$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer (raw, json) Hash identifier: 6XTnoQ2FUYd/grsICm6If8XxP9vbv2iA4DHuXF6+wzc= Subject key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3DC9DF270CC45A73A24A7E8BE84E3F89A2301100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft caRepository: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 26 Aug 2024 14:57:46 +0000 Certificate not after: Mon 25 Aug 2025 15:02:46 +0000 Subordinate resources: IP: 103.153.96.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c9:df:27:0c:c4:5a:73:a2:4a:7e:8b:e8:4e:3f:89:a2:30:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 26 14:57:46 2024 GMT Not After : Aug 25 15:02:46 2025 GMT Subject: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:02:25:16:f2:f7:0a:a3:b8:b7:37:fb:3d: 05:04:76:5a:8a:96:2e:ff:c5:0a:81:ba:96:61:5a: 68:d8:96:9a:92:9a:2a:86:4a:a1:a3:68:37:bd:25: 12:24:74:8a:71:4b:a3:bd:7f:79:d3:b7:c8:ba:33: b9:88:fa:ce:97:2f:c1:f7:36:86:72:21:84:3d:ea: cd:1d:fe:d8:19:bc:5a:a4:03:47:bc:da:f5:81:55: 32:0e:cb:33:62:0e:6e:2e:82:1f:0a:47:71:ce:c5: 98:0c:86:d1:fd:28:43:b0:30:51:05:e2:1d:99:1f: 59:d7:53:f1:92:76:9f:81:3a:2e:78:be:a4:e0:48: 21:05:63:66:c3:ff:c1:06:86:9f:2f:b8:6a:ae:bd: 69:4f:23:12:be:24:14:79:62:db:d6:57:b7:14:f4: f6:92:2e:1e:e5:a4:ab:b6:71:b5:32:f7:97:aa:a3: 07:bb:e2:95:47:64:e1:b1:b8:56:7f:86:45:3f:35: 71:e4:ad:98:48:29:f3:64:53:fe:aa:4c:40:9b:7d: 90:03:15:52:a5:e6:00:7a:c7:f3:92:84:3b:2c:c5: f9:4d:bd:b3:39:41:28:33:0c:7c:08:1c:7a:08:7b: b5:d2:e0:c0:0d:09:e0:b0:88:f7:0b:07:f4:fd:14: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.96.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:67:59:6a:72:b8:c7:00:37:b0:e5:16:ab:25:42:de:c1:dc: 3e:3e:1b:41:1b:44:46:ab:46:b1:24:db:96:63:62:d7:96:84: 98:9d:02:7a:b8:f6:8a:cf:13:af:c3:0c:83:b4:4d:ac:ab:70: e2:34:5c:ad:59:ca:87:d4:bd:ee:d1:08:e8:0f:c7:04:6e:4c: b3:08:ff:e2:fb:02:0b:1e:cf:90:60:6b:3a:f8:d6:dd:3b:4d: 38:8e:50:91:19:a9:f7:95:d9:c7:cd:04:61:bd:3a:9e:e1:ed: dc:55:38:a7:7f:fb:a8:56:0f:8b:29:4a:80:25:95:10:5c:a9: c7:66:33:a2:09:7c:d3:ee:b5:ce:20:89:74:33:56:23:e0:7d: 55:44:77:5f:b5:c1:10:23:1d:70:26:c5:63:b8:eb:78:b0:a9: a4:66:66:b1:2e:86:a9:ea:d6:52:9f:69:74:6c:cb:58:7f:23: 9e:46:db:a7:b2:57:7c:8f:38:ff:dd:2b:a2:69:88:b1:56:cd: 2a:6c:65:1d:04:0d:3c:e3:f9:47:f2:5b:6c:bf:83:ea:d4:b3: 8e:af:f6:4f:31:6e:45:38:42:93:ee:84:14:86:47:e8:a6:91: 81:1c:40:3a:ac:78:d7:10:5a:bb:c2:10:11:87:e8:2a:cf:37: aa:9b:c9:9c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPcnfJwzEWnOiSn6L6E4/iaIwEQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNjE0NTc0NloX DTI1MDgyNTE1MDI0NlowMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYx NzNERjkwMTQxQTlDNkE0Njg2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7dAiUW8vcKo7i3N/s9BQR2WoqWLv/FCoG6lmFaaNiWmpKaKoZKoaNoN70l EiR0inFLo71/edO3yLozuYj6zpcvwfc2hnIhhD3qzR3+2Bm8WqQDR7za9YFVMg7L M2IObi6CHwpHcc7FmAyG0f0oQ7AwUQXiHZkfWddT8ZJ2n4E6Lni+pOBIIQVjZsP/ wQaGny+4aq69aU8jEr4kFHli29ZXtxT09pIuHuWkq7ZxtTL3l6qjB7vilUdk4bG4 Vn+GRT81ceStmEgp82RT/qpMQJt9kAMVUqXmAHrH85KEOyzF+U29szlBKDMMfAgc egh7tdLgwA0J4LCI9wsH9P0UdrECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI2VbPHfVoUMnPYXPfkBQanGpGhoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5NmE3NGRm LWQ5MDctNGFhZi1hODM2LTQzZTRlMTk2ODUyNS8wLzhEOTU2Q0YxREY1Njg1MEM5 Q0Y2MTczREY5MDE0MUE5QzZBNDY4NjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmWAwDQYJKoZIhvcNAQELBQADggEBAH1nWWpyuMcAN7DlFqslQt7B3D4+G0Eb REarRrEk25ZjYteWhJidAnq49orPE6/DDIO0TayrcOI0XK1ZyofUve7RCOgPxwRu TLMI/+L7Agsez5Bgazr41t07TTiOUJEZqfeV2cfNBGG9Op7h7dxVOKd/+6hWD4sp SoAllRBcqcdmM6IJfNPutc4giXQzViPgfVVEd1+1wRAjHXAmxWO463iwqaRmZrEu hqnq1lKfaXRsy1h/I55G26eyV3yPOP/dK6JpiLFWzSpsZR0EDTzj+UfyW2y/g+rU s46v9k8xbkU4QpPuhBSGR+imkYEcQDqseNcQWrvCEBGH6CrPN6qbyZw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org