$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer (raw, json) Hash identifier: NnPm8yx0nmCsLiER/9o3F8i+AUHXPcdxwbKHEl+SEN4= Subject key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A7F92ABC54A1C5D982E695D415808969FBFFA41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Sep 2024 04:17:47 +0000 Certificate not after: Fri 19 Sep 2025 04:22:47 +0000 Subordinate resources: IP: 103.75.237.0/24 IP: 2001:df5:6200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7f:92:ab:c5:4a:1c:5d:98:2e:69:5d:41:58:08:96:9f:bf:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 20 04:17:47 2024 GMT Not After : Sep 19 04:22:47 2025 GMT Subject: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:b2:1a:06:0e:59:59:66:02:99:c8:86:c7: 0b:ac:2c:18:9d:9d:b4:93:9b:2b:af:2d:3a:b2:7c: 01:5f:a8:18:21:36:5b:57:f7:fa:f1:11:51:1a:a6: 0c:85:d6:49:48:59:81:a7:7b:19:b8:30:12:d8:31: 33:6f:62:1c:46:dc:19:e5:40:8a:6b:93:c5:0d:7f: a2:b9:3d:15:cf:ac:26:90:98:19:e6:82:af:d0:2c: b3:b6:0d:59:c7:e8:d6:8c:f4:26:06:ac:ee:77:b2: 00:d2:dd:93:e2:f7:b7:ce:90:37:fc:5e:6d:06:63: 6a:14:32:31:64:7f:e5:43:86:05:d1:ad:d7:0e:ca: 97:68:4a:8e:d5:55:71:12:c7:11:17:49:6b:3f:3c: 71:c4:45:0f:3a:dd:bf:fb:1b:b0:e7:32:9a:67:ad: d3:c5:4a:ef:a3:cd:22:0e:fa:e3:da:e5:d9:6f:42: e0:4a:d8:38:0a:87:74:f9:7c:96:d8:ed:db:30:07: 3a:75:86:04:a8:17:5a:f1:d4:e6:e7:db:61:04:ee: 92:ea:b4:23:0e:2a:f1:6e:e8:97:bb:4d:d4:7f:82: 2d:74:aa:2b:a9:19:44:51:06:33:46:88:43:2f:14: 4a:dd:e4:7a:a5:ed:d1:31:09:80:28:b7:c4:b3:ac: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.237.0/24 IPv6: 2001:df5:6200::/48 Signature Algorithm: sha256WithRSAEncryption 8b:e8:c7:76:ee:0e:9b:d6:22:23:95:a4:4c:a1:18:a0:6c:57: b9:9c:35:92:06:ce:b8:fc:7f:fc:10:58:ba:cb:b3:43:49:c2: ed:36:0c:d3:0a:ab:e7:f8:ae:78:33:2e:2c:4a:46:50:7b:0a: 9f:80:07:15:8c:91:7d:74:44:03:4b:bb:cc:dc:c3:23:c8:36: 1a:ae:98:21:a8:96:b7:8b:7f:63:b4:60:3b:8e:53:76:d7:a5: 05:75:40:96:ac:b8:e2:e1:05:ff:76:d5:a2:c0:b9:ce:ef:7e: 79:8f:7b:71:39:e3:63:98:af:6c:27:43:dd:f8:96:5c:ff:0e: 9d:d0:69:91:7b:ed:04:11:0e:07:31:07:dc:50:ad:0c:de:7f: 50:0d:42:cf:a2:2d:aa:62:57:f5:f8:9f:f1:c8:a8:83:5f:69: 4d:f9:fe:58:15:69:36:ef:a3:c7:64:ff:3f:94:09:3b:ee:b2: c1:ff:c6:69:22:27:ae:ed:7a:dc:40:26:3a:0a:e5:f3:11:af: 5d:ce:db:3f:44:46:3d:92:ef:77:1a:33:27:dd:72:7f:f2:4e: 8f:f9:73:45:eb:66:d3:8e:cf:fc:9f:51:87:c4:eb:05:06:d4: e2:fa:b4:80:f8:74:7e:20:b2:9c:f8:fb:08:52:6f:8d:aa:89: 2b:7b:96:f5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUen+Sq8VKHF2YLmldQVgIlp+/+kEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMDA0MTc0N1oX DTI1MDkxOTA0MjI0N1owMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThF QTFENjFGRDQyNDEwOEU4RDNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkDshoGDllZZgKZyIbHC6wsGJ2dtJObK68tOrJ8AV+oGCE2W1f3+vERURqm DIXWSUhZgad7GbgwEtgxM29iHEbcGeVAimuTxQ1/ork9Fc+sJpCYGeaCr9Ass7YN Wcfo1oz0Jgas7neyANLdk+L3t86QN/xebQZjahQyMWR/5UOGBdGt1w7Kl2hKjtVV cRLHERdJaz88ccRFDzrdv/sbsOcymmet08VK76PNIg7649rl2W9C4ErYOAqHdPl8 ltjt2zAHOnWGBKgXWvHU5ufbYQTukuq0Iw4q8W7ol7tN1H+CLXSqK6kZRFEGM0aI Qy8USt3keqXt0TEJgCi3xLOsIiMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMDI5yQ+To3s16jqHWH9QkEI6NPVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxMTZmYmM5 LWIzMWMtNDIyNS1hNjk3LTRmZWRiYzIzNGRiNi8wL0MwQzhFNzI0M0U0RThERUNE N0E4RUExRDYxRkQ0MjQxMDhFOEQzRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnS+0wDwQCAAIwCQMHACABDfViADANBgkqhkiG9w0BAQsFAAOCAQEAi+jHdu4O m9YiI5WkTKEYoGxXuZw1kgbOuPx//BBYusuzQ0nC7TYM0wqr5/iueDMuLEpGUHsK n4AHFYyRfXREA0u7zNzDI8g2Gq6YIaiWt4t/Y7RgO45TdtelBXVAlqy44uEF/3bV osC5zu9+eY97cTnjY5ivbCdD3fiWXP8OndBpkXvtBBEOBzEH3FCtDN5/UA1Cz6It qmJX9fif8ciog19pTfn+WBVpNu+jx2T/P5QJO+6ywf/GaSInru163EAmOgrl8xGv Xc7bP0RGPZLvdxozJ91yf/JOj/lzRetm047P/J9Rh8TrBQbU4vq0gPh0fiCynPj7 CFJvjaqJK3uW9Q== -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:18 2025 by rpki-client