$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer (raw, json) Hash identifier: aAjrqDb0reScn/xESrZeWdZtQjsSgutL9FlYJQQnDwE= Subject key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C899734BF6FDAB6F7BE428F990DBD9A165C531F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft caRepository: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jan 2024 09:28:58 +0000 Certificate not after: Mon 27 Jan 2025 09:33:58 +0000 Subordinate resources: IP: 202.47.160.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:89:97:34:bf:6f:da:b6:f7:be:42:8f:99:0d:bd:9a:16:5c:53:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 29 09:28:58 2024 GMT Not After : Jan 27 09:33:58 2025 GMT Subject: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:62:c2:db:56:75:0e:73:b8:01:8d:1f:31: 4b:82:38:80:3a:ab:c6:f0:92:b7:ef:75:33:96:5d: ff:e8:1d:ce:72:43:ab:eb:50:66:6d:a7:32:4a:c0: 84:27:36:c4:cd:fb:81:f0:55:f8:4e:53:be:19:61: fa:b4:1c:d3:2a:98:c2:1c:32:b1:6b:36:43:76:ad: 0f:33:2a:a7:8e:44:18:5c:75:2f:90:6e:6b:de:e8: fa:0c:3e:2d:30:57:20:e1:e1:7e:f9:15:7d:79:5b: 26:eb:b8:3b:28:d2:69:28:a9:fd:5e:8a:36:82:b3: e3:ac:db:aa:c8:0c:1e:bc:4e:8c:3a:02:2b:9c:8c: b8:d0:46:3e:90:7d:11:fb:c7:93:6d:5b:70:00:de: a4:23:1a:fb:60:f0:3d:47:7f:79:02:cb:71:8e:66: f0:78:0a:69:e3:f1:4d:ec:38:54:ae:8e:b5:82:f3: f3:49:bb:b0:d3:20:cd:e7:d7:72:4f:b9:de:60:40: cb:2b:cc:90:f1:62:98:1b:4f:a1:2f:16:07:97:89: 83:09:6c:65:1d:92:61:8c:18:c2:77:af:f5:1b:f5: 40:9e:2b:fc:73:71:fc:03:99:ac:c4:d4:92:7d:c9: 04:3e:ef:2d:77:8f:12:8a:38:1e:c3:5d:0a:b8:d9: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:11:0c:cf:e8:c0:1c:1b:78:84:54:39:b6:5d:25:ee:65:6a: 93:11:94:cd:36:a8:ca:67:f5:95:32:24:06:e0:a0:df:f4:30: 4e:73:80:65:8f:20:ad:6a:92:2d:7d:a6:06:1e:eb:fc:ad:c1: 40:9d:39:5f:ed:18:f0:87:9e:4b:b7:52:c9:cc:ca:b0:0a:f8: 45:9b:83:31:2b:cd:2c:96:e0:12:78:56:39:7a:dd:66:11:18: 35:20:47:6d:c9:8b:46:90:9e:a6:6a:33:6d:c8:49:d9:2a:0a: 9f:aa:2d:2f:de:33:08:82:ed:fd:2f:6f:ee:7c:ae:f3:b8:9e: 1c:db:47:13:d3:a0:e9:be:ad:39:a6:ff:c1:85:b2:33:90:05: 20:07:ba:4c:76:bc:13:2a:a1:eb:6f:62:3d:6a:55:20:93:40: 3f:61:e1:55:98:54:e0:c0:6f:5b:1b:ab:fa:b8:66:05:ee:11: 60:a5:ba:26:ae:a0:05:f2:1b:a2:23:e9:15:06:f7:cc:31:36: 51:42:fd:02:e8:71:3c:08:cd:b5:e5:6a:1f:d2:29:54:9e:f8: bb:f2:ce:a3:24:67:46:de:72:97:71:85:ab:4b:ff:62:fc:1f: 4a:1d:a1:56:3e:2f:41:be:79:a5:be:82:91:93:1c:17:80:85: ca:e1:e4:38 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfImXNL9v2rb3vkKPmQ29mhZcUx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyOTA5Mjg1OFoX DTI1MDEyNzA5MzM1OFowMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0Qx N0YxQzVCNkYwQzU0QjBGNUYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFrYsLbVnUOc7gBjR8xS4I4gDqrxvCSt+91M5Zd/+gdznJDq+tQZm2nMkrA hCc2xM37gfBV+E5Tvhlh+rQc0yqYwhwysWs2Q3atDzMqp45EGFx1L5Bua97o+gw+ LTBXIOHhfvkVfXlbJuu4OyjSaSip/V6KNoKz46zbqsgMHrxOjDoCK5yMuNBGPpB9 EfvHk21bcADepCMa+2DwPUd/eQLLcY5m8HgKaePxTew4VK6OtYLz80m7sNMgzefX ck+53mBAyyvMkPFimBtPoS8WB5eJgwlsZR2SYYwYwnev9Rv1QJ4r/HNx/AOZrMTU kn3JBD7vLXePEoo4HsNdCrjZ6MECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIlY6x6gAi3veD0X8cW28MVLD18eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyODg3NjJj LTNmYzUtNDljYy05NDlhLTU5NGIzMzFhMTNhMS8wLzg5NThFQjFFQTAwMjJERUY3 ODNEMTdGMUM1QjZGMEM1NEIwRjVGMUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKL6AwDQYJKoZIhvcNAQELBQADggEBAG8RDM/owBwbeIRUObZdJe5lapMRlM02 qMpn9ZUyJAbgoN/0ME5zgGWPIK1qki19pgYe6/ytwUCdOV/tGPCHnku3UsnMyrAK +EWbgzErzSyW4BJ4Vjl63WYRGDUgR23Ji0aQnqZqM23ISdkqCp+qLS/eMwiC7f0v b+58rvO4nhzbRxPToOm+rTmm/8GFsjOQBSAHukx2vBMqoetvYj1qVSCTQD9h4VWY VODAb1sbq/q4ZgXuEWCluiauoAXyG6Ij6RUG98wxNlFC/QLocTwIzbXlah/SKVSe +LvyzqMkZ0becpdxhatL/2L8H0odoVY+L0G+eaW+gpGTHBeAhcrh5Dg= -----END CERTIFICATE-----Generated at Wed May 8 15:17:39 2024 by rpki-client on console-fra.rpki-client.org