$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer (raw, json) Hash identifier: Z7e3gIRSqmpLIelTl5bCdlFXIGqUHXyj/euh1p+iiwQ= Subject key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BFFEF3998F52EC3CFA60FD1855524DD72313705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 17 Sep 2023 23:14:30 +0000 Certificate not after: Sun 15 Sep 2024 23:19:30 +0000 Subordinate resources: IP: 103.143.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ff:ef:39:98:f5:2e:c3:cf:a6:0f:d1:85:55:24:dd:72:31:37:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 23:14:30 2023 GMT Not After : Sep 15 23:19:30 2024 GMT Subject: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:76:55:4e:49:07:9e:01:43:ed:3d:c6:f6: e1:30:6a:65:77:9a:49:95:af:d9:c9:e1:61:1c:77: 47:8e:8d:22:9e:46:85:ca:c6:93:d0:78:6b:28:15: 15:5e:18:0e:6e:fb:c8:56:5a:19:87:02:b7:ca:1a: 8f:8e:25:fe:04:48:d0:fc:d6:68:ee:4c:46:bf:6e: 05:59:e9:5e:70:f1:2f:c8:f8:da:cc:f8:6e:82:e0: 69:e3:df:4e:2b:95:9b:9f:e0:42:60:86:0d:ad:db: b3:de:a6:21:0d:98:25:72:67:36:d8:cc:7a:7b:5e: 48:9e:06:9e:92:60:2c:6b:66:f0:df:91:5d:b1:69: 06:39:95:5b:bd:19:e8:d1:18:c1:b2:e6:2e:29:dc: da:f5:03:03:32:65:a6:35:b3:c9:17:43:9e:2e:d6: ef:d5:b9:aa:a7:2c:32:53:99:3d:5c:23:32:03:f8: 14:21:b5:fc:b5:55:b2:be:28:db:8c:1a:76:07:b6: 4b:0f:14:e9:16:5e:0b:78:d3:6a:f6:5f:4f:25:b8: 84:0b:5f:e2:59:ed:8d:73:95:67:03:ef:e5:bb:02: 61:20:ed:4b:78:fe:71:da:6d:fd:c3:9a:6b:c9:40: 86:f6:af:f4:a5:bd:d4:45:99:94:46:35:6b:e7:91: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.68.0/23 Signature Algorithm: sha256WithRSAEncryption 41:3d:fa:c1:05:12:23:d1:8b:67:21:53:98:3f:59:16:2a:61: b0:df:ca:58:a1:69:6f:bc:be:8e:24:df:3e:42:4a:93:d8:be: 57:79:3e:00:52:9a:29:df:9a:4f:ef:c1:69:c9:55:f2:df:a6: b1:f2:ea:2c:a9:43:48:19:1b:b6:11:33:e1:f3:a9:18:30:2c: 61:4a:2d:57:70:ae:a6:70:57:d6:7e:70:b9:b0:6f:43:c2:33: 03:6a:f5:d9:14:a8:c6:ff:c7:ab:cd:57:c0:41:03:81:5a:54: 99:7c:ef:c4:3c:3d:7f:4e:42:bc:30:64:81:4b:c5:60:33:b9: 42:cf:ff:f8:c1:d3:01:49:af:ba:18:81:5c:6b:a8:fd:b4:c8: 0c:bf:8f:a5:89:9e:d1:7b:e8:27:f8:8c:f8:f6:85:21:2c:6c: 1b:ae:0d:25:8c:89:cf:5c:ec:d5:73:5a:37:a0:29:97:98:64: c9:83:58:1f:45:3f:d5:d1:fb:71:e9:e7:3e:64:f3:63:b5:de: 98:82:d0:59:89:f7:f0:4c:35:50:c0:44:a5:09:84:ed:fc:39: 45:88:9b:1c:89:e4:7b:f8:5c:c7:5f:45:d7:6d:dc:ae:3b:4c: af:12:ae:89:d9:32:a9:0d:9e:8e:ea:b5:63:8d:e7:60:85:7f: 54:76:16:cb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa//vOZj1LsPPpg/RhVUk3XIxNwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNzIzMTQzMFoX DTI0MDkxNTIzMTkzMFowMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1 MTBGMEY2MTI3QUQ3NURCQzQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkVdlVOSQeeAUPtPcb24TBqZXeaSZWv2cnhYRx3R46NIp5GhcrGk9B4aygV FV4YDm77yFZaGYcCt8oaj44l/gRI0PzWaO5MRr9uBVnpXnDxL8j42sz4boLgaePf TiuVm5/gQmCGDa3bs96mIQ2YJXJnNtjMenteSJ4GnpJgLGtm8N+RXbFpBjmVW70Z 6NEYwbLmLinc2vUDAzJlpjWzyRdDni7W79W5qqcsMlOZPVwjMgP4FCG1/LVVsr4o 24wadge2Sw8U6RZeC3jTavZfTyW4hAtf4lntjXOVZwPv5bsCYSDtS3j+cdpt/cOa a8lAhvav9KW91EWZlEY1a+eRZRMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFItKDBD4igtu+eRRDw9hJ61128SSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0Mjgw LTMzYmUtNGViNy04ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzhCNEEwQzEwRjg4QTBCNkVG OUU0NTEwRjBGNjEyN0FENzVEQkM0OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnj0QwDQYJKoZIhvcNAQELBQADggEBAEE9+sEFEiPRi2chU5g/WRYqYbDfylih aW+8vo4k3z5CSpPYvld5PgBSminfmk/vwWnJVfLfprHy6iypQ0gZG7YRM+HzqRgw LGFKLVdwrqZwV9Z+cLmwb0PCMwNq9dkUqMb/x6vNV8BBA4FaVJl878Q8PX9OQrww ZIFLxWAzuULP//jB0wFJr7oYgVxrqP20yAy/j6WJntF76Cf4jPj2hSEsbBuuDSWM ic9c7NVzWjegKZeYZMmDWB9FP9XR+3Hp5z5k82O13piC0FmJ9/BMNVDARKUJhO38 OUWImxyJ5Hv4XMdfRddt3K47TK8SronZMqkNno7qtWON52CFf1R2Fss= -----END CERTIFICATE-----Generated at Wed May 8 21:02:18 2024 by rpki-client on console-fra.rpki-client.org