$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer (raw, json) Hash identifier: abo30ZXV6LaLo//LtQ9HN6JVvsmdAsry2Ac3GOlrQak= Subject key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6761DF400C7938F379C8F4F4E606043C1153C440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft caRepository: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 May 2024 07:48:58 +0000 Certificate not after: Fri 23 May 2025 07:53:58 +0000 Subordinate resources: IP: 103.188.119.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:61:df:40:0c:79:38:f3:79:c8:f4:f4:e6:06:04:3c:11:53:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 24 07:48:58 2024 GMT Not After : May 23 07:53:58 2025 GMT Subject: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:c2:3a:0a:d1:5d:6b:80:4b:73:c2:d7:e9: d5:27:ea:35:0a:20:57:57:bc:02:f2:f9:09:34:a3: 41:9f:00:91:0f:0f:c6:7b:a8:f5:eb:77:d4:6e:53: de:a3:e1:c6:d6:7d:23:83:f2:a5:1e:bb:20:f7:3b: 37:46:b8:96:0e:1f:d8:03:d0:0b:39:58:4a:bf:7e: bd:ef:27:76:dd:14:ef:77:1a:07:71:b6:ba:1c:d8: ff:0f:07:15:8b:40:78:88:01:71:be:08:24:2e:45: f7:f0:3c:ee:d5:f3:52:e0:10:11:2f:28:4b:ad:0f: d7:0d:22:0c:eb:66:00:49:fe:7a:e0:7e:7e:8f:d4: 9c:ec:bb:7c:61:1c:cb:4a:92:f0:a7:1f:4e:0f:ed: ed:f9:a4:21:ba:34:28:ff:1f:4f:e8:ac:2a:f3:bf: bc:0f:83:67:b5:26:94:c0:16:a4:a1:e4:f2:0d:dc: c4:da:b4:3a:32:5c:4f:ac:1d:94:c3:47:48:4d:3d: 08:33:d1:7b:39:ed:3f:c1:91:76:54:04:8c:a6:df: 7c:b4:f1:66:2e:01:1e:6a:67:3c:e8:b9:b4:f7:b3: 07:de:ee:76:6e:b6:3b:fd:8f:c8:d9:a1:36:6c:ca: 78:a0:42:26:cb:f2:08:63:25:85:85:ee:41:a3:82: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.119.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1f:79:b3:40:32:ae:cb:a5:f9:08:84:d5:f1:18:5f:29:83: 05:ee:5e:ce:df:81:6e:22:1b:79:f7:89:a3:8a:dd:ee:29:97: d2:75:64:ff:c3:9d:f2:c7:ca:45:27:6b:48:a0:30:fd:37:fc: 3c:a5:56:f3:05:5d:70:cb:58:6a:c1:3e:0c:a5:12:f8:f0:ab: 94:ae:c1:52:4e:e7:e7:b7:f5:97:41:cc:d9:93:ce:9f:bf:3c: c2:3e:d4:e1:71:5e:59:52:d2:46:34:c5:99:82:80:75:ef:1c: 7c:f2:bb:05:f6:53:f7:46:20:1d:db:af:58:0a:75:9a:91:da: 4c:31:7f:80:71:87:bc:30:f3:b1:5e:df:36:8e:0f:0c:ff:26: c1:b8:d5:ea:51:86:c2:3b:56:55:ad:b4:09:3e:4e:69:fb:8e: 91:fb:1d:77:8a:9b:e2:3b:f0:f7:12:e0:a1:11:1f:25:74:d2: 4d:79:89:62:d7:8f:53:a3:6f:51:f1:8d:b9:09:fe:7c:36:bd: 60:ec:62:62:5f:50:4b:0f:e9:21:7a:8c:06:46:0e:80:16:0a: 6b:25:2a:00:eb:45:24:1e:9a:6a:78:05:b1:51:8e:41:61:59: 14:88:b2:e3:6e:d0:d3:7d:f0:bc:8e:6a:0c:e3:51:f9:67:99: 0b:7a:fb:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ2HfQAx5OPN5yPT05gYEPBFTxEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNDA3NDg1OFoX DTI1MDUyMzA3NTM1OFowMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhB OEIzNzFGMzQyRUJBMzU0MENEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqRwjoK0V1rgEtzwtfp1SfqNQogV1e8AvL5CTSjQZ8AkQ8Pxnuo9et31G5T 3qPhxtZ9I4PypR67IPc7N0a4lg4f2APQCzlYSr9+ve8ndt0U73caB3G2uhzY/w8H FYtAeIgBcb4IJC5F9/A87tXzUuAQES8oS60P1w0iDOtmAEn+euB+fo/UnOy7fGEc y0qS8KcfTg/t7fmkIbo0KP8fT+isKvO/vA+DZ7UmlMAWpKHk8g3cxNq0OjJcT6wd lMNHSE09CDPRezntP8GRdlQEjKbffLTxZi4BHmpnPOi5tPezB97udm62O/2PyNmh NmzKeKBCJsvyCGMlhYXuQaOCCysCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI+RZHFKGzuQbPios3HzQuujVAzZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NzU4ZThl LTQ5YzgtNDhiOC1iZGNiLTM1MzM5ZTJhZTYwMS8wLzhGOTE2NDcxNEExQjNCOTA2 Q0Y4QThCMzcxRjM0MkVCQTM1NDBDRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvHcwDQYJKoZIhvcNAQELBQADggEBADQfebNAMq7LpfkIhNXxGF8pgwXuXs7f gW4iG3n3iaOK3e4pl9J1ZP/DnfLHykUna0igMP03/DylVvMFXXDLWGrBPgylEvjw q5SuwVJO5+e39ZdBzNmTzp+/PMI+1OFxXllS0kY0xZmCgHXvHHzyuwX2U/dGIB3b r1gKdZqR2kwxf4Bxh7ww87Fe3zaODwz/JsG41epRhsI7VlWttAk+Tmn7jpH7HXeK m+I78PcS4KERHyV00k15iWLXj1Ojb1HxjbkJ/nw2vWDsYmJfUEsP6SF6jAZGDoAW CmslKgDrRSQemmp4BbFRjkFhWRSIsuNu0NN98LyOagzjUflnmQt6+8w= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org