$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer (raw, json) Hash identifier: zfKPdFceYSHOzOvBOdqcnmLO32Q6V63WUbZWRXlhf9U= Subject key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 508DD390D19892156F1058CACD24CE03A84703DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft caRepository: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Sep 2024 18:53:38 +0000 Certificate not after: Wed 17 Sep 2025 18:58:38 +0000 Subordinate resources: IP: 103.38.110.0/23 IP: 2001:df3:2c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8d:d3:90:d1:98:92:15:6f:10:58:ca:cd:24:ce:03:a8:47:03:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 18 18:53:38 2024 GMT Not After : Sep 17 18:58:38 2025 GMT Subject: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:d7:69:5c:83:bb:61:82:64:e7:42:60:32: 2f:28:c2:25:66:0b:22:34:53:62:f4:44:e6:bb:09: 85:46:bd:d7:8f:92:1c:f2:02:36:25:09:e8:01:5e: b9:76:44:1a:08:4b:6a:2f:c9:f8:d4:d9:23:16:53: 58:fe:3b:a1:69:34:ca:48:70:80:1d:4e:4c:ef:4d: 1d:d6:05:94:d3:5a:95:74:e4:69:2e:92:44:94:3e: b8:07:80:1e:54:fb:62:bd:45:4f:35:1a:a9:96:a9: d1:5f:89:5a:7d:48:38:d7:54:7d:04:80:c1:3e:1d: 5e:cc:17:2f:41:82:68:a0:ff:81:56:3d:1d:f2:0a: 5d:c2:a9:74:c4:2b:ac:99:fa:36:e6:e0:1d:85:41: 1b:95:b0:21:60:83:5a:ed:24:28:3f:76:a0:e4:c8: e4:b8:05:15:03:02:db:ae:80:05:8e:bd:f1:d3:8f: 1a:5b:57:e5:02:89:49:30:cb:65:be:fb:0c:0f:4d: 5d:ac:e7:69:0d:22:c4:ad:96:3c:d9:06:3a:60:af: 40:76:3b:4e:58:e4:3f:52:e3:9c:38:14:92:b8:0d: ca:43:68:16:c2:75:ef:7f:73:08:73:7b:eb:5c:66: 9f:31:ce:7a:b2:bf:ad:ed:42:80:e7:ce:ec:62:4c: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.110.0/23 IPv6: 2001:df3:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:d3:5d:f4:87:02:7d:45:21:85:b0:ad:4b:b3:43:87:bb:8d: e9:ab:55:ea:1e:1e:44:6c:cb:a0:27:31:02:c7:65:68:fa:5e: c2:31:7f:7a:d8:01:bb:e6:f0:e1:36:7a:f8:f9:dd:44:d9:98: 71:cc:f9:76:1d:7d:ab:9c:76:0e:bc:28:04:cf:52:ce:47:d9: 38:c5:50:6c:71:36:dc:0a:77:78:cf:27:4b:77:ae:e9:7a:47: 99:af:81:37:63:47:50:82:e8:c6:27:0c:2b:94:56:49:13:7f: 36:fe:e4:6c:17:83:ae:c5:3d:74:5c:04:e3:cf:0b:b9:7f:3b: 71:71:07:04:05:be:24:fb:45:7d:e9:64:0e:89:18:8e:73:c7: 75:cb:12:e1:6b:44:fe:60:bb:f0:18:58:37:d4:a0:3a:78:a4: 02:b3:ae:ea:b4:83:65:38:f2:6a:13:a6:9b:8a:0e:69:7d:2e: 26:68:ff:92:09:89:54:8c:d0:6e:c9:7e:41:b0:0a:3b:d3:73: d1:52:9e:00:e4:c1:b6:69:4e:58:cc:da:0c:78:84:9a:7d:59: a4:61:5f:b4:f2:54:c8:9a:1a:04:be:85:7c:49:4f:88:2a:40: 2b:93:23:d7:c6:1a:a4:00:f1:19:64:2b:c7:01:ec:f6:18:7e: c3:ac:d1:7d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUUI3TkNGYkhVvEFjKzSTOA6hHA9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxODE4NTMzOFoX DTI1MDkxNzE4NTgzOFowMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJE MDhCNjREOTdCOUEyNDY4RUQ4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmp12lcg7thgmTnQmAyLyjCJWYLIjRTYvRE5rsJhUa914+SHPICNiUJ6AFe uXZEGghLai/J+NTZIxZTWP47oWk0ykhwgB1OTO9NHdYFlNNalXTkaS6SRJQ+uAeA HlT7Yr1FTzUaqZap0V+JWn1IONdUfQSAwT4dXswXL0GCaKD/gVY9HfIKXcKpdMQr rJn6NubgHYVBG5WwIWCDWu0kKD92oOTI5LgFFQMC266ABY698dOPGltX5QKJSTDL Zb77DA9NXaznaQ0ixK2WPNkGOmCvQHY7TljkP1LjnDgUkrgNykNoFsJ1739zCHN7 61xmnzHOerK/re1CgOfO7GJMgZUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIryS6a7L2fNVIvQi2TZe5okaO2AMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhYmVlYmNj LWEyNDctNGZkZS1hYTg2LWM2NjY5ZWFiY2Q4Mi8wLzhBRjI0QkE2QkIyRjY3Q0Q1 NDhCRDA4QjY0RDk3QjlBMjQ2OEVEODAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnJm4wDwQCAAIwCQMHACABDfMCwDANBgkqhkiG9w0BAQsFAAOCAQEAYtNd9IcC fUUhhbCtS7NDh7uN6atV6h4eRGzLoCcxAsdlaPpewjF/etgBu+bw4TZ6+PndRNmY ccz5dh19q5x2DrwoBM9SzkfZOMVQbHE23Ap3eM8nS3eu6XpHma+BN2NHUILoxicM K5RWSRN/Nv7kbBeDrsU9dFwE488LuX87cXEHBAW+JPtFfelkDokYjnPHdcsS4WtE /mC78BhYN9SgOnikArOu6rSDZTjyahOmm4oOaX0uJmj/kgmJVIzQbsl+QbAKO9Nz 0VKeAOTBtmlOWMzaDHiEmn1ZpGFftPJUyJoaBL6FfElPiCpAK5Mj18YapADxGWQr xwHs9hh+w6zRfQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:50 2024 by rpki-client on console-fra.rpki-client.org