$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.cer (raw, json) Hash identifier: 5z0ZpXIoUthDC7fcW8LywAOuxDVAc0FwzzvZVebTqNk= Subject key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 017DA17F668F59E154B83FF8EC99F341DCA88357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft caRepository: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 05 Jul 2024 01:21:56 +0000 Certificate not after: Fri 04 Jul 2025 01:26:56 +0000 Subordinate resources: IP: 2001:df3:d3c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7d:a1:7f:66:8f:59:e1:54:b8:3f:f8:ec:99:f3:41:dc:a8:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 5 01:21:56 2024 GMT Not After : Jul 4 01:26:56 2025 GMT Subject: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:42:28:09:a0:73:00:19:b1:71:49:c4:cf:ca: 49:e3:ac:45:bb:bf:26:b6:39:f9:41:d8:9a:4b:16: 7b:e2:28:16:89:31:97:78:ad:8c:9a:30:f1:1a:12: 0b:de:fa:07:11:66:cc:8d:19:61:47:4d:87:00:9e: 61:47:58:4f:4b:0f:04:78:ec:dd:5a:32:43:44:0b: aa:71:0d:2f:57:f1:1e:c3:a3:3e:6e:52:0f:00:2d: 51:81:7f:e9:ec:c5:0f:b1:5b:af:0e:f7:7c:51:51: a3:cd:ff:e4:e4:8b:92:0c:2f:e2:9e:4c:a9:7a:ca: 5f:65:ab:7a:d4:c5:4f:d1:5d:75:89:7e:17:8d:fb: 40:cb:a3:01:fe:02:63:29:56:b0:1c:d3:82:31:a7: 21:77:c5:69:75:32:86:f1:0f:20:d7:5a:7d:0d:40: cf:60:e4:98:4d:22:37:36:15:98:25:3f:12:c6:56: 1d:d6:b2:11:cb:ee:3c:5a:2b:9a:2d:40:e5:e1:5e: fe:72:11:e9:5a:74:ee:5b:04:ba:b7:7f:cb:5c:e7: 5f:ff:e5:a2:95:10:2a:eb:55:b9:2d:6c:0d:08:e8: 8e:4f:57:1e:24:57:05:6d:17:33:c9:04:e5:34:f0: e4:1c:6e:96:52:85:ee:e0:78:52:90:e7:c8:88:55: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:2e:44:d9:3f:74:c4:53:77:3a:48:88:42:e6:c4:76:3a:7b: 46:ef:f1:96:4b:a6:2b:47:ec:53:4d:85:46:1f:55:b5:2f:a2: ea:8b:4c:06:ba:63:3b:0b:b2:83:c1:7f:05:14:ea:9e:d3:70: 15:2c:ce:e2:a3:09:1b:bc:cf:3f:1d:1f:d2:a7:77:ea:7a:f5: ba:61:1d:cf:2b:58:85:71:ee:de:c1:54:8c:b5:e2:eb:45:a8: af:a5:ec:a8:80:03:7f:c3:9a:49:c7:3b:d8:57:9a:65:33:7c: c8:92:a0:4a:c8:80:59:82:a3:cd:5a:4a:05:22:5c:c9:a7:82: 16:ac:d5:46:2a:e4:81:fd:c8:05:76:e9:8c:34:3b:7d:29:34: 4b:e6:ac:2b:db:7f:f5:76:e2:0f:08:0d:9d:32:7d:d9:52:21: dc:4e:74:cc:f3:36:fc:cd:6f:a3:b8:8c:04:55:ef:04:c5:8e: fb:2d:bd:68:4b:4f:ce:a3:2e:2f:e6:a9:b5:25:fc:c8:9f:27: c4:5c:67:39:52:a9:0a:f1:99:08:7f:34:10:4d:dd:8d:35:17: 8b:ad:88:df:54:3b:c0:75:a7:08:3f:66:bf:8e:c3:9b:ee:70: fa:1f:50:ee:9e:f8:70:b5:b1:31:5e:0d:d5:98:ef:20:b1:f9: f9:db:a8:a3 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUAX2hf2aPWeFUuD/47JnzQdyog1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwNTAxMjE1NloX DTI1MDcwNDAxMjY1NlowMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZB ODNEREM0MEM5NTlFREEyMTM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORCKAmgcwAZsXFJxM/KSeOsRbu/JrY5+UHYmksWe+IoFokxl3itjJow8RoS C976BxFmzI0ZYUdNhwCeYUdYT0sPBHjs3VoyQ0QLqnENL1fxHsOjPm5SDwAtUYF/ 6ezFD7Fbrw73fFFRo83/5OSLkgwv4p5MqXrKX2WretTFT9FddYl+F437QMujAf4C YylWsBzTgjGnIXfFaXUyhvEPINdafQ1Az2DkmE0iNzYVmCU/EsZWHdayEcvuPFor mi1A5eFe/nIR6Vp07lsEurd/y1znX//lopUQKutVuS1sDQjojk9XHiRXBW0XM8kE 5TTw5BxullKF7uB4UpDnyIhVzlUCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1BWAOahsNNXTaoPdxAyVntohNCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYjVmYTRh LWJlYTYtNDY0Zi1iNDA5LTExZDlhMzc2MWE2Yy8xLzhENDE1ODAzOUE4NkMzNEQ1 RDM2QTgzRERDNDBDOTU5RURBMjEzNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3z08AwDQYJKoZIhvcNAQELBQADggEBADouRNk/dMRTdzpIiELmxHY6e0bv 8ZZLpitH7FNNhUYfVbUvouqLTAa6YzsLsoPBfwUU6p7TcBUszuKjCRu8zz8dH9Kn d+p69bphHc8rWIVx7t7BVIy14utFqK+l7KiAA3/DmknHO9hXmmUzfMiSoErIgFmC o81aSgUiXMmnghas1UYq5IH9yAV26Yw0O30pNEvmrCvbf/V24g8IDZ0yfdlSIdxO dMzzNvzNb6O4jARV7wTFjvstvWhLT86jLi/mqbUl/MifJ8RcZzlSqQrxmQh/NBBN 3Y01F4utiN9UO8B1pwg/Zr+Ow5vucPofUO6e+HC1sTFeDdWY7yCx+fnbqKM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:44 2024 by rpki-client on console-ams.rpki-client.org