$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer File: B2BCF7264F89246583B384F354CB350DF3B6AADB.cer (raw, json) Hash identifier: GfWJuwhhJQZoyY6ixlj3omEnXrEpCLyMDiS54SoaR/Y= Subject key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1887BC9E4930E1A36E0FFB92FA001CD9BE22FAE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 09:00:07 +0000 Certificate not after: Mon 30 Jun 2025 09:05:07 +0000 Subordinate resources: IP: 202.47.90.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:87:bc:9e:49:30:e1:a3:6e:0f:fb:92:fa:00:1c:d9:be:22:fa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 09:00:07 2024 GMT Not After : Jun 30 09:05:07 2025 GMT Subject: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:22:24:d0:9d:7b:d1:c6:a1:86:0a:f8:1f: 3b:6e:31:3c:4e:85:24:b7:0c:b1:08:ed:92:6d:c7: f7:87:5d:32:bf:3c:e0:ab:6f:42:18:15:fd:3a:2b: a6:7e:f3:54:e6:f2:81:1e:45:71:0f:b0:cb:d9:0b: 2f:9f:3b:c7:86:02:45:91:aa:06:ba:32:f4:72:e9: c3:44:c6:56:39:a0:f6:7b:30:95:77:db:fe:6d:10: 8b:69:ce:5d:30:2b:67:10:37:d1:c1:32:42:6d:cb: c5:ba:64:3f:98:e5:e0:f0:e5:b1:3f:95:69:94:d8: 92:71:51:bd:f8:38:10:c9:ea:29:ac:7b:e6:6b:fd: 8e:f9:02:86:fd:9c:c0:26:2b:9c:4b:22:db:99:f0: 06:81:93:d3:5a:77:78:08:b7:f5:63:fd:7f:44:fb: 72:64:96:59:86:2e:7c:35:4a:d7:3a:1b:fe:1c:3b: da:dd:a1:2e:13:84:ff:8e:4a:69:4a:09:df:44:35: ed:34:b4:75:22:02:48:2d:a0:1e:ed:42:fe:d5:8f: dc:5d:13:4f:05:e8:82:9c:0b:d6:81:54:2a:3c:a6: f1:09:8b:87:5d:ef:ad:f1:1d:ad:5b:53:e0:49:4e: 15:1f:80:78:4c:7d:36:5a:4a:0e:a9:27:d1:a2:85: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.90.0/23 Signature Algorithm: sha256WithRSAEncryption 40:dc:1b:14:e0:26:a4:12:e9:da:93:67:8c:da:ea:5b:2f:b3: 2e:c7:6d:ab:06:be:45:1c:35:3a:52:95:bc:b1:e2:00:90:60: f7:2d:bd:19:cc:e1:9a:41:cb:12:96:d7:b0:da:80:0c:d7:aa: 4f:8b:63:33:3c:08:1a:c0:6f:e3:07:31:20:0e:3f:97:20:d3: 7c:2b:10:72:44:dd:3c:78:14:fb:b9:52:4f:9f:0c:d0:2d:4b: 47:7e:cf:fe:a6:5b:34:92:25:a8:73:9b:75:3e:80:e2:eb:73: c7:8a:4d:29:2f:67:a0:3c:98:d3:94:74:cc:c0:ab:24:a6:6d: d6:75:2a:f1:e3:8e:e9:b0:dd:ac:ab:f0:5a:87:b1:ac:76:51: 84:d5:90:4d:36:fa:a3:4c:db:14:5d:ac:2e:b6:63:ab:dc:70: 45:60:7b:ab:cd:9b:bd:cb:d9:db:91:f4:95:c7:f0:10:da:bb: f6:ec:9f:b4:04:35:8d:4a:f7:bc:e6:c8:44:6e:94:df:40:ad: 39:c7:37:c5:32:7a:08:80:7b:64:b6:38:a2:76:8e:30:f2:fb: 83:1e:d0:3e:fd:69:5d:5b:15:95:fc:3f:88:9a:02:bf:10:30: f7:29:c7:8e:dd:5b:9f:85:3d:a1:37:ec:1f:3e:c1:a1:01:b6: 43:17:76:d5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGIe8nkkw4aNuD/uS+gAc2b4i+ukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA5MDAwN1oX DTI1MDYzMDA5MDUwN1owMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4 NEYzNTRDQjM1MERGM0I2QUFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZIiTQnXvRxqGGCvgfO24xPE6FJLcMsQjtkm3H94ddMr884KtvQhgV/Tor pn7zVObygR5FcQ+wy9kLL587x4YCRZGqBroy9HLpw0TGVjmg9nswlXfb/m0Qi2nO XTArZxA30cEyQm3LxbpkP5jl4PDlsT+VaZTYknFRvfg4EMnqKax75mv9jvkChv2c wCYrnEsi25nwBoGT01p3eAi39WP9f0T7cmSWWYYufDVK1zob/hw72t2hLhOE/45K aUoJ30Q17TS0dSICSC2gHu1C/tWP3F0TTwXogpwL1oFUKjym8QmLh13vrfEdrVtT 4ElOFR+AeEx9NlpKDqkn0aKF9mECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLK89yZPiSRlg7OE81TLNQ3ztqrbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyYTBhNzcx LTYyZDItNDIzOC1hNDA2LTc5OTlmMjI0ODQ5Yy8wL0IyQkNGNzI2NEY4OTI0NjU4 M0IzODRGMzU0Q0IzNTBERjNCNkFBREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL1owDQYJKoZIhvcNAQELBQADggEBAEDcGxTgJqQS6dqTZ4za6lsvsy7HbasG vkUcNTpSlbyx4gCQYPctvRnM4ZpByxKW17DagAzXqk+LYzM8CBrAb+MHMSAOP5cg 03wrEHJE3Tx4FPu5Uk+fDNAtS0d+z/6mWzSSJahzm3U+gOLrc8eKTSkvZ6A8mNOU dMzAqySmbdZ1KvHjjumw3ayr8FqHsax2UYTVkE02+qNM2xRdrC62Y6vccEVge6vN m73L2duR9JXH8BDau/bsn7QENY1K97zmyERulN9ArTnHN8UyegiAe2S2OKJ2jjDy +4Me0D79aV1bFZX8P4iaAr8QMPcpx47dW5+FPaE37B8+waEBtkMXdtU= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:31 2024 by rpki-client on console-ams.rpki-client.org