$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer (raw, json) Hash identifier: efoYvzLbZNPqip+fb5acaK8rZWgm+fGqFm5C+3OqRjQ= Subject key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D460023268CB9CFC978CCF6085A3BA4A456083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Jun 2024 05:41:52 +0000 Certificate not after: Thu 05 Jun 2025 05:46:52 +0000 Subordinate resources: IP: 103.172.172.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:46:00:23:26:8c:b9:cf:c9:78:cc:f6:08:5a:3b:a4:a4:56:08:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 6 05:41:52 2024 GMT Not After : Jun 5 05:46:52 2025 GMT Subject: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:c8:e6:c1:91:50:49:11:3d:fa:7c:a7:28: c2:c7:c1:b3:59:02:de:0a:5b:e0:df:f6:43:d0:eb: 5a:68:7a:07:c4:6a:6e:c5:fa:eb:c5:78:34:55:37: 62:ea:5f:51:30:f2:e2:99:af:28:0d:22:d1:de:ff: 6b:ad:f1:9f:c3:c8:39:31:20:53:35:39:3f:52:35: 06:1d:e7:51:da:c9:86:de:20:66:5d:df:50:f6:00: 76:ae:e0:6e:48:66:73:7f:99:e1:01:0a:df:e6:2f: de:dc:98:86:25:ca:b9:43:f9:e2:e7:29:51:41:b9: a3:65:a3:1b:20:63:00:72:42:1e:63:fd:83:fc:fd: 34:14:5d:81:a6:16:89:82:2b:2a:0e:19:92:c7:16: 00:b4:52:15:c4:d4:bf:28:14:20:e6:0a:21:1d:3f: 66:3e:fa:ae:54:e0:b6:e8:38:92:f3:66:93:80:0f: 01:f8:69:c4:85:26:34:7f:c1:70:54:e7:ba:87:f8: 00:eb:d3:27:b8:3a:31:9a:7b:51:d5:30:57:ab:f8: 1b:7b:c0:ea:6d:98:d4:d1:ae:69:96:a8:17:d3:99: c1:c2:68:30:00:f9:ef:51:e8:5f:a9:6e:6a:80:f8: cd:29:0a:02:b3:04:f6:81:76:c7:b9:3e:a5:c9:d8: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.172.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e8:ea:01:d3:76:17:6f:90:2e:e0:76:ba:2c:2d:80:40:6f: b1:5f:99:62:1f:10:e3:c3:f8:e6:73:8a:fa:d5:75:f8:f7:56: 28:5a:f9:a3:4b:de:40:b0:5e:91:00:5c:7e:52:db:b9:b5:ac: 65:b6:4b:ec:fb:0e:dc:8e:aa:ae:c3:5d:2d:74:c1:53:9f:c8: 6d:9a:c5:bf:09:fb:6d:40:af:94:cc:f2:90:52:27:9d:02:6d: b0:85:98:81:4b:0b:fa:c4:a7:6c:16:ec:a7:38:b2:32:d9:50: 51:4d:03:03:1e:cf:6e:6e:1d:5c:93:2c:1f:2d:d5:af:e7:97: ea:15:83:99:fd:94:06:10:ed:da:fd:63:15:59:98:dd:f2:93: 1b:ba:1d:1e:6d:00:93:65:5c:f7:a9:12:bf:48:17:88:45:0d: 97:df:b4:d7:2a:c6:98:97:7c:b5:0a:ba:18:61:69:00:f5:78: 61:33:88:27:3e:fa:84:bb:b9:5d:42:17:6e:f9:90:1d:d7:5d: 9a:68:81:25:56:21:28:12:87:f7:03:1c:fb:94:fd:2f:d6:f4: e6:21:39:1d:c7:a6:bb:17:25:80:a0:b4:71:35:43:01:3c:77: 7d:1a:2f:64:f9:a7:a5:72:f4:d2:b9:7d:bd:52:7f:36:6a:e2: cb:bc:a7:8a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfUYAIyaMuc/JeMz2CFo7pKRWCD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYwNjA1NDE1MloX DTI1MDYwNTA1NDY1MlowMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZB MUIyMkEyOTNDQjkxRjQ2NUFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqgyObBkVBJET36fKcowsfBs1kC3gpb4N/2Q9DrWmh6B8RqbsX668V4NFU3 YupfUTDy4pmvKA0i0d7/a63xn8PIOTEgUzU5P1I1Bh3nUdrJht4gZl3fUPYAdq7g bkhmc3+Z4QEK3+Yv3tyYhiXKuUP54ucpUUG5o2WjGyBjAHJCHmP9g/z9NBRdgaYW iYIrKg4ZkscWALRSFcTUvygUIOYKIR0/Zj76rlTgtug4kvNmk4APAfhpxIUmNH/B cFTnuof4AOvTJ7g6MZp7UdUwV6v4G3vA6m2Y1NGuaZaoF9OZwcJoMAD571HoX6lu aoD4zSkKArME9oF2x7k+pcnYejECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIjhKIf/TBvdMbahsiopPLkfRlqpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0ZGE0MTVi LTVmMTctNDYwMi05YmQ5LWZkODRhYzJjYWU4Ni8xLzg4RTEyODg3RkY0QzFCREQz MUI2QTFCMjJBMjkzQ0I5MUY0NjVBQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrKwwDQYJKoZIhvcNAQELBQADggEBADXo6gHTdhdvkC7gdrosLYBAb7FfmWIf EOPD+OZzivrVdfj3Viha+aNL3kCwXpEAXH5S27m1rGW2S+z7DtyOqq7DXS10wVOf yG2axb8J+21Ar5TM8pBSJ50CbbCFmIFLC/rEp2wW7Kc4sjLZUFFNAwMez25uHVyT LB8t1a/nl+oVg5n9lAYQ7dr9YxVZmN3ykxu6HR5tAJNlXPepEr9IF4hFDZfftNcq xpiXfLUKuhhhaQD1eGEziCc++oS7uV1CF275kB3XXZpogSVWISgSh/cDHPuU/S/W 9OYhOR3HprsXJYCgtHE1QwE8d30aL2T5p6Vy9NK5fb1SfzZq4su8p4o= -----END CERTIFICATE-----Generated at Sat Jun 22 23:53:59 2024 by rpki-client on console-fra.rpki-client.org