$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer (raw, json) Hash identifier: IAlvQF599dqXveVD9t86NOP9ZOyi/pZe6ntWhQgFs3E= Subject key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 332860C791731380807AD7292339E92C03FA2BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft caRepository: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Sep 2023 13:27:04 +0000 Certificate not after: Mon 23 Sep 2024 13:32:04 +0000 Subordinate resources: IP: 103.153.96.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:28:60:c7:91:73:13:80:80:7a:d7:29:23:39:e9:2c:03:fa:2b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 25 13:27:04 2023 GMT Not After : Sep 23 13:32:04 2024 GMT Subject: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:02:25:16:f2:f7:0a:a3:b8:b7:37:fb:3d: 05:04:76:5a:8a:96:2e:ff:c5:0a:81:ba:96:61:5a: 68:d8:96:9a:92:9a:2a:86:4a:a1:a3:68:37:bd:25: 12:24:74:8a:71:4b:a3:bd:7f:79:d3:b7:c8:ba:33: b9:88:fa:ce:97:2f:c1:f7:36:86:72:21:84:3d:ea: cd:1d:fe:d8:19:bc:5a:a4:03:47:bc:da:f5:81:55: 32:0e:cb:33:62:0e:6e:2e:82:1f:0a:47:71:ce:c5: 98:0c:86:d1:fd:28:43:b0:30:51:05:e2:1d:99:1f: 59:d7:53:f1:92:76:9f:81:3a:2e:78:be:a4:e0:48: 21:05:63:66:c3:ff:c1:06:86:9f:2f:b8:6a:ae:bd: 69:4f:23:12:be:24:14:79:62:db:d6:57:b7:14:f4: f6:92:2e:1e:e5:a4:ab:b6:71:b5:32:f7:97:aa:a3: 07:bb:e2:95:47:64:e1:b1:b8:56:7f:86:45:3f:35: 71:e4:ad:98:48:29:f3:64:53:fe:aa:4c:40:9b:7d: 90:03:15:52:a5:e6:00:7a:c7:f3:92:84:3b:2c:c5: f9:4d:bd:b3:39:41:28:33:0c:7c:08:1c:7a:08:7b: b5:d2:e0:c0:0d:09:e0:b0:88:f7:0b:07:f4:fd:14: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.96.0/23 Signature Algorithm: sha256WithRSAEncryption 79:db:28:12:51:7a:a4:c7:0a:36:90:8c:9e:0b:ca:13:e8:47: 7c:64:03:30:56:51:d1:7b:c5:d5:fe:81:ce:1f:88:18:4a:ad: 41:17:30:ee:c5:0c:8e:16:ea:3e:67:e1:aa:f9:3c:5a:e2:db: cb:30:64:f5:64:d8:0c:a6:54:69:ad:50:c7:24:40:10:6e:cf: bd:77:9d:2a:f6:bb:9e:01:e0:f0:7d:aa:be:c2:5b:eb:e1:d5: f9:f2:bc:2d:e9:ec:55:65:75:9a:19:c3:be:68:57:02:5e:56: a6:22:33:76:24:67:63:3b:38:a4:91:7c:94:f3:a0:1e:a1:67: 97:da:ff:4a:6f:66:5a:b8:66:49:40:dd:96:16:26:9e:47:49: ef:2a:8a:73:0e:d2:df:93:84:9e:ef:99:bd:37:e0:8f:43:86: 9a:ad:0b:f0:53:28:16:66:aa:2f:7e:79:ba:ff:c5:18:7c:d3: a1:72:8b:d7:f5:4b:fc:28:f8:6c:d5:8f:41:9a:e5:3f:29:f3: 42:1f:44:e9:db:5d:8d:eb:7f:05:25:f8:74:69:e1:18:0d:33: ae:f1:9f:02:31:c5:aa:fb:70:f8:24:c1:ad:c8:45:5f:e4:e7: 05:bf:a9:8e:79:e7:ed:71:6a:04:ca:77:10:2c:3a:35:66:49: dc:b9:67:1c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMyhgx5FzE4CAetcpIznpLAP6K9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNTEzMjcwNFoX DTI0MDkyMzEzMzIwNFowMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYx NzNERjkwMTQxQTlDNkE0Njg2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7dAiUW8vcKo7i3N/s9BQR2WoqWLv/FCoG6lmFaaNiWmpKaKoZKoaNoN70l EiR0inFLo71/edO3yLozuYj6zpcvwfc2hnIhhD3qzR3+2Bm8WqQDR7za9YFVMg7L M2IObi6CHwpHcc7FmAyG0f0oQ7AwUQXiHZkfWddT8ZJ2n4E6Lni+pOBIIQVjZsP/ wQaGny+4aq69aU8jEr4kFHli29ZXtxT09pIuHuWkq7ZxtTL3l6qjB7vilUdk4bG4 Vn+GRT81ceStmEgp82RT/qpMQJt9kAMVUqXmAHrH85KEOyzF+U29szlBKDMMfAgc egh7tdLgwA0J4LCI9wsH9P0UdrECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI2VbPHfVoUMnPYXPfkBQanGpGhoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5NmE3NGRm LWQ5MDctNGFhZi1hODM2LTQzZTRlMTk2ODUyNS8wLzhEOTU2Q0YxREY1Njg1MEM5 Q0Y2MTczREY5MDE0MUE5QzZBNDY4NjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmWAwDQYJKoZIhvcNAQELBQADggEBAHnbKBJReqTHCjaQjJ4LyhPoR3xkAzBW UdF7xdX+gc4fiBhKrUEXMO7FDI4W6j5n4ar5PFri28swZPVk2AymVGmtUMckQBBu z713nSr2u54B4PB9qr7CW+vh1fnyvC3p7FVldZoZw75oVwJeVqYiM3YkZ2M7OKSR fJTzoB6hZ5fa/0pvZlq4ZklA3ZYWJp5HSe8qinMO0t+ThJ7vmb034I9DhpqtC/BT KBZmqi9+ebr/xRh806Fyi9f1S/wo+GzVj0Ga5T8p80IfROnbXY3rfwUl+HRp4RgN M67xnwIxxar7cPgkwa3IRV/k5wW/qY555+1xagTKdxAsOjVmSdy5Zxw= -----END CERTIFICATE-----Generated at Wed May 8 21:02:18 2024 by rpki-client on console-fra.rpki-client.org