$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer (raw, json) Hash identifier: Z8ZepCyjb9x86E3lxboUlmVqcqxEy1BIe4MW/8S6Y6I= Subject key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57928AEBF2553CC495B6BC06D957F900D67B98CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft caRepository: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Feb 2024 06:26:53 +0000 Certificate not after: Fri 07 Feb 2025 06:31:53 +0000 Subordinate resources: IP: 117.54.0.0/16 IP: 180.233.152.0/21 IP: 202.53.224.0/19 IP: 202.153.224.0/19 IP: 202.159.0.0/18 IP: 202.159.96.0/19 IP: 2402:ac00::/32 IP: 2404:170::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:92:8a:eb:f2:55:3c:c4:95:b6:bc:06:d9:57:f9:00:d6:7b:98:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 9 06:26:53 2024 GMT Not After : Feb 7 06:31:53 2025 GMT Subject: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:56:69:47:01:ca:e8:30:c6:06:05:39:3d: 0d:4f:83:39:8d:00:44:34:51:0e:b2:35:21:7e:4c: 71:c1:ad:67:f2:ef:dc:1f:92:60:e4:4e:4a:c3:68: 52:09:ca:8e:3c:64:5f:1f:15:93:d1:b6:fe:9c:69: 15:70:e0:86:39:41:49:fb:fd:c8:50:89:29:66:27: 03:9f:81:d2:72:ce:ec:1e:10:dd:c8:a2:9e:c5:e9: f6:e7:29:95:73:5d:cc:ed:ab:92:85:02:09:29:d0: 99:7c:ee:95:b4:36:be:6e:6d:67:19:7b:c3:98:c6: 67:b4:b3:98:69:b0:63:2d:92:39:25:2a:15:3b:81: c3:cb:be:a7:3c:35:62:7a:06:5f:26:c4:07:a7:6c: cb:fd:41:ae:eb:6b:39:c9:69:42:37:3c:10:17:37: 25:10:fc:1b:58:af:4a:2c:06:7e:7c:a2:1c:cb:0c: 3c:8f:22:5b:f4:f3:b3:7b:53:79:e8:7d:26:90:96: a7:a2:11:c1:8c:76:88:21:6e:93:d4:cd:12:b0:b2: 1f:ac:7c:f9:f2:39:9c:73:35:1e:ce:6b:eb:22:35: fb:df:66:c0:69:5f:3c:c5:ea:61:ea:c6:1e:26:03: 88:4e:fc:b3:23:17:0f:f0:62:0c:aa:59:3f:85:b3: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.54.0.0/16 180.233.152.0/21 202.53.224.0/19 202.153.224.0/19 202.159.0.0/18 202.159.96.0/19 IPv6: 2402:ac00::/32 2404:170::/32 Signature Algorithm: sha256WithRSAEncryption 1a:15:ca:bd:0a:8f:88:8f:b6:47:e1:4c:7b:45:9a:1b:10:c4: 06:de:e4:7e:f1:76:d9:79:56:bc:95:41:ad:96:1b:a8:47:2e: 67:e6:20:39:de:d5:8a:f8:6d:bc:b2:5d:c2:f0:6a:11:b6:ba: b0:e1:fc:44:d5:a6:8b:d3:f2:e2:d0:34:a3:a2:ac:d7:80:f8: c8:72:9d:6c:32:92:38:1f:33:f5:b2:d6:39:cf:be:f5:43:65: 1e:36:75:13:c7:dd:78:87:26:32:81:df:2c:b5:92:87:72:3b: 5d:43:63:00:e6:fd:90:c9:06:51:fb:af:67:11:65:aa:76:72: 2c:54:71:fb:ab:bf:6e:63:eb:7d:8f:b6:ef:f4:f4:19:1b:80: 41:ff:d0:c7:80:5d:bf:bc:8b:4b:9d:09:27:31:b3:3b:86:a2: da:b4:5c:40:d6:8f:94:74:76:09:a8:d8:59:3b:02:3f:5f:bf: 2e:27:09:9d:5a:b0:34:d6:1e:4b:5b:11:82:d9:1d:c3:1d:0e: dd:7a:85:18:8a:ca:fa:ee:da:51:68:0b:09:50:00:7e:85:07: e7:a7:5c:99:e5:f2:d0:9a:e7:94:98:1c:56:68:9d:44:43:8c: 61:52:97:e2:bb:0f:ca:60:31:61:bf:de:b9:01:d5:55:df:e2: 8e:08:eb:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV5KK6/JVPMSVtrwG2Vf5ANZ7mMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwOTA2MjY1M1oX DTI1MDIwNzA2MzE1M1owMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVF Mzg3QzdEOUE1RDk0RDRGODMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlTVmlHAcroMMYGBTk9DU+DOY0ARDRRDrI1IX5MccGtZ/Lv3B+SYOROSsNo UgnKjjxkXx8Vk9G2/pxpFXDghjlBSfv9yFCJKWYnA5+B0nLO7B4Q3ciinsXp9ucp lXNdzO2rkoUCCSnQmXzulbQ2vm5tZxl7w5jGZ7SzmGmwYy2SOSUqFTuBw8u+pzw1 YnoGXybEB6dsy/1BrutrOclpQjc8EBc3JRD8G1ivSiwGfnyiHMsMPI8iW/Tzs3tT eeh9JpCWp6IRwYx2iCFuk9TNErCyH6x8+fI5nHM1Hs5r6yI1+99mwGlfPMXqYerG HiYDiE78syMXD/BiDKpZP4Wz6GUCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLjCorGyEWSvjq7jh8fZpdlNT4MIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdl LWEwZjEtNDY3Zi1hNDZmLTU1YTMxNTdiMGQ2NS8wL0I4QzJBMkIxQjIxMTY0QUY4 RUFFRTM4N0M3RDlBNUQ5NEQ0RjgzMDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD AwB1NgMEA7TpmAMEBco14AMEBcqZ4AMEBsqfAAMEBcqfYDAUBAIAAjAOAwUAJAKs AAMFACQEAXAwDQYJKoZIhvcNAQELBQADggEBABoVyr0Kj4iPtkfhTHtFmhsQxAbe 5H7xdtl5VryVQa2WG6hHLmfmIDne1Yr4bbyyXcLwahG2urDh/ETVpovT8uLQNKOi rNeA+MhynWwykjgfM/Wy1jnPvvVDZR42dRPH3XiHJjKB3yy1kodyO11DYwDm/ZDJ BlH7r2cRZap2cixUcfurv25j632Ptu/09BkbgEH/0MeAXb+8i0udCScxszuGotq0 XEDWj5R0dgmo2Fk7Aj9fvy4nCZ1asDTWHktbEYLZHcMdDt16hRiKyvru2lFoCwlQ AH6FB+enXJnl8tCa55SYHFZonURDjGFSl+K7D8pgMWG/3rkB1VXf4o4I6+I= -----END CERTIFICATE-----Generated at Wed May 8 04:38:00 2024 by rpki-client on console-fra.rpki-client.org