$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.cer (raw, json) Hash identifier: LPKGX325ipZQMGn0saJqL76ovV/g7npxnAAh6v/VZSU= Subject key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62DAD9732FE957B6A2EEA3AFBDCF977217275990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft caRepository: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 01:50:47 +0000 Certificate not after: Tue 01 Jul 2025 01:55:47 +0000 Subordinate resources: IP: 103.95.160.0/23 IP: 2001:df1:b100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:da:d9:73:2f:e9:57:b6:a2:ee:a3:af:bd:cf:97:72:17:27:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 01:50:47 2024 GMT Not After : Jul 1 01:55:47 2025 GMT Subject: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:e8:f7:b2:fb:05:d8:9c:1e:59:b8:c9:e0: 16:3a:a1:12:83:f5:7c:f8:0f:32:c3:90:68:d8:d8: c1:6f:9f:5a:18:51:01:c2:7b:e2:56:dd:e9:60:28: f8:b6:8d:08:55:a3:a2:d7:55:56:6d:9a:e9:f6:d0: 98:1d:b2:fb:0b:0d:2f:b6:93:f5:e5:8d:ac:49:86: 31:ab:85:5d:0c:5c:81:0f:b6:1c:08:f3:f7:8a:39: 93:a9:54:43:d8:38:b7:79:bc:27:e3:f5:87:33:0c: 55:76:0f:2e:d0:fe:0e:15:05:1e:db:4c:d3:17:62: 43:e6:3f:51:5e:dc:5a:7e:96:58:89:43:78:ed:7e: 99:df:77:10:12:f5:a2:01:12:65:6f:a0:f2:7e:98: b1:c0:6f:b7:67:75:c9:29:ea:a5:aa:44:d0:c3:7b: 6b:da:08:7b:cd:08:53:c6:19:b7:a8:6b:52:b3:8c: 01:67:f0:a5:10:1f:b1:f1:bd:7f:84:2f:64:6c:6a: 68:d9:1f:a8:85:d1:bb:13:1b:8b:7f:a4:df:17:bb: cb:d0:4f:bd:66:8e:a3:ba:1f:38:5a:39:34:d7:23: 10:24:84:cc:0b:83:2d:e4:c7:4a:89:de:f8:e3:21: cf:7c:56:fe:e9:f6:cc:81:aa:21:3b:1b:f5:f6:b8: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.160.0/23 IPv6: 2001:df1:b100::/48 Signature Algorithm: sha256WithRSAEncryption 47:e1:11:b0:f3:e3:db:e5:db:00:76:68:ef:82:7b:23:b5:46: 79:fd:ff:09:74:0e:36:d5:e4:f5:90:a0:9a:d0:5a:7f:20:3a: bf:32:5a:4a:df:76:69:fc:dc:e9:08:f1:69:09:6b:62:2e:d0: 55:bb:51:ba:b1:e9:90:66:b8:f7:aa:b6:d6:05:13:ac:e0:00: 85:fb:31:34:43:fd:65:b5:d0:b9:be:a3:0d:07:d5:03:ef:32: 16:c2:02:2a:e6:45:f7:d2:e1:cd:d2:a0:cc:9b:e2:08:11:f2: aa:3c:76:1c:63:ab:f6:ab:4d:2c:35:33:38:fd:85:ae:b2:3d: 7e:76:b1:ad:84:07:c5:4c:87:0a:5e:6e:ae:8e:9a:1b:b2:ba: c8:e3:3b:3d:9d:fb:9d:e2:d3:13:8f:b5:ae:29:a5:d6:fa:5d: 14:e4:09:bc:fb:d1:5d:4d:92:24:5c:8d:c4:ad:fc:4c:fa:b6: 9e:91:9a:37:22:e8:c7:0b:eb:aa:c2:74:90:f4:b3:17:5c:9b: 30:7b:f6:6b:cb:29:22:85:61:db:71:04:d1:7d:9d:8e:e8:04: d7:eb:bf:d7:26:c5:39:d2:34:40:5c:48:43:6f:53:46:e8:b6: 2a:37:ab:90:60:6f:84:16:b4:a3:39:2e:07:e2:7e:be:f5:5e: 71:85:b2:0f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUYtrZcy/pV7ai7qOvvc+XchcnWZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAxNTA0N1oX DTI1MDcwMTAxNTU0N1owMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEy RUE3MEZFMDEyQTRBRjEzNEM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUE6Pey+wXYnB5ZuMngFjqhEoP1fPgPMsOQaNjYwW+fWhhRAcJ74lbd6WAo +LaNCFWjotdVVm2a6fbQmB2y+wsNL7aT9eWNrEmGMauFXQxcgQ+2HAjz94o5k6lU Q9g4t3m8J+P1hzMMVXYPLtD+DhUFHttM0xdiQ+Y/UV7cWn6WWIlDeO1+md93EBL1 ogESZW+g8n6YscBvt2d1ySnqpapE0MN7a9oIe80IU8YZt6hrUrOMAWfwpRAfsfG9 f4QvZGxqaNkfqIXRuxMbi3+k3xe7y9BPvWaOo7ofOFo5NNcjECSEzAuDLeTHSone +OMhz3xW/un2zIGqITsb9fa4sAcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI7uBYSyJKlZFVEupw/gEqSvE0x6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzVkMzcx LTE4YzctNDhkZi04ZjYxLTFkNDA0YjY0NjQxMy8wLzhFRUUwNTg0QjIyNEE5NTkx NTUxMkVBNzBGRTAxMkE0QUYxMzRDN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnX6AwDwQCAAIwCQMHACABDfGxADANBgkqhkiG9w0BAQsFAAOCAQEAR+ERsPPj 2+XbAHZo74J7I7VGef3/CXQONtXk9ZCgmtBafyA6vzJaSt92afzc6QjxaQlrYi7Q VbtRurHpkGa496q21gUTrOAAhfsxNEP9ZbXQub6jDQfVA+8yFsICKuZF99LhzdKg zJviCBHyqjx2HGOr9qtNLDUzOP2FrrI9fnaxrYQHxUyHCl5uro6aG7K6yOM7PZ37 neLTE4+1riml1vpdFOQJvPvRXU2SJFyNxK38TPq2npGaNyLoxwvrqsJ0kPSzF1yb MHv2a8spIoVh23EE0X2djugE1+u/1ybFOdI0QFxIQ29TRui2KjerkGBvhBa0ozku B+J+vvVecYWyDw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org