$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer (raw, json) Hash identifier: S7Wy66aP849lfqLq/lqA/q/EhMhk7x4EotG3DHC3fCA= Subject key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44782E71BBC5EADC30D042FE1EFA23E5BA221DC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Mar 2024 04:40:44 +0000 Certificate not after: Mon 17 Mar 2025 04:45:44 +0000 Subordinate resources: IP: 103.122.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:78:2e:71:bb:c5:ea:dc:30:d0:42:fe:1e:fa:23:e5:ba:22:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 18 04:40:44 2024 GMT Not After : Mar 17 04:45:44 2025 GMT Subject: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:0c:05:71:01:66:7b:54:ec:a5:f6:27:ef: 51:a6:2f:2a:ab:1d:60:99:d4:65:1e:cb:61:a1:e6: b9:39:cb:d8:7b:65:85:c3:01:aa:ee:5d:12:4f:82: e0:d7:ee:3b:5b:d3:ce:3d:d8:1a:68:d5:29:0b:df: f7:07:a7:68:b2:e8:b2:d6:c7:c4:88:0e:b2:dc:3e: 07:2c:64:8f:93:94:35:71:06:dc:11:b1:03:49:67: 0c:b9:bd:a9:9f:13:1e:22:75:50:64:e4:54:c4:40: df:68:47:8c:a1:dc:af:37:83:3c:c5:9c:a2:9d:e6: a0:21:72:27:1c:b5:23:55:da:b5:0f:c1:7e:74:16: a7:bc:ee:6b:1e:44:1a:c9:6b:15:30:b9:7e:81:03: e4:03:fa:2f:df:eb:af:7c:ff:4f:b9:af:bb:64:8a: 23:ec:08:ee:bb:4e:c1:0c:b2:b5:17:2d:b0:97:d9: 7e:2a:e0:8a:b3:b2:97:0f:24:6b:68:bd:b6:56:3b: 4a:52:91:c8:d9:a9:c0:23:98:81:f0:c3:b7:f9:9c: 95:f3:7a:ba:dd:c0:11:5a:63:ca:58:4f:90:22:c4: 04:00:b4:72:3e:f3:5a:4a:22:9f:af:07:f5:06:8f: 3c:1c:da:95:09:24:16:25:6a:0f:4f:89:74:f0:8b: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.8.0/23 Signature Algorithm: sha256WithRSAEncryption 13:c8:aa:88:87:1a:44:19:e5:f8:ab:42:49:ca:ea:5b:12:f7: 67:2d:9a:00:ab:c1:c0:49:4c:b9:b4:5f:2d:59:54:f7:c2:f1: 68:8d:7e:7d:c7:f2:4c:2e:65:64:e3:0e:b7:9c:8c:27:77:8b: cc:cf:3b:4a:18:4e:5b:ae:7a:28:e9:48:b7:dc:e7:da:d3:7b: 88:5d:1c:ca:49:61:a0:78:5d:dc:78:37:ba:19:6b:3b:49:fc: f7:b5:42:17:dc:92:ca:2f:03:00:06:51:dc:53:e4:1b:56:09: 95:d1:9d:47:a5:38:fe:cc:dd:97:07:ba:36:63:b7:84:16:ac: 8e:ba:f1:9a:24:5f:ff:79:01:4b:74:6d:20:b9:f7:ce:fa:7d: 6e:e7:e0:bd:57:af:e1:78:f7:17:fe:e8:34:d6:66:5a:0f:48: 05:f8:84:91:6b:21:5e:43:39:59:89:88:61:98:9e:31:9f:80: 10:c6:18:4f:43:c4:0e:3c:5b:e9:93:6b:33:68:87:35:ee:bf: b0:0e:e9:cb:32:64:5d:fe:15:50:88:be:99:65:17:de:66:79: f8:fb:57:3c:b2:0b:d6:c4:68:0b:ce:a8:98:87:9a:7b:3d:a5: d2:cd:8f:ee:6e:9b:78:ce:e6:78:39:00:62:8a:59:8e:8f:5c: 4c:d0:f6:3e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURHgucbvF6tww0EL+Hvoj5boiHcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxODA0NDA0NFoX DTI1MDMxNzA0NDU0NFowMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJF MjdBQzAxRDJBNjAyODcyQkZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+JDAVxAWZ7VOyl9ifvUaYvKqsdYJnUZR7LYaHmuTnL2HtlhcMBqu5dEk+C 4NfuO1vTzj3YGmjVKQvf9wenaLLostbHxIgOstw+Byxkj5OUNXEG3BGxA0lnDLm9 qZ8THiJ1UGTkVMRA32hHjKHcrzeDPMWcop3moCFyJxy1I1XatQ/BfnQWp7zuax5E GslrFTC5foED5AP6L9/rr3z/T7mvu2SKI+wI7rtOwQyytRctsJfZfirgirOylw8k a2i9tlY7SlKRyNmpwCOYgfDDt/mclfN6ut3AEVpjylhPkCLEBAC0cj7zWkoin68H 9QaPPBzalQkkFiVqD0+JdPCLvukCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsZrOCnORSSsYviesAdKmAocr/AMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjUyOWRi LTkzMzAtNGU5Ny1hZGYxLWIwZGRmMWE2ZTU5OS8wLzhCMTlBQ0UwQTczOTE0OTJC MThCRTI3QUMwMUQyQTYwMjg3MkJGQzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFneggwDQYJKoZIhvcNAQELBQADggEBABPIqoiHGkQZ5firQknK6lsS92ctmgCr wcBJTLm0Xy1ZVPfC8WiNfn3H8kwuZWTjDrecjCd3i8zPO0oYTluueijpSLfc59rT e4hdHMpJYaB4Xdx4N7oZaztJ/Pe1QhfcksovAwAGUdxT5BtWCZXRnUelOP7M3ZcH ujZjt4QWrI668ZokX/95AUt0bSC59876fW7n4L1Xr+F49xf+6DTWZloPSAX4hJFr IV5DOVmJiGGYnjGfgBDGGE9DxA48W+mTazNohzXuv7AO6csyZF3+FVCIvpllF95m efj7VzyyC9bEaAvOqJiHmns9pdLNj+5um3jO5ng5AGKKWY6PXEzQ9j4= -----END CERTIFICATE-----Generated at Wed May 8 14:59:53 2024 by rpki-client on console-ams.rpki-client.org