$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer (raw, json) Hash identifier: cgdKlgr0rDSpkuSsai/rg07I2vQfKHnBi7GtYFceU0Q= Subject key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B931C5911716B86148D98BAC2DCDE17EB472EC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft caRepository: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:33:25 +0000 Certificate not after: Mon 30 Jun 2025 14:38:25 +0000 Subordinate resources: IP: 103.41.247.0/24 IP: 103.141.61.0/24 IP: 2001:df4:6c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:93:1c:59:11:71:6b:86:14:8d:98:ba:c2:dc:de:17:eb:47:2e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:33:25 2024 GMT Not After : Jun 30 14:38:25 2025 GMT Subject: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:a5:03:6a:2e:37:2d:12:0c:5c:cf:f0:40: 11:96:ef:bf:8c:ee:5d:35:2a:98:3a:d7:6d:d8:cb: 28:6a:c9:74:5d:9f:26:4b:2e:c7:fd:58:b4:0d:18: 2b:f7:a2:2c:75:c3:10:cf:63:90:ef:7f:ac:e1:fb: 8e:7a:21:41:75:9a:24:e3:3c:dc:48:30:8a:aa:cb: d7:31:ce:91:e2:d7:f7:16:90:d2:7c:26:65:a8:f2: 77:d3:cf:63:27:36:fe:c7:0f:71:b8:db:3a:05:91: b8:51:3e:ee:cb:69:96:3f:6a:1f:0b:f2:2d:0a:20: ea:f1:3b:b3:ee:e9:50:53:d2:5c:33:94:37:5f:de: 40:fa:67:25:36:f7:57:81:52:59:55:4d:98:63:8b: c7:85:df:44:47:7d:65:7b:01:f6:37:a6:02:88:f5: bc:14:ac:fe:84:c9:fd:9e:df:dc:d5:e2:58:52:ee: 99:78:1e:0d:ed:b7:74:11:6f:cb:a3:e4:8c:f3:a7: 00:36:2e:f6:95:04:8d:24:e7:9a:cf:ee:20:ab:e9: 0b:92:ac:84:35:0a:c3:79:65:a3:83:23:ea:3d:0d: be:00:67:1b:24:16:f6:07:dc:49:74:28:f3:84:ca: 9d:3d:ff:bc:4e:78:4a:ce:2a:a1:7d:f8:30:ad:6a: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.247.0/24 103.141.61.0/24 IPv6: 2001:df4:6c00::/48 Signature Algorithm: sha256WithRSAEncryption 15:33:e5:a2:6b:44:c3:35:8f:83:82:f8:ed:06:04:ce:5b:4d: 24:de:f1:53:62:f0:9c:5c:65:96:7c:55:de:c2:c4:05:2e:be: 98:e2:f3:f9:06:38:d5:17:90:5c:79:0c:4e:0e:1f:b4:8c:fd: 4c:c6:3f:2a:52:1f:63:30:05:41:f8:be:e3:fa:19:76:38:10: 2d:50:d8:32:38:11:a3:35:48:30:5e:47:f8:ac:3a:b3:08:23: 75:34:90:46:fa:0b:b7:2f:d3:18:3f:64:a1:f2:71:b3:1c:b2: d8:1f:0c:2e:20:a4:79:92:44:ae:45:cd:2b:4d:e0:62:b7:ed: f2:7c:03:e4:96:c1:8c:c1:b4:5c:64:19:67:48:4e:6d:04:17: 36:05:3d:36:07:86:9d:83:5f:a3:0c:f5:98:36:b8:28:c5:9d: 4a:63:79:15:14:33:71:83:d5:7c:91:d0:76:c4:ad:52:21:29: b5:4f:b1:75:69:b6:d4:89:5f:4d:85:d8:9e:99:20:d0:9f:6b: b8:79:f6:dc:7e:80:b1:86:71:eb:4c:90:8f:ca:b6:5a:a2:24: 88:40:e9:02:ed:b7:a3:a8:90:db:1b:62:23:85:e0:fc:c6:81: 35:2e:bc:c2:41:23:0a:1a:3c:4e:93:d0:72:79:88:25:0d:4c: ef:3e:e5:47 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUK5McWRFxa4YUjZi6wtzeF+tHLsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MzMyNVoX DTI1MDYzMDE0MzgyNVowMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZD RUE0NjJGNzdFRjYwNDc4OTkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRWpQNqLjctEgxcz/BAEZbvv4zuXTUqmDrXbdjLKGrJdF2fJksux/1YtA0Y K/eiLHXDEM9jkO9/rOH7jnohQXWaJOM83EgwiqrL1zHOkeLX9xaQ0nwmZajyd9PP Yyc2/scPcbjbOgWRuFE+7stplj9qHwvyLQog6vE7s+7pUFPSXDOUN1/eQPpnJTb3 V4FSWVVNmGOLx4XfREd9ZXsB9jemAoj1vBSs/oTJ/Z7f3NXiWFLumXgeDe23dBFv y6PkjPOnADYu9pUEjSTnms/uIKvpC5KshDUKw3llo4Mj6j0NvgBnGyQW9gfcSXQo 84TKnT3/vE54Ss4qoX34MK1q4TUCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2M3m/j35+h7abOpGL3fvYEeJkNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OWNmZDA0 LTY5ZDAtNGQ0Yy04ZDA5LTJkMjIxMzg0MmMyYy8wL0JEOENERTZGRTNERjlGQTFF REE2Q0VBNDYyRjc3RUY2MDQ3ODk5MEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnKfcDBABnjT0wDwQCAAIwCQMHACABDfRsADANBgkqhkiG9w0BAQsFAAOCAQEA FTPlomtEwzWPg4L47QYEzltNJN7xU2LwnFxllnxV3sLEBS6+mOLz+QY41ReQXHkM Tg4ftIz9TMY/KlIfYzAFQfi+4/oZdjgQLVDYMjgRozVIMF5H+Kw6swgjdTSQRvoL ty/TGD9kofJxsxyy2B8MLiCkeZJErkXNK03gYrft8nwD5JbBjMG0XGQZZ0hObQQX NgU9NgeGnYNfowz1mDa4KMWdSmN5FRQzcYPVfJHQdsStUiEptU+xdWm21IlfTYXY npkg0J9ruHn23H6AsYZx60yQj8q2WqIkiEDpAu23o6iQ2xtiI4Xg/MaBNS68wkEj Cho8TpPQcnmIJQ1M7z7lRw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:29 2024 by rpki-client on console-fra.rpki-client.org