$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer (raw, json) Hash identifier: Fw91jhOUE85wHPj/vdwIh+52gplu1Q42RIAZ8KaQbKc= Subject key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: CEC6C0407323ADCE28B678E72A6483174C4E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft caRepository: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 May 2024 14:50:06 +0000 Certificate not after: Tue 06 May 2025 14:55:06 +0000 Subordinate resources: IP: 103.184.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ce:c6:c0:40:73:23:ad:ce:28:b6:78:e7:2a:64:83:17:4c:4e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 7 14:50:06 2024 GMT Not After : May 6 14:55:06 2025 GMT Subject: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:9f:dc:49:37:06:e8:3c:47:cb:d6:8a:14: bb:ee:18:b6:15:00:b7:e8:23:f4:6f:03:e4:7e:11: a4:dd:55:5c:d2:b6:5a:fc:3e:66:d5:b4:4b:2f:21: 3a:bb:5f:1a:28:b0:ff:a7:c9:a1:4c:43:6c:5e:ae: f3:9e:69:7d:25:6b:d7:82:61:0a:2c:29:de:ac:32: bb:8a:db:b8:3d:12:a7:40:42:66:5d:60:1c:aa:93: 3d:20:ce:d6:ae:ad:82:64:83:86:11:53:77:ac:18: c1:be:c7:d1:4b:4d:77:8c:84:aa:1f:a4:9d:a4:6d: f3:5c:42:b2:84:08:b6:aa:8a:ff:9d:44:1c:f1:4b: 9e:e8:e2:07:62:84:44:52:15:a8:85:68:92:d3:7f: dc:0f:b4:88:ee:91:4c:4f:a3:30:6f:d9:7e:8d:37: 05:68:52:4f:df:0c:18:22:c9:6f:e7:69:c0:22:21: 36:14:59:91:2a:22:38:8e:4d:56:0d:ed:ad:0e:3b: 97:f6:36:4a:a5:83:31:49:ea:6b:01:b1:c5:13:42: f5:81:44:de:f1:74:eb:d4:6b:be:79:fc:66:2a:0b: f5:f0:f9:8e:9d:e2:1c:5d:6d:0a:72:f2:55:b2:19: 39:cf:09:71:9c:e0:02:2d:58:48:8f:1b:1a:9f:fa: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.56.0/24 Signature Algorithm: sha256WithRSAEncryption 64:13:4b:36:d1:d1:07:3c:e5:dd:1e:2d:98:60:f3:25:4b:2a: ca:1c:df:bc:88:81:11:1b:df:1d:21:9f:39:fc:d3:83:d2:3c: b7:4c:0e:3f:ff:ad:47:21:ea:00:99:cf:ee:4e:d7:17:fe:8a: 52:f3:f7:fe:9a:76:e2:f4:8a:1d:d4:59:20:f4:1a:fa:a4:21: 5f:bb:3d:78:05:b5:f6:2c:70:dc:3d:bf:0a:f6:aa:f6:c7:b8: 02:d7:6e:2f:58:87:ad:70:d0:42:00:de:7e:27:62:b8:65:f3: 60:11:5f:b5:d1:95:d0:62:3c:29:fc:d5:bd:97:89:f3:78:dc: 6f:27:e0:ba:d7:bf:c0:73:10:fc:da:e1:79:d7:ff:6f:8e:65: 71:7b:39:74:20:dc:04:e4:de:d0:be:c2:5e:cc:67:b6:9c:dd: 46:14:6b:76:ef:bb:c9:76:9b:85:38:d9:07:f4:bd:84:00:85: 20:81:e8:35:f7:bb:84:7d:47:22:47:b9:e1:76:d6:27:cf:02: aa:38:9d:aa:f2:2c:18:64:63:0b:0a:de:da:f7:7c:e9:3b:9a: ee:d2:78:ce:93:50:f9:a0:ca:d0:b0:3b:d5:01:88:1b:1b:ab: 7b:63:ba:c6:d9:be:cf:21:86:2d:f8:47:d5:a0:4f:7f:04:ce: 75:af:53:2f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAM7GwEBzI63OKLZ45ypkgxdMTlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwNzE0NTAwNloX DTI1MDUwNjE0NTUwNlowMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUw ODVDRjIzMzlFRTRDN0VFMDVBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKkn9xJNwboPEfL1ooUu+4YthUAt+gj9G8D5H4RpN1VXNK2Wvw+ZtW0Sy8h OrtfGiiw/6fJoUxDbF6u855pfSVr14JhCiwp3qwyu4rbuD0Sp0BCZl1gHKqTPSDO 1q6tgmSDhhFTd6wYwb7H0UtNd4yEqh+knaRt81xCsoQItqqK/51EHPFLnujiB2KE RFIVqIVoktN/3A+0iO6RTE+jMG/Zfo03BWhST98MGCLJb+dpwCIhNhRZkSoiOI5N Vg3trQ47l/Y2SqWDMUnqawGxxRNC9YFE3vF069Rrvnn8ZioL9fD5jp3iHF1tCnLy VbIZOc8JcZzgAi1YSI8bGp/6gMcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsN4UGsuBHg/mUIXPIznuTH7gWiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmE1N2M1 LWRmNzMtNDNmNS04NjVkLTZiZDI0OGMyMmZiYS8wLzhCMERFMTQxQUNCODExRTBG RTY1MDg1Q0YyMzM5RUU0QzdFRTA1QTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuDgwDQYJKoZIhvcNAQELBQADggEBAGQTSzbR0Qc85d0eLZhg8yVLKsoc37yI gREb3x0hnzn804PSPLdMDj//rUch6gCZz+5O1xf+ilLz9/6aduL0ih3UWSD0Gvqk IV+7PXgFtfYscNw9vwr2qvbHuALXbi9Yh61w0EIA3n4nYrhl82ARX7XRldBiPCn8 1b2XifN43G8n4LrXv8BzEPza4XnX/2+OZXF7OXQg3ATk3tC+wl7MZ7ac3UYUa3bv u8l2m4U42Qf0vYQAhSCB6DX3u4R9RyJHueF21ifPAqo4naryLBhkYwsK3tr3fOk7 mu7SeM6TUPmgytCwO9UBiBsbq3tjusbZvs8hhi34R9WgT38EznWvUy8= -----END CERTIFICATE-----Generated at Wed May 8 21:02:18 2024 by rpki-client on console-fra.rpki-client.org