$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer File: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer (raw, json) Hash identifier: Ebgp7w9VkCi3qs+7XNqqg5QtFsHGSCNQFsUl8wJc5ck= Subject key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29ECAAD95696F69ACB9C4E4984023C5B9E83E60E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:43:58 +0000 Certificate not after: Mon 29 Jul 2024 04:48:58 +0000 Subordinate resources: IP: 103.151.226.0/23 IP: 2406:21c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ec:aa:d9:56:96:f6:9a:cb:9c:4e:49:84:02:3c:5b:9e:83:e6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:43:58 2023 GMT Not After : Jul 29 04:48:58 2024 GMT Subject: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:da:2e:1c:ff:e9:ba:03:bb:c2:92:1f:7c: 7a:67:34:87:da:5c:bd:93:db:88:25:4a:ee:ca:fa: 1e:00:4d:ff:b8:31:dd:52:c0:38:20:98:83:0d:8e: a5:04:66:03:15:e3:be:59:c4:ec:cf:34:77:fa:51: 04:9c:72:8f:3b:77:2a:e0:96:43:6f:a8:a9:cf:09: fb:f7:a3:9a:52:d0:e0:6a:b0:8f:69:b1:58:87:4a: 79:e5:e5:21:40:12:67:c0:31:21:ee:fe:5f:14:0f: 96:11:56:05:21:b7:c8:2b:4b:30:2f:dc:af:f6:fb: c7:05:df:f4:cb:6b:96:b0:78:04:f2:d2:88:ea:19: 46:b5:b8:51:da:0e:60:27:d3:4b:6c:85:db:6e:7b: b7:eb:12:17:8a:1c:97:fa:3f:75:b2:5a:32:f7:f8: 48:c5:25:de:f6:ca:28:3f:14:48:a9:cb:97:18:52: b4:be:bb:27:ab:47:61:71:eb:20:65:6a:17:3b:1e: c8:43:9a:78:51:a7:97:08:2f:87:3d:45:ed:05:bb: 06:57:8d:ed:58:c2:06:5d:9f:b7:e4:98:c0:4e:15: cb:27:53:59:a2:7e:69:2e:22:94:b2:44:f7:cc:90: 8a:75:9e:c5:f0:4d:71:81:64:d3:6b:c9:49:db:86: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.226.0/23 IPv6: 2406:21c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:bd:54:38:63:f3:38:33:ba:8d:e6:ef:8f:5a:67:91:f1:da: 73:55:e2:35:8b:33:68:83:10:99:6a:f2:45:53:8b:71:f6:12: e4:10:29:7d:2c:f7:db:bd:eb:db:ea:c1:9a:a0:ab:26:f8:24: 1e:d3:4b:20:9c:ae:21:1a:ba:f0:e9:3c:2b:ae:14:fd:32:25: 3e:f1:8f:7a:9b:20:ba:bc:36:dd:cd:69:49:49:7b:a8:df:9b: 96:58:e9:e8:87:7d:6a:c7:fe:07:e3:07:1a:21:03:e9:f6:c6: 14:d2:a7:70:2f:13:bd:a6:74:00:25:20:4c:cb:9f:05:a4:18: 7c:08:18:d1:52:88:99:6e:ed:7a:c4:34:b9:93:83:af:68:5e: bc:d8:55:ef:37:b4:55:6c:9c:7e:0b:2c:83:4f:ac:46:0a:c2: 10:af:c7:78:f5:e7:61:99:bf:58:e9:8c:6f:4c:c0:03:ab:ba: bb:01:10:9e:e6:a5:3c:14:3f:f8:57:f3:c0:48:ab:32:6e:1d: e3:11:7d:26:8c:c5:7f:97:2f:db:9a:eb:cd:4b:51:c1:45:d9: 11:02:06:33:b6:82:b5:7a:90:ef:5c:fc:d1:bd:15:94:76:fd: 36:00:43:06:7b:5f:b9:61:7c:69:ae:24:73:14:6f:cc:d6:10: b3:3a:c6:d2 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUKeyq2VaW9prLnE5JhAI8W56D5g4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0NDM1OFoX DTI0MDcyOTA0NDg1OFowMzExMC8GA1UEAxMoQzgyQTgwQURDQkQ4MzZGNEQ4RDVF NEU5ODA4OEMzRUNCQ0FGMThENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+c2i4c/+m6A7vCkh98emc0h9pcvZPbiCVK7sr6HgBN/7gx3VLAOCCYgw2O pQRmAxXjvlnE7M80d/pRBJxyjzt3KuCWQ2+oqc8J+/ejmlLQ4Gqwj2mxWIdKeeXl IUASZ8AxIe7+XxQPlhFWBSG3yCtLMC/cr/b7xwXf9MtrlrB4BPLSiOoZRrW4UdoO YCfTS2yF2257t+sSF4ocl/o/dbJaMvf4SMUl3vbKKD8USKnLlxhStL67J6tHYXHr IGVqFzseyEOaeFGnlwgvhz1F7QW7BleN7VjCBl2ft+SYwE4VyydTWaJ+aS4ilLJE 98yQinWexfBNcYFk02vJSduGBc0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMgqgK3L2Db02NXk6YCIw+y8rxjXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzJhYjA2Mi04NzAzLTRkYTYtYWQ3Mi04MGQyNWFlOGJmNWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjMmFiMDYy LTg3MDMtNGRhNi1hZDcyLTgwZDI1YWU4YmY1Zi8wL0M4MkE4MEFEQ0JEODM2RjRE OEQ1RTRFOTgwODhDM0VDQkNBRjE4RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnl+IwDQQCAAIwBwMFACQGIcAwDQYJKoZIhvcNAQELBQADggEBAIi9VDhj8zgz uo3m749aZ5Hx2nNV4jWLM2iDEJlq8kVTi3H2EuQQKX0s99u969vqwZqgqyb4JB7T SyCcriEauvDpPCuuFP0yJT7xj3qbILq8Nt3NaUlJe6jfm5ZY6eiHfWrH/gfjBxoh A+n2xhTSp3AvE72mdAAlIEzLnwWkGHwIGNFSiJlu7XrENLmTg69oXrzYVe83tFVs nH4LLINPrEYKwhCvx3j152GZv1jpjG9MwAOrursBEJ7mpTwUP/hX88BIqzJuHeMR fSaMxX+XL9ua681LUcFF2RECBjO2grV6kO9c/NG9FZR2/TYAQwZ7X7lhfGmuJHMU b8zWELM6xtI= -----END CERTIFICATE-----Generated at Wed May 8 14:59:59 2024 by rpki-client on console-ams.rpki-client.org