$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer (raw, json) Hash identifier: gxZkgZgTesmX4QMWsjVhun63B8H+znS8UX7Q7ZTI/Ec= Subject key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48B422D52E010195627A0536F46ACFB901D6A9A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft caRepository: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jun 2023 11:39:25 +0000 Certificate not after: Thu 27 Jun 2024 11:44:25 +0000 Subordinate resources: IP: 103.190.114.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b4:22:d5:2e:01:01:95:62:7a:05:36:f4:6a:cf:b9:01:d6:a9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 29 11:39:25 2023 GMT Not After : Jun 27 11:44:25 2024 GMT Subject: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:d5:81:ad:e8:c1:af:c5:87:ce:10:3e:7d: b3:19:8e:23:de:63:f5:4e:8c:bb:88:27:6a:a8:12: f4:51:64:9a:2f:4c:07:44:f3:2f:8b:94:31:72:ef: ea:3c:29:65:b5:84:06:1f:37:00:8e:8b:75:d2:31: 34:da:f0:73:fd:74:e6:1f:0e:73:98:ee:3d:2e:18: 10:85:72:17:63:19:9e:a9:2d:e1:df:7e:3b:63:d7: 8a:76:2e:b7:89:0f:0d:14:11:ad:6c:11:12:c5:96: 39:04:e4:6d:49:ae:51:11:4f:de:20:70:5e:e9:2e: 1e:2d:ba:ab:6e:c0:dd:e6:44:9f:85:c7:6e:3f:0b: 14:93:96:0d:a1:28:1c:82:04:12:16:eb:5c:9d:68: a1:8b:27:6f:bb:64:ea:e3:a5:88:76:d9:e6:b5:2c: 9b:f5:95:a8:1d:33:c6:b6:cc:79:21:2c:4a:4d:53: 89:15:8c:38:d3:34:64:e3:99:e4:4e:56:ef:dd:54: a4:d1:43:b1:85:4a:e2:e5:a7:34:91:5a:f4:3b:31: 29:0f:2c:81:87:b4:dc:68:ab:c6:5a:a3:13:8a:8b: 63:bd:8d:12:8d:dc:1a:0d:f8:42:14:f6:bd:97:5f: 68:de:19:4d:56:b5:e1:50:95:2f:3f:12:6c:4a:e7: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.114.0/23 Signature Algorithm: sha256WithRSAEncryption 82:7f:6e:0c:93:28:5a:66:c4:c9:ad:72:ab:06:14:7b:ba:13: 37:7c:cf:23:7a:19:cb:60:d5:1c:70:51:32:31:30:e5:8f:7c: 04:25:7a:cb:54:2c:89:eb:29:af:3f:74:40:83:63:f4:e6:73: 1b:11:c8:54:bd:61:55:be:a3:68:82:52:90:a6:9f:1b:03:d0: c0:f6:39:ec:d0:a1:2a:0e:33:e1:bf:8b:09:d4:3a:73:3d:ec: 5b:7f:6a:a9:70:16:85:7a:1d:74:1b:06:ac:d5:b3:92:1f:a2: be:9d:51:66:b8:94:50:1d:c9:62:af:27:56:6f:ca:6e:da:84: 92:4b:fa:25:47:94:0d:1f:6f:45:0d:e9:40:e6:5d:c4:18:0d: 84:c3:0a:d5:18:5c:cc:3d:e0:e2:eb:fc:4d:c4:18:6d:68:4a: 8e:ad:52:38:36:20:0f:04:c9:26:9f:7e:5a:87:3a:7b:94:29: 35:fb:85:5d:e9:7d:41:66:b8:eb:f8:33:7d:5e:95:88:1c:a2: fe:51:d2:67:0f:ff:cf:ed:4b:2d:9a:f1:92:5a:1f:76:6b:85: 14:b9:fc:ab:ed:47:92:49:51:5c:30:4f:f3:22:f5:bc:b2:0d: 25:4a:93:d8:3d:b4:f1:cd:e7:9d:97:c6:c9:dc:d0:0f:7e:6a: eb:54:53:e9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSLQi1S4BAZViegU29GrPuQHWqaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyOTExMzkyNVoX DTI0MDYyNzExNDQyNVowMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVC NEIwODQ3RjlDODM0MDhCQTkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNf1YGt6MGvxYfOED59sxmOI95j9U6Mu4gnaqgS9FFkmi9MB0TzL4uUMXLv 6jwpZbWEBh83AI6LddIxNNrwc/105h8Oc5juPS4YEIVyF2MZnqkt4d9+O2PXinYu t4kPDRQRrWwREsWWOQTkbUmuURFP3iBwXukuHi26q27A3eZEn4XHbj8LFJOWDaEo HIIEEhbrXJ1ooYsnb7tk6uOliHbZ5rUsm/WVqB0zxrbMeSEsSk1TiRWMONM0ZOOZ 5E5W791UpNFDsYVK4uWnNJFa9DsxKQ8sgYe03GirxlqjE4qLY72NEo3cGg34QhT2 vZdfaN4ZTVa14VCVLz8SbErnFM8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsjeyvAWBtVbdW0sIR/nINAi6k9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyYjBiZGQ1 LTZlMzAtNGExMC1iOTkzLTc3ZDQ4MjUxZjNhMS8wLzhCMjM3QjJCQzA1ODFCNTU2 REQ1QjRCMDg0N0Y5QzgzNDA4QkE5M0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvnIwDQYJKoZIhvcNAQELBQADggEBAIJ/bgyTKFpmxMmtcqsGFHu6Ezd8zyN6 Gctg1RxwUTIxMOWPfAQlestULInrKa8/dECDY/TmcxsRyFS9YVW+o2iCUpCmnxsD 0MD2OezQoSoOM+G/iwnUOnM97Ft/aqlwFoV6HXQbBqzVs5Ifor6dUWa4lFAdyWKv J1Zvym7ahJJL+iVHlA0fb0UN6UDmXcQYDYTDCtUYXMw94OLr/E3EGG1oSo6tUjg2 IA8EySafflqHOnuUKTX7hV3pfUFmuOv4M31elYgcov5R0mcP/8/tSy2a8ZJaH3Zr hRS5/KvtR5JJUVwwT/Mi9byyDSVKk9g9tPHN552Xxsnc0A9+autUU+k= -----END CERTIFICATE-----Generated at Wed May 8 14:59:53 2024 by rpki-client on console-ams.rpki-client.org