$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer (raw, json) Hash identifier: J5+3i9zjqM5KJxTa4KneJcjiEAFwLMzkzsDoJMqobzQ= Subject key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 129095E47D66DAF41D4D3096A7B04344AFC1FE26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft caRepository: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Feb 2024 16:50:18 +0000 Certificate not after: Mon 17 Feb 2025 16:55:18 +0000 Subordinate resources: IP: 103.179.252.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:95:e4:7d:66:da:f4:1d:4d:30:96:a7:b0:43:44:af:c1:fe:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 19 16:50:18 2024 GMT Not After : Feb 17 16:55:18 2025 GMT Subject: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:91:0c:c6:1c:df:f1:3e:28:99:76:bf:b1: ab:01:97:12:3f:63:e0:42:d6:96:d0:12:a6:4f:66: ba:22:b1:18:a3:d1:38:28:83:1c:3d:d9:e7:ae:11: b0:44:ee:5d:15:35:9c:71:b5:44:b7:e8:ab:f8:0e: 5a:43:ef:03:99:f9:4b:ee:37:05:2d:3e:95:ba:08: 25:85:0a:fc:35:d9:47:c5:4d:d1:16:e5:0c:95:19: d7:50:5a:ae:27:33:3c:4e:1c:b1:1f:e5:a4:ce:0d: 8d:9c:4f:bd:6a:22:87:c8:ba:60:d9:eb:56:9c:04: a6:ff:8a:41:e2:68:52:8c:51:ab:44:2d:98:6d:93: 3d:11:c5:6c:8c:e2:2c:95:fd:28:e5:01:59:8d:a2: ce:64:2f:f8:2a:5d:12:c9:e0:6d:10:9c:19:22:2a: d1:d5:e9:27:fe:45:ac:e5:84:0d:fd:e9:c2:20:55: 58:48:f9:db:f5:2b:55:d6:be:60:da:2a:68:57:8c: 83:43:69:18:63:b2:2a:4c:cf:2d:b2:c6:c3:d9:27: 44:11:fd:1a:7a:ec:37:73:0d:f0:f6:a7:93:59:43: d0:d7:51:14:fd:2d:c9:62:87:fb:ca:a0:dd:5a:a7: 18:0a:38:0a:9d:a1:f0:c9:ef:14:1e:2a:58:e4:f8: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.252.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:e4:7c:4f:5b:23:bb:8d:4c:09:c9:dd:8b:e6:78:bf:5d:56: 7c:15:03:cc:90:6d:84:c9:00:f9:fc:1d:55:33:a4:24:10:81: 29:f6:bd:d9:31:be:6b:47:8b:00:96:3e:53:46:32:43:90:cb: 02:d1:c0:f2:9e:72:8a:26:d5:19:40:63:81:3e:b3:63:5e:e0: da:14:61:e3:29:2e:e9:26:b3:8e:b3:3b:52:09:a4:38:ca:96: d0:15:48:22:77:1a:29:54:21:71:11:72:d1:96:91:f2:1c:33: 3e:1c:0a:34:89:c7:4c:de:e6:a5:7a:be:30:8e:96:76:b0:e0: 0d:3f:56:2a:d7:cc:39:1c:20:96:44:48:0b:0b:ea:39:6b:ce: 81:a4:4d:1b:06:8b:9c:c7:67:0d:81:1e:0b:4a:06:67:6f:6d: 3f:d0:0f:f3:63:04:c9:99:b1:27:8e:8a:88:c3:ae:19:be:4c: 11:73:4a:68:46:4c:0c:ed:1c:85:22:d9:82:95:8a:ff:b6:53: 8a:0f:86:a3:7b:73:87:0d:d3:b3:06:e3:c0:f8:de:28:80:66: 90:96:31:d9:4c:bb:2a:5d:df:80:1c:6b:50:82:3d:8d:5b:c3: db:bb:f5:8e:10:ff:be:34:97:2c:d6:cb:0d:70:27:26:ee:b1: 93:90:95:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEpCV5H1m2vQdTTCWp7BDRK/B/iYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxOTE2NTAxOFoX DTI1MDIxNzE2NTUxOFowMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhC ODBEQTZBNUVENjZFNEI1Q0YyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIwkQzGHN/xPiiZdr+xqwGXEj9j4ELWltASpk9muiKxGKPROCiDHD3Z564R sETuXRU1nHG1RLfoq/gOWkPvA5n5S+43BS0+lboIJYUK/DXZR8VN0RblDJUZ11Ba riczPE4csR/lpM4NjZxPvWoih8i6YNnrVpwEpv+KQeJoUoxRq0QtmG2TPRHFbIzi LJX9KOUBWY2izmQv+CpdEsngbRCcGSIq0dXpJ/5FrOWEDf3pwiBVWEj52/UrVda+ YNoqaFeMg0NpGGOyKkzPLbLGw9knRBH9GnrsN3MN8Pank1lD0NdRFP0tyWKH+8qg 3VqnGAo4Cp2h8MnvFB4qWOT4T3sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIrLUgsOLeZs5Si4Daal7Wbktc8uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4NWJmZjQx LTI0MjAtNDJiMS05YjgzLWQ0MWMxODA0M2Q2NS8wLzhBQ0I1MjBCMEUyREU2NkNF NTI4QjgwREE2QTVFRDY2RTRCNUNGMkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFns/wwDQYJKoZIhvcNAQELBQADggEBAA/kfE9bI7uNTAnJ3YvmeL9dVnwVA8yQ bYTJAPn8HVUzpCQQgSn2vdkxvmtHiwCWPlNGMkOQywLRwPKecoom1RlAY4E+s2Ne 4NoUYeMpLukms46zO1IJpDjKltAVSCJ3GilUIXERctGWkfIcMz4cCjSJx0ze5qV6 vjCOlnaw4A0/VirXzDkcIJZESAsL6jlrzoGkTRsGi5zHZw2BHgtKBmdvbT/QD/Nj BMmZsSeOiojDrhm+TBFzSmhGTAztHIUi2YKViv+2U4oPhqN7c4cN07MG48D43iiA ZpCWMdlMuypd34Aca1CCPY1bw9u79Y4Q/740lyzWyw1wJybusZOQleI= -----END CERTIFICATE-----Generated at Wed May 8 09:50:33 2024 by rpki-client on console-fra.rpki-client.org