$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer (raw, json) Hash identifier: thj4aDMv9hEEAoDkcYlzQBIbPol/0C/WFZqiTsHSjho= Subject key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78564B27E1D533386DC7741938AFF3E4BEA981F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft caRepository: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jun 2023 15:08:34 +0000 Certificate not after: Fri 28 Jun 2024 15:13:34 +0000 Subordinate resources: IP: 103.5.149.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:56:4b:27:e1:d5:33:38:6d:c7:74:19:38:af:f3:e4:be:a9:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 15:08:34 2023 GMT Not After : Jun 28 15:13:34 2024 GMT Subject: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:dc:6a:dd:a2:8b:82:9e:e8:89:fe:58:29: 0d:41:c2:0e:0b:23:0e:6e:f9:00:6a:a4:9e:20:fd: 1b:82:38:fc:8f:74:8a:0d:67:c0:0a:98:f4:be:5d: 5a:3b:19:6e:74:65:33:7c:03:29:93:bd:74:0a:65: 55:2a:27:7d:f0:90:c8:d1:d7:95:fe:9a:14:54:28: af:b0:38:67:d1:c3:fe:f6:49:4c:a6:ee:eb:1e:a3: aa:0a:1b:31:98:53:09:af:89:0a:a9:b2:55:72:94: 62:94:d8:02:67:3e:4a:13:76:e7:1a:84:d4:96:af: 32:5d:14:26:f0:f1:54:25:f5:d5:53:1e:10:24:1c: 6c:b9:11:92:c8:5b:d1:c9:c5:a6:f6:b4:ae:02:dc: de:46:bd:36:5e:0b:ff:cc:ae:2f:5e:24:0c:de:63: 1e:fb:c6:6a:f8:58:96:72:61:be:98:1f:94:30:a7: 79:88:7d:59:65:55:d0:fe:d2:11:e2:60:e8:5c:5b: 78:fe:b8:e7:e7:e6:e9:72:81:99:c6:a6:65:ac:6a: ae:1c:b7:31:65:53:7a:52:6f:4a:e5:00:10:6a:0b: 2e:d5:d0:81:19:91:1f:31:2f:a9:52:44:6e:8e:fb: dc:70:1f:fd:de:6e:fa:e6:b6:a0:fe:64:af:30:5d: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.5.149.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:24:62:1c:b8:74:6d:93:16:1d:17:c5:01:df:c5:88:dc:a2: 32:9c:a8:27:ae:0c:be:ab:5e:5b:58:f4:c7:f4:c7:f4:49:f1: 1f:0a:46:7e:23:70:b8:6e:2f:f0:12:eb:88:1e:2a:c9:bb:43: b8:1e:32:23:cd:6b:dd:89:c8:fb:e7:12:ce:c6:a3:bb:e7:d1: 5a:8b:32:96:c6:57:b0:0d:c5:76:94:6a:87:dd:87:88:9f:4e: a0:bd:99:2f:5a:cd:12:c9:37:3c:ed:f5:52:8d:2b:5b:62:fb: ef:8f:8a:47:2d:3d:c1:3e:07:6d:9c:ae:3f:73:33:76:a7:63: 33:13:0f:17:46:73:98:fa:c8:a0:33:a4:7d:1a:db:09:65:9c: fb:f4:cd:2e:fd:b8:72:ed:74:73:b0:5c:4e:40:57:9f:78:b8: ca:61:68:c9:95:92:9e:42:a7:1e:49:49:d7:4c:b4:7f:c3:1f: 1e:aa:b0:d5:b4:6c:ce:a1:a2:e6:45:3a:d3:55:8b:8b:83:c1: be:fe:c0:45:98:80:31:4f:06:a0:07:ed:87:bb:36:37:08:c3: df:65:42:e3:d9:21:3b:15:d0:7a:58:43:66:73:bf:55:ae:45: 31:2d:e9:5a:26:b2:aa:ff:44:2a:76:d6:67:15:5b:86:1c:c3: ec:68:48:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeFZLJ+HVMzhtx3QZOK/z5L6pgfMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYzMDE1MDgzNFoX DTI0MDYyODE1MTMzNFowMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNB OTA5OUEzOTAyMzE3MDhDNzkwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSO3GrdoouCnuiJ/lgpDUHCDgsjDm75AGqkniD9G4I4/I90ig1nwAqY9L5d WjsZbnRlM3wDKZO9dAplVSonffCQyNHXlf6aFFQor7A4Z9HD/vZJTKbu6x6jqgob MZhTCa+JCqmyVXKUYpTYAmc+ShN25xqE1JavMl0UJvDxVCX11VMeECQcbLkRkshb 0cnFpva0rgLc3ka9Nl4L/8yuL14kDN5jHvvGavhYlnJhvpgflDCneYh9WWVV0P7S EeJg6FxbeP645+fm6XKBmcamZaxqrhy3MWVTelJvSuUAEGoLLtXQgRmRHzEvqVJE bo773HAf/d5u+ua2oP5krzBdJW0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLjkZ/mtP2qx7vOpCZo5AjFwjHkKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0OTdkODI4 LTk4NGEtNDNmMS05YjZlLWEwMWJhMjFiYjUxOC8wL0I4RTQ2N0Y5QUQzRjZBQjFF RUYzQTkwOTlBMzkwMjMxNzA4Qzc5MEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBZUwDQYJKoZIhvcNAQELBQADggEBAG8kYhy4dG2TFh0XxQHfxYjcojKcqCeu DL6rXltY9Mf0x/RJ8R8KRn4jcLhuL/AS64geKsm7Q7geMiPNa92JyPvnEs7Go7vn 0VqLMpbGV7ANxXaUaofdh4ifTqC9mS9azRLJNzzt9VKNK1ti+++PikctPcE+B22c rj9zM3anYzMTDxdGc5j6yKAzpH0a2wllnPv0zS79uHLtdHOwXE5AV594uMphaMmV kp5Cpx5JSddMtH/DHx6qsNW0bM6houZFOtNVi4uDwb7+wEWYgDFPBqAH7Ye7NjcI w99lQuPZITsV0HpYQ2Zzv1WuRTEt6Vomsqr/RCp21mcVW4Ycw+xoSCI= -----END CERTIFICATE-----Generated at Wed May 8 17:45:24 2024 by rpki-client on console-ams.rpki-client.org