$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer (raw, json) Hash identifier: TBfwciSzakT3ss3FD61Fa78ECGGEvIkgRjNNOZ68D0k= Subject key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F43017DB479FCB0A6D4979240DFEBE9E189C5F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft caRepository: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 01:05:44 +0000 Certificate not after: Mon 29 Jul 2024 01:10:44 +0000 Subordinate resources: IP: 103.41.247.0/24 IP: 103.141.61.0/24 IP: 2001:df4:6c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:43:01:7d:b4:79:fc:b0:a6:d4:97:92:40:df:eb:e9:e1:89:c5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 01:05:44 2023 GMT Not After : Jul 29 01:10:44 2024 GMT Subject: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:a5:03:6a:2e:37:2d:12:0c:5c:cf:f0:40: 11:96:ef:bf:8c:ee:5d:35:2a:98:3a:d7:6d:d8:cb: 28:6a:c9:74:5d:9f:26:4b:2e:c7:fd:58:b4:0d:18: 2b:f7:a2:2c:75:c3:10:cf:63:90:ef:7f:ac:e1:fb: 8e:7a:21:41:75:9a:24:e3:3c:dc:48:30:8a:aa:cb: d7:31:ce:91:e2:d7:f7:16:90:d2:7c:26:65:a8:f2: 77:d3:cf:63:27:36:fe:c7:0f:71:b8:db:3a:05:91: b8:51:3e:ee:cb:69:96:3f:6a:1f:0b:f2:2d:0a:20: ea:f1:3b:b3:ee:e9:50:53:d2:5c:33:94:37:5f:de: 40:fa:67:25:36:f7:57:81:52:59:55:4d:98:63:8b: c7:85:df:44:47:7d:65:7b:01:f6:37:a6:02:88:f5: bc:14:ac:fe:84:c9:fd:9e:df:dc:d5:e2:58:52:ee: 99:78:1e:0d:ed:b7:74:11:6f:cb:a3:e4:8c:f3:a7: 00:36:2e:f6:95:04:8d:24:e7:9a:cf:ee:20:ab:e9: 0b:92:ac:84:35:0a:c3:79:65:a3:83:23:ea:3d:0d: be:00:67:1b:24:16:f6:07:dc:49:74:28:f3:84:ca: 9d:3d:ff:bc:4e:78:4a:ce:2a:a1:7d:f8:30:ad:6a: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.247.0/24 103.141.61.0/24 IPv6: 2001:df4:6c00::/48 Signature Algorithm: sha256WithRSAEncryption 76:cd:a5:e0:69:78:f2:60:f7:20:36:74:84:47:71:75:32:79: b5:ea:3b:03:12:da:53:06:66:4c:cb:4d:7d:37:47:4c:8c:cd: a3:41:1d:1d:36:63:44:76:13:d6:a7:1a:69:8d:16:c1:e7:39: eb:6d:b9:c3:2a:b1:1e:51:4f:71:4b:14:05:d1:c8:8e:b0:80: cc:fd:ba:12:77:f6:c2:87:4e:6c:4e:86:b5:fb:2d:fd:62:5f: 35:3a:80:56:10:17:7b:2d:71:24:d7:eb:1c:d1:49:7c:98:47: 58:86:38:cd:09:fe:74:8b:66:61:b8:4d:84:15:b2:c3:1d:aa: c8:40:ca:3a:f0:12:eb:cf:d7:fc:a2:4e:da:18:cb:19:a3:29: 81:88:aa:85:4a:fe:12:59:31:42:1f:41:45:3a:9a:3c:9d:5c: 34:78:07:99:0a:0e:e0:d4:36:5e:a6:75:6a:2e:90:43:75:30: ad:19:d9:66:b5:13:88:14:c4:4e:19:14:87:70:f2:2d:ae:ea: 6a:69:12:03:09:4c:6f:a9:5e:82:f8:4a:f3:13:dd:06:a4:6f: a5:42:0f:56:d5:88:9d:3a:a6:5e:e8:46:a6:83:4f:cd:57:76: d1:48:b3:69:9f:33:c2:a1:ec:08:a0:f3:9a:ba:1a:c5:4b:ea: 03:4a:60:37 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUP0MBfbR5/LCm1JeSQN/r6eGJxfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAxMDU0NFoX DTI0MDcyOTAxMTA0NFowMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZD RUE0NjJGNzdFRjYwNDc4OTkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRWpQNqLjctEgxcz/BAEZbvv4zuXTUqmDrXbdjLKGrJdF2fJksux/1YtA0Y K/eiLHXDEM9jkO9/rOH7jnohQXWaJOM83EgwiqrL1zHOkeLX9xaQ0nwmZajyd9PP Yyc2/scPcbjbOgWRuFE+7stplj9qHwvyLQog6vE7s+7pUFPSXDOUN1/eQPpnJTb3 V4FSWVVNmGOLx4XfREd9ZXsB9jemAoj1vBSs/oTJ/Z7f3NXiWFLumXgeDe23dBFv y6PkjPOnADYu9pUEjSTnms/uIKvpC5KshDUKw3llo4Mj6j0NvgBnGyQW9gfcSXQo 84TKnT3/vE54Ss4qoX34MK1q4TUCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2M3m/j35+h7abOpGL3fvYEeJkNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OWNmZDA0 LTY5ZDAtNGQ0Yy04ZDA5LTJkMjIxMzg0MmMyYy8wL0JEOENERTZGRTNERjlGQTFF REE2Q0VBNDYyRjc3RUY2MDQ3ODk5MEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnKfcDBABnjT0wDwQCAAIwCQMHACABDfRsADANBgkqhkiG9w0BAQsFAAOCAQEA ds2l4Gl48mD3IDZ0hEdxdTJ5teo7AxLaUwZmTMtNfTdHTIzNo0EdHTZjRHYT1qca aY0Wwec56225wyqxHlFPcUsUBdHIjrCAzP26Enf2wodObE6Gtfst/WJfNTqAVhAX ey1xJNfrHNFJfJhHWIY4zQn+dItmYbhNhBWywx2qyEDKOvAS68/X/KJO2hjLGaMp gYiqhUr+ElkxQh9BRTqaPJ1cNHgHmQoO4NQ2XqZ1ai6QQ3UwrRnZZrUTiBTEThkU h3DyLa7qamkSAwlMb6legvhK8xPdBqRvpUIPVtWInTqmXuhGpoNPzVd20UizaZ8z wqHsCKDzmroaxUvqA0pgNw== -----END CERTIFICATE-----Generated at Wed May 8 17:45:25 2024 by rpki-client on console-ams.rpki-client.org