$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer (raw, json) Hash identifier: PxHTYbOsIZztzaIp5dcvDBxI4eVIbDTMvWMvbuqj6E4= Subject key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 60621611178F63ACE1DEEA58FB28A258C59F740B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft caRepository: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jun 2023 05:58:45 +0000 Certificate not after: Fri 21 Jun 2024 06:03:45 +0000 Subordinate resources: IP: 103.188.119.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:62:16:11:17:8f:63:ac:e1:de:ea:58:fb:28:a2:58:c5:9f:74:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 05:58:45 2023 GMT Not After : Jun 21 06:03:45 2024 GMT Subject: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:c2:3a:0a:d1:5d:6b:80:4b:73:c2:d7:e9: d5:27:ea:35:0a:20:57:57:bc:02:f2:f9:09:34:a3: 41:9f:00:91:0f:0f:c6:7b:a8:f5:eb:77:d4:6e:53: de:a3:e1:c6:d6:7d:23:83:f2:a5:1e:bb:20:f7:3b: 37:46:b8:96:0e:1f:d8:03:d0:0b:39:58:4a:bf:7e: bd:ef:27:76:dd:14:ef:77:1a:07:71:b6:ba:1c:d8: ff:0f:07:15:8b:40:78:88:01:71:be:08:24:2e:45: f7:f0:3c:ee:d5:f3:52:e0:10:11:2f:28:4b:ad:0f: d7:0d:22:0c:eb:66:00:49:fe:7a:e0:7e:7e:8f:d4: 9c:ec:bb:7c:61:1c:cb:4a:92:f0:a7:1f:4e:0f:ed: ed:f9:a4:21:ba:34:28:ff:1f:4f:e8:ac:2a:f3:bf: bc:0f:83:67:b5:26:94:c0:16:a4:a1:e4:f2:0d:dc: c4:da:b4:3a:32:5c:4f:ac:1d:94:c3:47:48:4d:3d: 08:33:d1:7b:39:ed:3f:c1:91:76:54:04:8c:a6:df: 7c:b4:f1:66:2e:01:1e:6a:67:3c:e8:b9:b4:f7:b3: 07:de:ee:76:6e:b6:3b:fd:8f:c8:d9:a1:36:6c:ca: 78:a0:42:26:cb:f2:08:63:25:85:85:ee:41:a3:82: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.119.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ed:fc:26:7b:80:26:58:60:9a:a0:25:61:7f:92:38:f7:fe: 8b:33:d1:38:3a:bf:cd:cd:ea:54:db:f1:4f:ca:50:6d:97:55: 68:d8:26:9c:1f:ff:d0:4d:e8:fe:2a:bf:b8:d6:b1:ee:e2:7c: 7a:16:f6:8f:06:30:46:42:1e:2a:af:c8:a9:20:07:da:b3:c4: ed:97:c7:a6:aa:a2:f0:e3:d8:5a:e9:4f:a3:68:7c:92:d7:40: 55:a9:5c:e9:9f:3e:7a:9c:69:5b:dd:5a:7b:a5:a3:46:fd:ce: 43:f0:53:a7:ee:55:4e:64:02:79:a7:15:53:b6:42:f8:18:61: 86:5d:c3:09:d2:f6:79:58:f9:db:1f:6c:21:48:19:fc:79:a7: e5:bc:4e:fb:af:1f:a6:79:6b:93:48:b8:2b:9a:ce:dc:ac:ee: 13:41:42:1c:f0:27:d4:a9:c5:cf:fb:1a:c8:ad:9c:26:fe:f5: 76:84:00:7a:c6:fe:2b:05:40:16:93:35:dd:8b:20:80:a3:ee: 22:9e:06:cd:15:b0:6a:fb:93:f9:f4:95:a8:0e:29:f9:2d:e6: fb:29:58:6f:53:36:c4:89:e9:4a:87:a0:22:32:14:43:8b:7d: b8:76:2d:68:93:db:6d:05:e2:04:74:20:f1:02:28:fb:d2:93: 64:90:8e:b3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYGIWERePY6zh3upY+yiiWMWfdAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMzA1NTg0NVoX DTI0MDYyMTA2MDM0NVowMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhB OEIzNzFGMzQyRUJBMzU0MENEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqRwjoK0V1rgEtzwtfp1SfqNQogV1e8AvL5CTSjQZ8AkQ8Pxnuo9et31G5T 3qPhxtZ9I4PypR67IPc7N0a4lg4f2APQCzlYSr9+ve8ndt0U73caB3G2uhzY/w8H FYtAeIgBcb4IJC5F9/A87tXzUuAQES8oS60P1w0iDOtmAEn+euB+fo/UnOy7fGEc y0qS8KcfTg/t7fmkIbo0KP8fT+isKvO/vA+DZ7UmlMAWpKHk8g3cxNq0OjJcT6wd lMNHSE09CDPRezntP8GRdlQEjKbffLTxZi4BHmpnPOi5tPezB97udm62O/2PyNmh NmzKeKBCJsvyCGMlhYXuQaOCCysCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI+RZHFKGzuQbPios3HzQuujVAzZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NzU4ZThl LTQ5YzgtNDhiOC1iZGNiLTM1MzM5ZTJhZTYwMS8wLzhGOTE2NDcxNEExQjNCOTA2 Q0Y4QThCMzcxRjM0MkVCQTM1NDBDRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvHcwDQYJKoZIhvcNAQELBQADggEBAIXt/CZ7gCZYYJqgJWF/kjj3/osz0Tg6 v83N6lTb8U/KUG2XVWjYJpwf/9BN6P4qv7jWse7ifHoW9o8GMEZCHiqvyKkgB9qz xO2Xx6aqovDj2FrpT6NofJLXQFWpXOmfPnqcaVvdWnulo0b9zkPwU6fuVU5kAnmn FVO2QvgYYYZdwwnS9nlY+dsfbCFIGfx5p+W8TvuvH6Z5a5NIuCuaztys7hNBQhzw J9Spxc/7GsitnCb+9XaEAHrG/isFQBaTNd2LIICj7iKeBs0VsGr7k/n0lagOKfkt 5vspWG9TNsSJ6UqHoCIyFEOLfbh2LWiT220F4gR0IPECKPvSk2SQjrM= -----END CERTIFICATE-----Generated at Wed May 8 17:45:20 2024 by rpki-client on console-ams.rpki-client.org