$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer File: 8E87AB0332210D864175F7A371230D7C6099AE30.cer (raw, json) Hash identifier: HBIJxPxLpyYNlXiDGBVH4z+8x3oza/rV59J/B9h/zD0= Subject key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F85D176E05B95D5B152E20DE2B72551417FE608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft caRepository: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Mar 2024 11:31:55 +0000 Certificate not after: Tue 18 Mar 2025 11:36:55 +0000 Subordinate resources: IP: 103.178.42.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:85:d1:76:e0:5b:95:d5:b1:52:e2:0d:e2:b7:25:51:41:7f:e6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 11:31:55 2024 GMT Not After : Mar 18 11:36:55 2025 GMT Subject: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:af:9c:36:25:04:59:09:01:ab:11:2d:38: ba:29:c8:79:9e:dc:e9:b0:1f:b9:e9:48:bd:58:8e: 26:4d:d1:a3:2c:e0:99:54:19:72:7d:1b:e9:e6:c9: 33:22:d1:19:65:c6:be:72:d2:7d:ca:8d:1d:08:75: 38:0d:66:c7:33:51:d5:b8:ce:d3:43:d0:d8:6e:14: 0f:d8:9a:7e:eb:dc:ff:a2:d7:0a:f5:2c:58:45:2f: 2c:61:03:b0:c0:85:7b:02:b1:8a:42:51:6c:41:62: f1:35:fd:0a:6c:b9:5f:a9:37:aa:e9:b0:15:5e:13: fa:0d:f6:be:ed:d6:30:da:a5:e6:cd:41:3c:7d:f4: 15:e9:d7:77:3d:4e:15:09:a5:2d:08:dd:27:1a:01: 76:49:35:b5:3e:02:9e:40:d6:be:45:6a:96:26:8f: ee:b9:57:66:e0:69:da:51:93:8c:a4:a4:74:d6:af: b5:cb:86:7e:93:e5:04:11:da:ee:ab:47:95:06:85: 0d:85:19:53:63:26:1f:61:e1:ea:5b:35:4a:eb:93: e8:30:53:54:fb:e6:66:b2:fc:9d:32:45:dc:6e:b9: 0f:de:59:b0:21:b6:cc:0a:0f:5b:b4:1e:33:96:eb: df:7e:51:d0:d2:72:68:c0:60:16:2e:9b:b1:0a:1d: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.42.0/23 Signature Algorithm: sha256WithRSAEncryption 11:eb:56:ab:b4:81:bf:19:18:3b:01:a5:65:ba:da:0e:7c:20: e4:a2:68:ce:7a:13:dc:0c:5c:41:b3:18:a9:18:7f:ea:b8:b4: 76:14:ca:e7:c7:38:9d:58:57:15:c3:cc:29:e5:3b:a9:41:d6: b2:5e:62:11:23:78:a5:99:2a:1b:7c:0b:84:0c:e3:6d:1a:23: 89:b5:38:86:1b:27:32:78:7f:60:c2:2e:9a:db:0d:b8:18:f8: 56:04:4a:95:f1:75:d9:37:0f:35:14:2e:0a:90:ab:e0:50:f2: 4f:de:27:80:94:ca:95:d6:6c:a2:9d:07:82:eb:8a:51:70:78: e5:6d:2a:8d:11:5a:b1:42:a8:66:aa:9e:79:77:7a:1f:42:da: 66:6a:f1:68:b6:b9:6f:f9:2c:45:57:8a:b1:e9:26:e8:9f:f3: e3:c3:5f:91:b9:4f:27:67:53:8c:95:de:6c:25:12:20:c6:6f: e4:89:72:39:b4:43:ca:52:5b:9f:42:5c:ff:80:8d:bf:d9:54: 65:3d:58:79:ca:09:ca:d6:4f:f4:df:30:e2:32:a3:76:ab:b6: b0:ed:df:70:9b:e1:db:dd:75:db:1e:cc:64:21:be:c2:28:be: d7:85:cb:d4:f9:2c:03:0a:1f:86:ce:28:fb:79:14:95:ce:46: 9a:eb:17:5e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUf4XRduBbldWxUuIN4rclUUF/5ggwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxOTExMzE1NVoX DTI1MDMxODExMzY1NVowMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVG N0EzNzEyMzBEN0M2MDk5QUUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBer5w2JQRZCQGrES04uinIeZ7c6bAfuelIvViOJk3RoyzgmVQZcn0b6ebJ MyLRGWXGvnLSfcqNHQh1OA1mxzNR1bjO00PQ2G4UD9iafuvc/6LXCvUsWEUvLGED sMCFewKxikJRbEFi8TX9Cmy5X6k3qumwFV4T+g32vu3WMNql5s1BPH30FenXdz1O FQmlLQjdJxoBdkk1tT4CnkDWvkVqliaP7rlXZuBp2lGTjKSkdNavtcuGfpPlBBHa 7qtHlQaFDYUZU2MmH2Hh6ls1SuuT6DBTVPvmZrL8nTJF3G65D95ZsCG2zAoPW7Qe M5br335R0NJyaMBgFi6bsQodNnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI6HqwMyIQ2GQXX3o3EjDXxgma4wMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MDRlNGM3 LTdhMmQtNGQ2Ni04ZmI0LTIwNTU2NTc4N2YyNC8wLzhFODdBQjAzMzIyMTBEODY0 MTc1RjdBMzcxMjMwRDdDNjA5OUFFMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsiowDQYJKoZIhvcNAQELBQADggEBABHrVqu0gb8ZGDsBpWW62g58IOSiaM56 E9wMXEGzGKkYf+q4tHYUyufHOJ1YVxXDzCnlO6lB1rJeYhEjeKWZKht8C4QM420a I4m1OIYbJzJ4f2DCLprbDbgY+FYESpXxddk3DzUULgqQq+BQ8k/eJ4CUypXWbKKd B4LrilFweOVtKo0RWrFCqGaqnnl3eh9C2mZq8Wi2uW/5LEVXirHpJuif8+PDX5G5 TydnU4yV3mwlEiDGb+SJcjm0Q8pSW59CXP+Ajb/ZVGU9WHnKCcrWT/TfMOIyo3ar trDt33Cb4dvdddsezGQhvsIovteFy9T5LAMKH4bOKPt5FJXORprrF14= -----END CERTIFICATE-----Generated at Wed May 8 09:50:33 2024 by rpki-client on console-fra.rpki-client.org