$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer (raw, json) Hash identifier: 0nkh3G53HYqsIlkX5TBac2zjnhEt+xgatAndFG395Sg= Subject key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 699D3079F474115246C9387D64A52967ECE3D372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Sep 2024 02:59:34 +0000 Certificate not after: Sat 06 Sep 2025 03:04:34 +0000 Subordinate resources: IP: 103.27.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:30:79:f4:74:11:52:46:c9:38:7d:64:a5:29:67:ec:e3:d3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 7 02:59:34 2024 GMT Not After : Sep 6 03:04:34 2025 GMT Subject: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:d9:bf:fc:e3:8f:c9:45:44:20:cb:d2:07: da:da:59:c3:0f:9d:a6:0d:4b:a8:db:c9:4f:28:26: ca:27:1f:f7:5b:fb:53:96:1b:4f:1b:a5:39:90:71: 8c:b6:00:e5:a2:96:f8:b7:e8:3e:67:14:43:ad:2f: d5:1f:5c:1e:99:6d:02:8b:9f:f0:e2:59:3d:d8:1f: d7:9b:63:8a:cb:92:4c:16:40:4d:38:94:5e:a2:ac: c7:d3:9e:ad:9a:23:d3:1b:90:9b:5a:da:9b:86:a2: c9:4d:02:90:68:35:fe:bf:5c:b6:0b:ae:83:89:dc: a5:89:c9:05:cf:37:a6:9f:ed:ff:00:e8:e6:53:3f: df:52:c8:0e:fb:74:8d:ed:b0:1c:a4:69:c8:73:07: de:69:1c:51:80:62:c0:7f:fc:e7:11:e4:fc:95:ab: ae:77:28:df:63:dd:cf:ac:21:d6:97:af:1f:bd:6e: 89:57:9c:9f:98:ff:d4:95:93:b5:f1:a3:39:47:f0: d3:17:01:53:07:f7:b7:65:2f:41:4b:c6:bc:30:bb: 8f:d8:8f:6c:37:ed:73:93:6c:97:1e:29:87:5a:02: 55:76:84:87:fe:e5:6b:43:35:28:81:4f:a4:65:f3: cd:cc:f9:6d:73:6a:bd:46:8d:00:d3:05:1f:37:e0: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.194.0/23 Signature Algorithm: sha256WithRSAEncryption 65:95:87:38:62:05:e9:a5:63:54:1c:32:0a:eb:ea:a0:d4:50: f1:16:7e:bd:f9:0d:4a:9e:6e:a8:9a:cc:25:05:81:62:46:60: 9d:a6:6f:92:3f:14:5e:61:59:17:e3:a4:8d:8b:29:07:98:de: 84:e2:ba:a9:a0:3f:33:4c:3a:f8:90:fe:6a:70:29:f3:de:b0: e5:a8:5e:c6:c8:74:99:49:43:49:22:92:9c:9c:e0:6c:42:05: e0:49:da:56:6f:8b:12:cf:90:52:9a:92:f0:c5:5f:60:c2:ed: 88:ce:2c:a9:b6:bf:8d:8e:4a:5f:2c:ac:83:23:b1:64:e9:34: f0:17:72:0e:38:9b:11:c3:af:6c:a0:c6:27:4d:a8:1c:56:e3: 27:65:b7:bf:00:4f:fc:0c:f1:57:f4:6c:21:27:b0:f2:84:f8: a2:02:86:c2:f5:38:33:04:6e:1a:13:f9:32:e5:e2:5a:5e:b2: 02:9e:ea:90:65:30:1e:2b:40:c0:cf:0d:13:d2:ad:34:35:72: d5:12:58:12:4c:cc:d7:d6:f3:e2:67:00:5a:c9:f0:58:e5:42: e9:2f:68:d2:d0:d2:3a:21:2a:71:0c:63:c1:04:fb:db:e0:b8: 23:e3:6a:37:8b:ae:de:08:67:a8:9d:9b:2e:90:05:3d:6f:00: 1a:e6:87:32 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaZ0wefR0EVJGyTh9ZKUpZ+zj03IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwNzAyNTkzNFoX DTI1MDkwNjAzMDQzNFowMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhF Q0ZFNUZEN0M4NkJFNjc4MTZCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfW2b/844/JRUQgy9IH2tpZww+dpg1LqNvJTygmyicf91v7U5YbTxulOZBx jLYA5aKW+LfoPmcUQ60v1R9cHpltAouf8OJZPdgf15tjisuSTBZATTiUXqKsx9Oe rZoj0xuQm1ram4aiyU0CkGg1/r9ctguug4ncpYnJBc83pp/t/wDo5lM/31LIDvt0 je2wHKRpyHMH3mkcUYBiwH/85xHk/JWrrnco32Pdz6wh1pevH71uiVecn5j/1JWT tfGjOUfw0xcBUwf3t2UvQUvGvDC7j9iPbDftc5Nslx4ph1oCVXaEh/7la0M1KIFP pGXzzcz5bXNqvUaNANMFHzfgVZkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLoQXgwHrnSGzfjs/l/XyGvmeBawMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDhiYjg4 LWE3NTgtNDQzZi1iNzA4LTQ4ZTM4N2Q2NmY1Ny8wL0JBMTA1RTBDMDdBRTc0ODZD REY4RUNGRTVGRDdDODZCRTY3ODE2QjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnG8IwDQYJKoZIhvcNAQELBQADggEBAGWVhzhiBemlY1QcMgrr6qDUUPEWfr35 DUqebqiazCUFgWJGYJ2mb5I/FF5hWRfjpI2LKQeY3oTiuqmgPzNMOviQ/mpwKfPe sOWoXsbIdJlJQ0kikpyc4GxCBeBJ2lZvixLPkFKakvDFX2DC7YjOLKm2v42OSl8s rIMjsWTpNPAXcg44mxHDr2ygxidNqBxW4ydlt78AT/wM8Vf0bCEnsPKE+KIChsL1 ODMEbhoT+TLl4lpesgKe6pBlMB4rQMDPDRPSrTQ1ctUSWBJMzNfW8+JnAFrJ8Fjl QukvaNLQ0johKnEMY8EE+9vguCPjajeLrt4IZ6idmy6QBT1vABrmhzI= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:32 2024 by rpki-client on console-ams.rpki-client.org