zgZHqHW43vcocSjATNs5j UUJ0Nr6SBLCmbSvqIKkNxfN9ZcvihZCFNG3L8KTSDhO6fusLNkEieWgSkoZeSE+d S5VnrnzE25E35MdHy5yEcxUvbNRFOfGFg0eO5GLusphnS8iyuj3ep5Kd4nqhCmSA qZs4kb7ITq8oHxNfa/+t/swSsgsnN76GRl9zJs0gCwXK3JlHrIp0CWgf5PRtZ3KY wJD/lt/OiqAmXbyWV1n4KNmUhtAjP5mlhjB4iYKxop6+/KEa2Y+EU+r3DXtghBqt b1s5rqkhq0kWBPjoAJ2DqWcoz6ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIiZM+QW81Z2L39yhYFoycii4kHHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlY2ZkM2Y1 LTg1ZGEtNDhhNy1iNTAyLWY2MWE1OTc5NmMzMy8wLzg4OTkzM0U0MTZGMzU2NzYy RjdGNzI4NTgxNjhDOUM4QTJFMjQxQzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp+wwDQYJKoZIhvcNAQELBQADggEBAJTjR5hWJH5X3viUklHmmfTslEkE5zXo CvIHlEHsJYM0fGSS98gFfmS3QwFGi+TMWctO3UiXUF2KLxJ2rNKZ6GR24UWg92Tk ZuCibQESK6rDXISPPfnoREKR/unsYvMMXP8BxNqpJ7Y5RaTvHdhmf9lQkIMzw9u5 AkfDEheLebiYibbkVZldM+GtvT6ws+vT5XvRYojTXtVLOmtnriFBM4r5CUHo2t9K eVNH9Fg1Pu1xxulymZhyhWHPKxm57H6n4nsN0FSbXtzRbGB0rRanXuEkXTiO7HLn KUlqMBOijPwf4u+LYIZjnlew9ECicbLJlQ/sMHf+RmYoiiUwVraEwVI= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:23 2024 by rpki-client on console-ams.rpki-client.org