$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer (raw, json) Hash identifier: bX0wo1Fjlv7L/IwFLAvsc9H5kpP68POXTfffSZ3OUNk= Subject key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70BC035C15E751785AE510279B5AA242EB61CFCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Aug 2024 02:32:37 +0000 Certificate not after: Mon 18 Aug 2025 02:37:37 +0000 Subordinate resources: IP: 103.143.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bc:03:5c:15:e7:51:78:5a:e5:10:27:9b:5a:a2:42:eb:61:cf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 02:32:37 2024 GMT Not After : Aug 18 02:37:37 2025 GMT Subject: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:76:55:4e:49:07:9e:01:43:ed:3d:c6:f6: e1:30:6a:65:77:9a:49:95:af:d9:c9:e1:61:1c:77: 47:8e:8d:22:9e:46:85:ca:c6:93:d0:78:6b:28:15: 15:5e:18:0e:6e:fb:c8:56:5a:19:87:02:b7:ca:1a: 8f:8e:25:fe:04:48:d0:fc:d6:68:ee:4c:46:bf:6e: 05:59:e9:5e:70:f1:2f:c8:f8:da:cc:f8:6e:82:e0: 69:e3:df:4e:2b:95:9b:9f:e0:42:60:86:0d:ad:db: b3:de:a6:21:0d:98:25:72:67:36:d8:cc:7a:7b:5e: 48:9e:06:9e:92:60:2c:6b:66:f0:df:91:5d:b1:69: 06:39:95:5b:bd:19:e8:d1:18:c1:b2:e6:2e:29:dc: da:f5:03:03:32:65:a6:35:b3:c9:17:43:9e:2e:d6: ef:d5:b9:aa:a7:2c:32:53:99:3d:5c:23:32:03:f8: 14:21:b5:fc:b5:55:b2:be:28:db:8c:1a:76:07:b6: 4b:0f:14:e9:16:5e:0b:78:d3:6a:f6:5f:4f:25:b8: 84:0b:5f:e2:59:ed:8d:73:95:67:03:ef:e5:bb:02: 61:20:ed:4b:78:fe:71:da:6d:fd:c3:9a:6b:c9:40: 86:f6:af:f4:a5:bd:d4:45:99:94:46:35:6b:e7:91: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.68.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:f1:00:88:18:77:76:5c:bb:7a:28:50:7f:74:16:23:3f:bb: ef:82:f0:f7:59:c7:53:9e:da:b1:93:32:43:34:3b:7c:73:31: 9a:ed:95:3c:5b:9d:b8:d9:82:03:50:6d:19:9f:94:c6:73:0c: 49:e1:ca:71:3f:15:56:90:d2:d8:38:8a:64:ac:4c:4f:29:ce: 58:d0:fa:0f:5a:56:72:1f:e4:9a:4f:1b:ac:d7:48:c9:ac:40: f1:c4:7a:f9:51:53:bf:61:a0:86:ff:f0:7b:02:1f:ad:ed:41: 9c:04:85:7d:bd:42:31:2c:9a:58:b7:25:1e:5a:91:67:9b:e7: 1d:09:c1:3b:00:d7:19:2e:31:f6:4d:18:d3:b5:72:1c:c9:1e: 09:8f:5b:8d:87:e0:ee:1b:15:8e:66:9f:f6:34:64:b7:89:29: 05:a2:fd:30:f3:ce:e5:43:4f:2e:e5:8e:b9:fe:ce:f6:b3:e5: ae:8b:98:d8:70:fc:c8:b8:80:9b:6e:1e:e5:7d:b0:36:33:ef: 13:7e:48:4f:5a:97:53:a8:6b:60:cf:7f:10:8d:0e:31:23:83: 22:fe:6e:2e:86:45:c3:96:6b:08:1b:1f:61:59:4c:06:cc:f1: fe:e1:f9:19:ef:e4:e4:93:92:71:df:29:a1:7c:91:fa:68:98: 6e:8e:72:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcLwDXBXnUXha5RAnm1qiQuthz88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxOTAyMzIzN1oX DTI1MDgxODAyMzczN1owMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1 MTBGMEY2MTI3QUQ3NURCQzQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkVdlVOSQeeAUPtPcb24TBqZXeaSZWv2cnhYRx3R46NIp5GhcrGk9B4aygV FV4YDm77yFZaGYcCt8oaj44l/gRI0PzWaO5MRr9uBVnpXnDxL8j42sz4boLgaePf TiuVm5/gQmCGDa3bs96mIQ2YJXJnNtjMenteSJ4GnpJgLGtm8N+RXbFpBjmVW70Z 6NEYwbLmLinc2vUDAzJlpjWzyRdDni7W79W5qqcsMlOZPVwjMgP4FCG1/LVVsr4o 24wadge2Sw8U6RZeC3jTavZfTyW4hAtf4lntjXOVZwPv5bsCYSDtS3j+cdpt/cOa a8lAhvav9KW91EWZlEY1a+eRZRMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFItKDBD4igtu+eRRDw9hJ61128SSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0Mjgw LTMzYmUtNGViNy04ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzhCNEEwQzEwRjg4QTBCNkVG OUU0NTEwRjBGNjEyN0FENzVEQkM0OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnj0QwDQYJKoZIhvcNAQELBQADggEBAG7xAIgYd3Zcu3ooUH90FiM/u++C8PdZ x1Oe2rGTMkM0O3xzMZrtlTxbnbjZggNQbRmflMZzDEnhynE/FVaQ0tg4imSsTE8p zljQ+g9aVnIf5JpPG6zXSMmsQPHEevlRU79hoIb/8HsCH63tQZwEhX29QjEsmli3 JR5akWeb5x0JwTsA1xkuMfZNGNO1chzJHgmPW42H4O4bFY5mn/Y0ZLeJKQWi/TDz zuVDTy7ljrn+zvaz5a6LmNhw/Mi4gJtuHuV9sDYz7xN+SE9al1Ooa2DPfxCNDjEj gyL+bi6GRcOWawgbH2FZTAbM8f7h+Rnv5OSTknHfKaF8kfpomG6Ocvc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org