$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer (raw, json) Hash identifier: g9CceIjgbOQb+hTBjNjKZXk+/9hFqDicCATl/ekr31A= Subject key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4DB79C1F7161A0B1041E637DBEC62CFF3661E411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft caRepository: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 16:16:46 +0000 Certificate not after: Mon 30 Jun 2025 16:21:46 +0000 Subordinate resources: IP: 103.146.62.0/23 IP: 2001:df2:4b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b7:9c:1f:71:61:a0:b1:04:1e:63:7d:be:c6:2c:ff:36:61:e4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 16:16:46 2024 GMT Not After : Jun 30 16:21:46 2025 GMT Subject: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:af:58:e6:54:b8:ec:0f:14:79:d4:10:90: 0f:40:3f:94:3a:e2:b0:5f:fa:f7:b2:86:7c:e2:68: f2:d8:8b:23:93:dc:0c:9c:43:51:ed:ad:c5:89:0d: cf:af:fe:82:be:e1:78:27:fb:33:9e:cf:22:ed:2c: d3:3d:1b:71:70:4a:e7:e9:b0:91:e6:02:a6:63:a0: d9:8b:af:2b:4d:aa:02:da:cf:ed:55:6a:06:8b:34: a0:93:0c:7c:e1:57:3f:8e:78:3a:62:2c:d6:8e:46: af:16:c0:e9:35:5d:d6:0b:83:ea:91:4d:47:7b:e0: b0:3f:aa:cd:04:22:3a:59:42:fa:e8:55:96:ee:18: 88:c1:cc:69:95:f8:da:4a:29:db:1c:7f:4d:98:f7: 8b:57:81:3c:86:c3:98:c5:df:6c:f6:ea:df:1e:e6: 6c:dc:66:d9:0f:67:e0:4f:d5:81:47:b0:33:3a:bb: fa:79:09:2b:6a:a9:1a:24:77:64:d9:d3:63:3a:12: c6:69:f9:d9:5b:d2:93:e9:85:fd:81:85:7c:53:99: 86:65:54:f3:2d:80:c2:00:9a:f0:48:d2:96:9a:82: f4:08:6a:60:9b:06:7e:09:4b:09:71:5e:00:40:52: 35:76:24:cd:5b:b5:eb:35:99:58:aa:41:28:b2:b0: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.62.0/23 IPv6: 2001:df2:4b80::/48 Signature Algorithm: sha256WithRSAEncryption 8c:9d:9a:fa:42:61:0d:de:ba:8a:ad:5f:dc:79:72:fc:31:be: 87:00:8c:7a:ed:26:3c:91:43:b0:4c:f9:9c:09:4d:56:1d:64: fc:16:77:12:13:0a:b8:7b:37:1a:00:f2:d4:8f:a1:e1:0f:9f: 11:2a:62:30:de:d7:5a:02:99:70:10:26:c5:49:4b:7d:16:a1: 1e:91:41:76:24:22:08:d9:60:b8:2a:20:40:ad:5d:ce:a1:3f: df:73:dd:ab:a2:15:b3:1f:15:85:70:b6:24:5a:59:a3:30:3e: 4b:24:46:f6:eb:78:29:a1:66:47:bf:e4:ab:3a:09:a0:2a:fb: ed:5c:08:a8:72:98:bc:f6:00:83:42:45:9d:ee:2f:cf:8a:ef: 03:b2:b8:6d:23:12:cb:db:19:4d:43:de:c5:81:65:49:f1:f9: ee:18:b7:6e:ac:f2:28:04:93:06:c3:1b:e4:7f:a0:3a:9b:75: 1a:54:0f:b7:8b:71:31:06:46:7a:f4:7c:e5:22:3c:f1:ce:fd: ae:55:87:be:56:3e:d5:93:5b:75:ad:ef:4c:be:ce:de:4e:54: 01:cb:04:99:e7:a0:ff:30:81:66:1c:5f:b6:8d:a8:f7:0f:74: 52:c3:c2:99:ff:f8:05:74:16:7d:b8:f3:04:23:ac:15:a2:57: 79:c1:bd:5d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTbecH3FhoLEEHmN9vsYs/zZh5BEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MTY0NloX DTI1MDYzMDE2MjE0NlowMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFB MkIzMUZBREM4Q0RGRkM5Q0MxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHEr1jmVLjsDxR51BCQD0A/lDrisF/697KGfOJo8tiLI5PcDJxDUe2txYkN z6/+gr7heCf7M57PIu0s0z0bcXBK5+mwkeYCpmOg2YuvK02qAtrP7VVqBos0oJMM fOFXP454OmIs1o5GrxbA6TVd1guD6pFNR3vgsD+qzQQiOllC+uhVlu4YiMHMaZX4 2kop2xx/TZj3i1eBPIbDmMXfbPbq3x7mbNxm2Q9n4E/VgUewMzq7+nkJK2qpGiR3 ZNnTYzoSxmn52VvSk+mF/YGFfFOZhmVU8y2AwgCa8EjSlpqC9AhqYJsGfglLCXFe AEBSNXYkzVu16zWZWKpBKLKwOb0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLiTmLpgPEO99xGisx+tyM3/ycwWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYTc5MzQw LTRkYjItNDU4ZC05NWRkLWFmMjBiNGZjZGIzZC8wL0I4OTM5OEJBNjAzQzQzQkRG NzExQTJCMzFGQURDOENERkZDOUNDMTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkj4wDwQCAAIwCQMHACABDfJLgDANBgkqhkiG9w0BAQsFAAOCAQEAjJ2a+kJh Dd66iq1f3Hly/DG+hwCMeu0mPJFDsEz5nAlNVh1k/BZ3EhMKuHs3GgDy1I+h4Q+f ESpiMN7XWgKZcBAmxUlLfRahHpFBdiQiCNlguCogQK1dzqE/33Pdq6IVsx8VhXC2 JFpZozA+SyRG9ut4KaFmR7/kqzoJoCr77VwIqHKYvPYAg0JFne4vz4rvA7K4bSMS y9sZTUPexYFlSfH57hi3bqzyKASTBsMb5H+gOpt1GlQPt4txMQZGevR85SI88c79 rlWHvlY+1ZNbda3vTL7O3k5UAcsEmeeg/zCBZhxfto2o9w90UsPCmf/4BXQWfbjz BCOsFaJXecG9XQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:59 2024 by rpki-client on console-fra.rpki-client.org