$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer File: C8AC2212A272ECEAE88D5232072578922C0E2E05.cer (raw, json) Hash identifier: QhRqT/do9CB0L8K9VSfuuXaXGMKRsKSzPWG1LEdaudc= Subject key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 756C1244B022CB204AADE59830415AF70612EFB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft caRepository: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 17 Mar 2024 00:45:55 +0000 Certificate not after: Sun 16 Mar 2025 00:50:55 +0000 Subordinate resources: IP: 103.167.106.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6c:12:44:b0:22:cb:20:4a:ad:e5:98:30:41:5a:f7:06:12:ef:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 17 00:45:55 2024 GMT Not After : Mar 16 00:50:55 2025 GMT Subject: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:99:1b:71:cd:49:67:92:6c:4d:d0:02:d4: 50:7e:ae:ee:b7:bc:8e:69:84:59:d6:ab:1e:70:34: 90:97:41:77:9f:ea:05:e8:58:57:c6:7d:bd:47:c1: e9:d0:e9:bc:2c:c6:8f:f0:bd:a5:68:f0:b7:f1:e4: a1:9c:3f:38:e3:58:39:59:13:8d:af:73:ac:2c:84: 83:a9:69:a1:66:a4:1c:48:1f:9d:a6:d4:02:25:db: 73:d1:41:a7:b5:c5:48:0c:df:25:24:5b:cf:2f:92: 63:ac:23:8e:f6:76:4b:56:da:f3:f7:9e:7c:8d:bf: 25:35:16:13:8c:d7:e0:ca:b2:ea:a7:1d:c2:bb:4f: 53:74:aa:ac:ca:37:9f:b7:43:98:dd:01:09:d8:27: 21:6b:f8:06:68:34:15:4e:04:d7:43:19:fe:b0:c3: 1d:7f:2b:eb:6c:b7:fa:49:e0:70:40:7a:21:99:38: e4:65:d3:1d:d9:c9:d5:29:b1:91:9f:e9:7a:a3:05: 4b:2a:69:44:77:aa:1e:4c:b8:31:ce:26:de:8e:8b: 1e:c3:a3:f8:cd:96:94:d8:a8:84:c4:31:e5:f3:59: 68:3c:78:62:77:9c:bb:3b:76:bf:f3:18:f3:d1:ea: 8a:ff:dd:bc:ca:7d:24:72:1b:26:0e:96:26:4b:74: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.106.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:7d:dc:0b:75:cf:37:00:36:76:c4:97:26:53:0b:8c:41:0a: 06:c3:bf:21:96:09:dd:d4:ac:b0:bc:79:de:b1:f9:5d:24:39: be:fd:4b:c1:e0:96:df:9f:f4:15:1f:fc:5b:83:df:17:f3:23: ba:db:79:eb:10:c3:97:9b:fb:e9:9a:9a:99:c8:c7:5e:c4:f2: 9c:7a:8c:8b:82:f5:f6:10:92:fd:07:68:18:6d:a8:54:89:6f: f3:12:83:be:18:12:c9:5a:84:1f:d7:fa:c2:39:34:4f:83:13: 9c:28:7f:f6:30:f7:32:b0:12:e9:3c:ea:3f:f0:63:e7:50:18: 19:50:1b:57:fd:94:67:e7:26:4b:f0:b2:23:c5:bf:d1:c0:bc: 4e:1d:ea:4d:29:e4:d6:ea:57:b6:57:88:37:ae:11:1a:d1:60: af:10:b0:65:32:66:62:76:79:d3:af:fa:cd:66:1b:b6:c3:ef: 2c:a6:f9:be:8c:a8:1a:d8:e0:25:5f:6a:b2:65:7b:e2:88:70: f6:88:92:9b:d5:85:3a:3d:18:e4:25:9d:c0:20:cd:41:4f:a2: a7:4b:3f:31:85:21:be:7c:48:f9:0a:12:0e:ed:56:84:d7:f9: ae:92:01:51:f5:a4:a0:5c:57:d4:ab:18:45:6b:93:9f:3e:7c: b4:27:6c:d9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdWwSRLAiyyBKreWYMEFa9wYS77EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNzAwNDU1NVoX DTI1MDMxNjAwNTA1NVowMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1 MjMyMDcyNTc4OTIyQzBFMkUwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6YmRtxzUlnkmxN0ALUUH6u7re8jmmEWdarHnA0kJdBd5/qBehYV8Z9vUfB 6dDpvCzGj/C9pWjwt/HkoZw/OONYOVkTja9zrCyEg6lpoWakHEgfnabUAiXbc9FB p7XFSAzfJSRbzy+SY6wjjvZ2S1ba8/eefI2/JTUWE4zX4Mqy6qcdwrtPU3SqrMo3 n7dDmN0BCdgnIWv4Bmg0FU4E10MZ/rDDHX8r62y3+kngcEB6IZk45GXTHdnJ1Smx kZ/peqMFSyppRHeqHky4Mc4m3o6LHsOj+M2WlNiohMQx5fNZaDx4Ynecuzt2v/MY 89Hqiv/dvMp9JHIbJg6WJkt0k9MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMisIhKicuzq6I1SMgcleJIsDi4FMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MWU5MjM4 LTQyNjctNDhlZi1iMDJlLTFkN2QwNDQwMDk0MS8wL0M4QUMyMjEyQTI3MkVDRUFF ODhENTIzMjA3MjU3ODkyMkMwRTJFMDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp2owDQYJKoZIhvcNAQELBQADggEBAFt93At1zzcANnbElyZTC4xBCgbDvyGW Cd3UrLC8ed6x+V0kOb79S8Hglt+f9BUf/FuD3xfzI7rbeesQw5eb++mampnIx17E 8px6jIuC9fYQkv0HaBhtqFSJb/MSg74YEslahB/X+sI5NE+DE5wof/Yw9zKwEuk8 6j/wY+dQGBlQG1f9lGfnJkvwsiPFv9HAvE4d6k0p5NbqV7ZXiDeuERrRYK8QsGUy ZmJ2edOv+s1mG7bD7yym+b6MqBrY4CVfarJle+KIcPaIkpvVhTo9GOQlncAgzUFP oqdLPzGFIb58SPkKEg7tVoTX+a6SAVH1pKBcV9SrGEVrk58+fLQnbNk= -----END CERTIFICATE-----Generated at Wed May 8 04:38:01 2024 by rpki-client on console-fra.rpki-client.org