$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer File: B2BCF7264F89246583B384F354CB350DF3B6AADB.cer (raw, json) Hash identifier: pw4J0KSLnjQVyP6iudBQwPjYCXCZhUUpX574egyFGHc= Subject key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6EBA47DEB1ADF1EE9B6AA1025B05599F1EB79446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 22:40:39 +0000 Certificate not after: Sun 28 Jul 2024 22:45:39 +0000 Subordinate resources: IP: 202.47.90.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ba:47:de:b1:ad:f1:ee:9b:6a:a1:02:5b:05:59:9f:1e:b7:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 22:40:39 2023 GMT Not After : Jul 28 22:45:39 2024 GMT Subject: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:22:24:d0:9d:7b:d1:c6:a1:86:0a:f8:1f: 3b:6e:31:3c:4e:85:24:b7:0c:b1:08:ed:92:6d:c7: f7:87:5d:32:bf:3c:e0:ab:6f:42:18:15:fd:3a:2b: a6:7e:f3:54:e6:f2:81:1e:45:71:0f:b0:cb:d9:0b: 2f:9f:3b:c7:86:02:45:91:aa:06:ba:32:f4:72:e9: c3:44:c6:56:39:a0:f6:7b:30:95:77:db:fe:6d:10: 8b:69:ce:5d:30:2b:67:10:37:d1:c1:32:42:6d:cb: c5:ba:64:3f:98:e5:e0:f0:e5:b1:3f:95:69:94:d8: 92:71:51:bd:f8:38:10:c9:ea:29:ac:7b:e6:6b:fd: 8e:f9:02:86:fd:9c:c0:26:2b:9c:4b:22:db:99:f0: 06:81:93:d3:5a:77:78:08:b7:f5:63:fd:7f:44:fb: 72:64:96:59:86:2e:7c:35:4a:d7:3a:1b:fe:1c:3b: da:dd:a1:2e:13:84:ff:8e:4a:69:4a:09:df:44:35: ed:34:b4:75:22:02:48:2d:a0:1e:ed:42:fe:d5:8f: dc:5d:13:4f:05:e8:82:9c:0b:d6:81:54:2a:3c:a6: f1:09:8b:87:5d:ef:ad:f1:1d:ad:5b:53:e0:49:4e: 15:1f:80:78:4c:7d:36:5a:4a:0e:a9:27:d1:a2:85: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.90.0/23 Signature Algorithm: sha256WithRSAEncryption 26:a4:99:83:84:b9:e9:dd:ab:bc:8c:c5:7a:e7:9b:8d:c5:a9: 24:61:c7:2b:f4:75:e2:15:f1:95:52:e2:ea:d8:79:06:8f:7b: 11:e9:47:77:62:5e:0b:b3:aa:16:58:6a:bc:d3:45:8d:13:af: 32:4e:c9:85:6f:61:19:ea:34:fb:3c:fa:28:89:2f:42:45:c9: 9d:71:e6:09:72:eb:b0:fb:fb:de:3b:6c:04:76:f9:8e:5e:2e: 64:49:fa:66:2b:e5:6f:db:d2:56:0e:91:ac:85:85:5d:a2:23: 26:a2:f5:c8:dc:9d:b6:a6:11:c6:f7:82:0f:b0:60:e1:ad:82: af:c0:43:72:e3:a8:47:90:67:73:81:35:c6:70:cd:8e:e4:c8: 1c:65:5a:83:59:72:c3:a8:07:0a:c1:65:84:52:71:5f:99:04: 24:30:fd:04:76:a3:f6:49:88:23:0f:30:12:b0:e7:4b:01:36: e3:b4:2f:79:c1:84:54:71:66:14:45:3b:79:3b:09:9e:5c:39: 7d:f3:6c:72:1f:ca:61:67:f2:da:8f:cf:37:eb:ed:21:a7:6a: 85:4a:3a:63:fa:77:b7:6d:97:06:fe:3e:66:56:5e:62:0c:4a: 58:c7:eb:99:db:54:39:eb:66:ac:d3:33:2e:10:43:73:31:19: 9d:14:e0:0c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbrpH3rGt8e6baqECWwVZnx63lEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIyNDAzOVoX DTI0MDcyODIyNDUzOVowMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4 NEYzNTRDQjM1MERGM0I2QUFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZIiTQnXvRxqGGCvgfO24xPE6FJLcMsQjtkm3H94ddMr884KtvQhgV/Tor pn7zVObygR5FcQ+wy9kLL587x4YCRZGqBroy9HLpw0TGVjmg9nswlXfb/m0Qi2nO XTArZxA30cEyQm3LxbpkP5jl4PDlsT+VaZTYknFRvfg4EMnqKax75mv9jvkChv2c wCYrnEsi25nwBoGT01p3eAi39WP9f0T7cmSWWYYufDVK1zob/hw72t2hLhOE/45K aUoJ30Q17TS0dSICSC2gHu1C/tWP3F0TTwXogpwL1oFUKjym8QmLh13vrfEdrVtT 4ElOFR+AeEx9NlpKDqkn0aKF9mECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLK89yZPiSRlg7OE81TLNQ3ztqrbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyYTBhNzcx LTYyZDItNDIzOC1hNDA2LTc5OTlmMjI0ODQ5Yy8wL0IyQkNGNzI2NEY4OTI0NjU4 M0IzODRGMzU0Q0IzNTBERjNCNkFBREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL1owDQYJKoZIhvcNAQELBQADggEBACakmYOEuendq7yMxXrnm43FqSRhxyv0 deIV8ZVS4urYeQaPexHpR3diXguzqhZYarzTRY0TrzJOyYVvYRnqNPs8+iiJL0JF yZ1x5gly67D7+947bAR2+Y5eLmRJ+mYr5W/b0lYOkayFhV2iIyai9cjcnbamEcb3 gg+wYOGtgq/AQ3LjqEeQZ3OBNcZwzY7kyBxlWoNZcsOoBwrBZYRScV+ZBCQw/QR2 o/ZJiCMPMBKw50sBNuO0L3nBhFRxZhRFO3k7CZ5cOX3zbHIfymFn8tqPzzfr7SGn aoVKOmP6d7dtlwb+PmZWXmIMSljH65nbVDnrZqzTMy4QQ3MxGZ0U4Aw= -----END CERTIFICATE-----Generated at Wed May 8 15:17:46 2024 by rpki-client on console-fra.rpki-client.org