$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer File: 8CFA88063D5C0A51C1D737A5170338865A245358.cer (raw, json) Hash identifier: BOdo1WH8FGbV8Jm4tBofyYykJFtbHoSNizcVDODG6tI= Subject key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75D37D0EE1D11EBEB1EC62A033B23B31CD600321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft caRepository: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 00:55:56 +0000 Certificate not after: Tue 01 Jul 2025 01:00:56 +0000 Subordinate resources: IP: 103.126.200.0/22 IP: 2404:1040::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d3:7d:0e:e1:d1:1e:be:b1:ec:62:a0:33:b2:3b:31:cd:60:03:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 00:55:56 2024 GMT Not After : Jul 1 01:00:56 2025 GMT Subject: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:96:c7:4b:b3:20:d6:72:c7:61:b8:02:65: 54:88:2b:87:98:75:84:12:ad:9f:63:0c:e8:e5:f9: 6e:2a:3f:dc:26:0d:cc:6d:e2:63:98:49:31:2d:d8: 0a:ab:30:4d:b4:b2:cd:76:24:a4:ff:a8:af:79:f3: b7:e1:ea:5f:29:79:76:38:81:03:3c:27:13:d7:67: d0:48:df:79:8e:6d:9a:3e:86:bf:97:2b:30:61:08: 9d:e0:04:2b:c1:4f:fd:85:7d:1e:90:fb:78:f0:e5: c2:d3:52:68:2a:71:e9:0d:55:e5:7f:57:bb:22:a6: 87:1b:1b:eb:85:db:d9:78:41:9a:19:ba:f1:fd:d9: 48:88:17:31:47:94:63:b5:3c:e4:b2:9b:a8:7c:f3: c6:d8:fa:eb:05:96:45:40:5c:6e:95:b9:38:f4:e9: 93:8a:7f:68:ea:fd:00:81:dd:ef:3c:49:b4:75:08: 03:be:fa:b3:da:11:ec:1e:18:93:85:7e:86:d8:9e: 30:19:58:1b:60:4c:55:36:a4:87:e9:a4:96:c9:c8: 1e:a0:13:87:ba:7f:bc:d8:56:33:ed:4f:ef:ac:ff: 6f:25:07:39:29:43:08:19:97:ea:62:b7:e3:b4:9f: e6:93:57:57:73:98:f4:51:05:6d:c3:0b:f8:75:70: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.200.0/22 IPv6: 2404:1040::/32 Signature Algorithm: sha256WithRSAEncryption 13:7e:ea:a0:c9:47:b3:7c:e2:e9:93:d2:8d:5f:12:a1:24:d6: 0c:ed:77:71:a2:43:78:90:2d:74:b1:63:ea:7c:a8:b2:b8:26: ab:98:7a:26:65:b8:ad:47:9f:74:90:bb:f2:14:02:52:0a:0b: 99:7b:54:2a:5e:56:10:52:58:8b:da:05:32:f6:73:72:41:a1: 63:dc:7e:ca:0f:32:59:6d:9a:b0:83:bd:dc:fd:4a:d2:66:ef: fb:28:fb:6b:f2:8b:e2:ac:06:98:d5:3e:ed:14:4e:f2:61:8e: 09:3f:f7:4f:ce:7c:ad:20:ef:eb:cd:b4:44:2d:74:c2:53:48: f5:36:9f:ba:50:6d:7c:50:0d:50:fb:f0:37:3a:b4:14:51:b2: a2:43:35:4d:04:0d:0a:3e:d1:a5:d7:59:77:1f:ca:b2:f9:7d: 21:fe:d2:b2:4d:7d:23:9c:12:45:3c:4c:be:40:f4:f9:c9:68: 52:84:81:53:47:af:85:81:4f:ff:73:5c:c5:97:58:ae:56:3d: 18:60:ad:01:ef:e8:d2:69:aa:08:4e:64:cb:75:9b:df:b1:e3: e4:e1:73:33:d0:92:5b:d0:cf:fc:1f:a1:8f:1d:14:7c:a6:8c: 5f:d8:b9:3c:47:24:a0:82:0a:19:f8:ed:22:5b:be:7c:ba:54: 85:bd:c7:cc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUddN9DuHRHr6x7GKgM7I7Mc1gAyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAwNTU1NloX DTI1MDcwMTAxMDA1NlowMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDcz N0E1MTcwMzM4ODY1QTI0NTM1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3VlsdLsyDWcsdhuAJlVIgrh5h1hBKtn2MM6OX5bio/3CYNzG3iY5hJMS3Y CqswTbSyzXYkpP+or3nzt+HqXyl5djiBAzwnE9dn0EjfeY5tmj6Gv5crMGEIneAE K8FP/YV9HpD7ePDlwtNSaCpx6Q1V5X9XuyKmhxsb64Xb2XhBmhm68f3ZSIgXMUeU Y7U85LKbqHzzxtj66wWWRUBcbpW5OPTpk4p/aOr9AIHd7zxJtHUIA776s9oR7B4Y k4V+htieMBlYG2BMVTakh+mklsnIHqATh7p/vNhWM+1P76z/byUHOSlDCBmX6mK3 47Sf5pNXV3OY9FEFbcML+HVwDJ0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIz6iAY9XApRwdc3pRcDOIZaJFNYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhMmU1YjY5 LWFkYmQtNGUyZC04NDdkLTM3NDgxNTU4MWQ4Ni8wLzhDRkE4ODA2M0Q1QzBBNTFD MUQ3MzdBNTE3MDMzODg2NUEyNDUzNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnfsgwDQQCAAIwBwMFACQEEEAwDQYJKoZIhvcNAQELBQADggEBABN+6qDJR7N8 4umT0o1fEqEk1gztd3GiQ3iQLXSxY+p8qLK4JquYeiZluK1Hn3SQu/IUAlIKC5l7 VCpeVhBSWIvaBTL2c3JBoWPcfsoPMlltmrCDvdz9StJm7/so+2vyi+KsBpjVPu0U TvJhjgk/90/OfK0g7+vNtEQtdMJTSPU2n7pQbXxQDVD78Dc6tBRRsqJDNU0EDQo+ 0aXXWXcfyrL5fSH+0rJNfSOcEkU8TL5A9PnJaFKEgVNHr4WBT/9zXMWXWK5WPRhg rQHv6NJpqghOZMt1m9+x4+ThczPQklvQz/wfoY8dFHymjF/YuTxHJKCCChn47SJb vny6VIW9x8w= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:51 2024 by rpki-client on console-fra.rpki-client.org