$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer (raw, json) Hash identifier: ILN5vEXQ7E+rFAgLiwtUn5SQZRfizIoWx8q/lvUKwnE= Subject key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08E5CF61155B2B19DBE97BBFFC733A0387381A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Jul 2023 14:07:25 +0000 Certificate not after: Wed 17 Jul 2024 14:12:25 +0000 Subordinate resources: IP: 103.159.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e5:cf:61:15:5b:2b:19:db:e9:7b:bf:fc:73:3a:03:87:38:1a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 19 14:07:25 2023 GMT Not After : Jul 17 14:12:25 2024 GMT Subject: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:7d:e6:11:98:3a:06:8a:99:9a:1b:36:21: a9:35:a1:50:ad:1b:5b:26:92:10:eb:36:66:04:d7: 27:39:bc:e3:91:35:ad:c8:2c:09:5e:7a:c8:09:a9: ed:3f:36:2d:2b:01:e0:8d:fb:da:1f:49:62:61:55: a8:f7:ed:5c:30:f3:80:f4:7e:43:3d:01:08:af:8d: 0c:1c:83:a9:55:a2:3f:ae:d6:69:9b:45:2d:02:39: 5d:4d:eb:a9:d6:87:9d:af:90:dd:45:a0:53:68:82: 17:37:d0:34:79:bf:a5:b7:87:e0:87:7b:c4:0e:75: 54:68:01:f0:fe:8a:fd:b2:7a:f8:9f:a3:d0:ff:47: 9b:04:42:f0:c6:8f:31:63:54:ee:6f:52:c4:e1:91: db:e0:a1:ae:62:ae:48:44:da:56:71:cc:d0:dc:a4: fe:e9:0a:c0:06:fe:0b:4a:d1:6d:d0:12:f2:1c:d3: 06:8d:f3:06:6d:65:d9:65:34:45:e1:fd:2b:ce:86: 09:23:d2:16:e9:ed:05:53:77:ea:61:44:a8:24:b7: 1b:97:19:2e:06:4b:b0:32:b4:9a:65:eb:2d:ee:4f: 86:04:dd:ca:f1:2a:3f:e7:0b:7d:15:7d:e6:6a:54: ef:c7:15:f4:74:74:47:3d:4b:74:f4:dc:98:0c:9a: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.202.0/23 Signature Algorithm: sha256WithRSAEncryption 79:a6:54:7e:7b:0d:39:55:3c:4e:dd:0f:4d:17:e5:8c:23:87: 0f:ab:5b:96:eb:d9:b0:c7:f0:c6:d5:1e:31:f5:17:cb:32:68: 73:2e:48:a1:87:50:04:46:7d:73:34:a8:5c:55:6c:93:ad:a1: 77:24:f6:ce:09:b5:06:07:f2:ce:2c:40:0b:b9:c1:b5:c7:53: 9d:b2:7f:bc:4b:e5:09:11:d9:7f:4a:21:e6:1d:b7:37:e5:00: a1:0f:11:5e:d5:73:77:64:3f:80:5f:53:9f:97:56:16:f4:74: ce:dd:c1:21:db:eb:bf:c5:4c:7d:9c:12:ab:80:e1:6e:2b:19: 1d:65:67:56:43:37:ee:14:11:08:24:c9:28:c3:5e:e0:fb:68: e7:c3:3b:a9:47:d2:67:49:9b:ad:08:a3:14:c7:86:59:c4:36: 5f:6c:61:4c:91:fc:d9:44:7a:7d:44:68:e8:18:bc:4b:40:02: 77:ae:6e:61:80:d7:28:31:71:94:76:81:79:17:db:ca:ae:57: 8f:9c:ba:00:bf:b2:8a:b9:d9:7e:86:57:d3:54:cd:cd:fb:36: c7:19:51:f0:1b:76:3d:f1:67:cd:4e:73:37:c4:10:51:30:68: 4c:87:bc:f8:3a:4d:e6:86:1c:5a:84:ed:a3:e7:b8:7f:0e:ba: 32:a8:1a:d4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCOXPYRVbKxnb6Xu//HM6A4c4GmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxOTE0MDcyNVoX DTI0MDcxNzE0MTIyNVowMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBC N0VEMEY4OTBENzBCRkVFNTVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1AfeYRmDoGipmaGzYhqTWhUK0bWyaSEOs2ZgTXJzm845E1rcgsCV56yAmp 7T82LSsB4I372h9JYmFVqPftXDDzgPR+Qz0BCK+NDByDqVWiP67WaZtFLQI5XU3r qdaHna+Q3UWgU2iCFzfQNHm/pbeH4Id7xA51VGgB8P6K/bJ6+J+j0P9HmwRC8MaP MWNU7m9SxOGR2+ChrmKuSETaVnHM0Nyk/ukKwAb+C0rRbdAS8hzTBo3zBm1l2WU0 ReH9K86GCSPSFuntBVN36mFEqCS3G5cZLgZLsDK0mmXrLe5PhgTdyvEqP+cLfRV9 5mpU78cV9HR0Rz1LdPTcmAyarzsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIxXxYYL+Ti7V+C37Q+JDXC/7lWgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyOTEzZmEx LTMzYWUtNGUzMy1iYmUyLTgxYmQ5ZjAzYzg0Yi8wLzhDNTdDNTg2MEJGOTM4QkI1 N0UwQjdFRDBGODkwRDcwQkZFRTU1QTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn8owDQYJKoZIhvcNAQELBQADggEBAHmmVH57DTlVPE7dD00X5Ywjhw+rW5br 2bDH8MbVHjH1F8syaHMuSKGHUARGfXM0qFxVbJOtoXck9s4JtQYH8s4sQAu5wbXH U52yf7xL5QkR2X9KIeYdtzflAKEPEV7Vc3dkP4BfU5+XVhb0dM7dwSHb67/FTH2c EquA4W4rGR1lZ1ZDN+4UEQgkySjDXuD7aOfDO6lH0mdJm60IoxTHhlnENl9sYUyR /NlEen1EaOgYvEtAAneubmGA1ygxcZR2gXkX28quV4+cugC/soq52X6GV9NUzc37 NscZUfAbdj3xZ81OczfEEFEwaEyHvPg6TeaGHFqE7aPnuH8OujKoGtQ= -----END CERTIFICATE-----Generated at Wed May 8 14:59:53 2024 by rpki-client on console-ams.rpki-client.org