$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer File: BF3B675AEBEE64D00B323056545D1F630F1C489E.cer (raw, json) Hash identifier: fuYvjiz6lmlEjRVablIZcC+vx/z6jqmucLQLJsxUSVY= Subject key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 041EC899959899301D7A639D72E09BDA372A9DD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft caRepository: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:17:17 +0000 Certificate not after: Mon 30 Jun 2025 18:22:17 +0000 Subordinate resources: IP: 43.227.148.0/22 IP: 103.10.184.0/22 IP: 116.213.48.0/20 IP: 202.69.96.0/20 IP: 202.151.8.0/22 IP: 203.89.16.0/21 IP: 220.157.96.0/20 IP: 223.164.0.0/16 IP: 2403:7200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1e:c8:99:95:98:99:30:1d:7a:63:9d:72:e0:9b:da:37:2a:9d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 18:17:17 2024 GMT Not After : Jun 30 18:22:17 2025 GMT Subject: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:0a:1e:1f:fc:85:db:63:84:87:82:a8:f6: d8:65:91:e0:f8:a6:62:c3:ed:60:be:73:df:41:48: 61:f1:88:7b:8a:83:ed:30:9e:30:d0:73:b8:3c:7c: fb:da:be:10:f8:96:25:11:99:71:00:cd:5e:b2:95: 85:d3:06:c1:68:1a:f1:96:32:58:53:bc:55:cf:69: 50:cb:68:0d:47:7d:74:98:bd:dd:48:d9:4a:93:06: 94:e5:07:7a:1d:c3:56:d8:56:bf:a1:51:cb:f2:e4: 54:2a:34:c7:fb:a4:87:2f:21:96:0d:f2:f1:7f:87: bf:33:68:de:6d:cb:34:cb:09:38:86:2b:0a:4b:49: e3:71:d0:18:82:b1:55:89:fa:9d:b9:56:16:c4:2b: 76:11:ee:a9:8c:a3:1a:58:da:1f:cc:5f:e0:88:e7: 8c:8c:4b:3f:90:85:4a:8a:91:c2:ed:83:36:8e:94: cb:a0:f3:0a:9e:0d:02:a0:fd:7c:aa:43:79:55:33: d6:a4:0e:39:83:58:43:ff:bd:4c:0a:ac:16:ff:e6: 62:44:6a:aa:73:7a:e5:3b:a0:1e:c2:9f:82:5d:16: 5c:02:7c:85:43:b6:42:ab:6a:f5:ad:00:3e:41:3d: 1c:56:0d:39:68:fc:e8:5a:71:69:fc:24:89:e2:5b: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.148.0/22 103.10.184.0/22 116.213.48.0/20 202.69.96.0/20 202.151.8.0/22 203.89.16.0/21 220.157.96.0/20 223.164.0.0/16 IPv6: 2403:7200::/32 Signature Algorithm: sha256WithRSAEncryption 35:5b:b5:dd:75:77:83:b5:ea:99:6d:77:57:14:5c:be:9d:c7: 7c:cf:2f:07:cb:30:da:75:97:81:b1:39:c6:11:07:0a:25:83: fe:13:8a:f5:f3:6f:5d:c7:5f:75:e7:03:08:ab:3f:b2:ca:96: ca:3f:33:e9:61:ac:5a:e5:e2:44:e7:99:b4:ec:d4:ce:a0:aa: b2:8c:51:11:49:b2:9b:80:9a:72:43:02:29:35:0d:dc:69:6c: 0d:9e:ea:78:4f:f8:ac:a0:31:b5:ee:c1:96:bc:fd:d2:d5:25: 28:27:f3:77:20:0e:48:d7:81:37:79:86:ce:cb:d7:f8:12:39: aa:f6:3c:c5:9d:86:15:ee:2e:c3:31:93:de:df:29:56:54:28: 3d:93:f6:78:6c:e0:29:c2:ba:91:e9:b8:16:58:7d:ce:cb:fe: 23:d4:63:27:ab:d0:74:c9:3c:80:db:cd:c7:0a:13:b7:ae:5e: f7:dc:68:e4:01:27:13:88:ba:2e:19:f7:6e:e5:b2:76:c7:43: 51:af:f0:49:3b:79:4a:3f:e3:3b:62:5b:58:c3:9a:9d:d6:29: 4b:2b:6b:ba:11:ab:60:b6:b1:32:89:13:b4:a6:56:00:12:df: 2c:ec:5e:0d:13:18:c9:af:a9:d8:3d:97:06:ee:2f:c5:54:b5: 3d:e3:da:86 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUBB7ImZWYmTAdemOdcuCb2jcqndUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4MTcxN1oX DTI1MDYzMDE4MjIxN1owMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIz MDU2NTQ1RDFGNjMwRjFDNDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW5Ch4f/IXbY4SHgqj22GWR4PimYsPtYL5z30FIYfGIe4qD7TCeMNBzuDx8 +9q+EPiWJRGZcQDNXrKVhdMGwWga8ZYyWFO8Vc9pUMtoDUd9dJi93UjZSpMGlOUH eh3DVthWv6FRy/LkVCo0x/ukhy8hlg3y8X+HvzNo3m3LNMsJOIYrCktJ43HQGIKx VYn6nblWFsQrdhHuqYyjGljaH8xf4IjnjIxLP5CFSoqRwu2DNo6Uy6DzCp4NAqD9 fKpDeVUz1qQOOYNYQ/+9TAqsFv/mYkRqqnN65TugHsKfgl0WXAJ8hUO2Qqtq9a0A PkE9HFYNOWj86FpxafwkieJbzvUCAwEAAaOCAvAwggLsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL87Z1rr7mTQCzIwVlRdH2MPHEieMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MGM5MDA5 LWFkNTMtNGZhNi1hMTgzLTM0YjM0NTdiZWEwMy8wL0JGM0I2NzVBRUJFRTY0RDAw QjMyMzA1NjU0NUQxRjYzMEYxQzQ4OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMDUEAgABMC8D BAIr45QDBAJnCrgDBAR01TADBATKRWADBALKlwgDBAPLWRADBATcnWADAwDfpDAN BAIAAjAHAwUAJANyADANBgkqhkiG9w0BAQsFAAOCAQEANVu13XV3g7XqmW13VxRc vp3HfM8vB8sw2nWXgbE5xhEHCiWD/hOK9fNvXcdfdecDCKs/ssqWyj8z6WGsWuXi ROeZtOzUzqCqsoxREUmym4CackMCKTUN3GlsDZ7qeE/4rKAxte7Blrz90tUlKCfz dyAOSNeBN3mGzsvX+BI5qvY8xZ2GFe4uwzGT3t8pVlQoPZP2eGzgKcK6kem4Flh9 zsv+I9RjJ6vQdMk8gNvNxwoTt65e99xo5AEnE4i6Lhn3buWydsdDUa/wSTt5Sj/j O2JbWMOandYpSytruhGrYLaxMokTtKZWABLfLOxeDRMYya+p2D2XBu4vxVS1PePa hg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org