$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer (raw, json) Hash identifier: mGsukW5iEVBawjYpfE4mpxli8NI18uMEaa5mg6a+Wmg= Subject key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3FBEF1C2E2833CC18FE05F67D594DB9850049430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft caRepository: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 07:41:01 +0000 Certificate not after: Mon 29 Jul 2024 07:46:01 +0000 Subordinate resources: IP: 43.247.12.0/22 IP: 103.29.164.0/22 IP: 119.110.64.0/20 IP: 122.144.0.0/21 IP: 175.103.32.0/19 IP: 203.173.88.0/22 IP: 2404:3900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:f1:c2:e2:83:3c:c1:8f:e0:5f:67:d5:94:db:98:50:04:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 07:41:01 2023 GMT Not After : Jul 29 07:46:01 2024 GMT Subject: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:b1:c5:9d:0b:5e:12:48:98:8a:f0:40:66: 55:5a:63:20:b4:37:ef:5b:fd:31:87:8f:5d:fa:ba: ea:f1:d2:41:c8:5f:5c:6f:24:6b:dd:81:44:c1:0f: de:b2:19:7c:53:0e:21:12:aa:33:f6:8a:9b:a3:00: 64:8b:2f:a9:94:ab:93:b0:08:50:55:45:c8:a0:73: 91:46:df:55:dd:4a:6e:52:69:b7:05:b3:cc:da:b3: 4a:47:08:c5:54:fd:da:dd:24:70:bf:2e:86:3f:77: f5:90:fc:13:a3:49:0d:da:ed:5a:af:2f:07:a4:a5: 6f:e1:d5:0f:36:bf:dd:d2:88:6d:b3:84:19:0a:23: 8e:7e:53:3f:97:73:5e:79:d8:2a:2e:b1:d8:dc:ff: a3:6e:a4:e5:67:db:21:2d:d4:06:ce:f4:e8:c0:fd: 8c:3a:fc:f5:1f:88:93:2c:4c:2d:d2:0a:a9:2e:d6: 45:82:55:c5:7b:84:23:71:cd:2f:74:d1:5d:de:52: ce:db:6a:a2:24:89:1b:b8:16:94:73:f4:b6:51:d3: 9b:7e:cf:6e:c9:16:e5:59:5c:46:03:d2:77:63:02: 62:b3:ea:09:a3:80:50:db:ca:c4:80:78:5c:3d:8e: 66:5d:30:ec:db:20:3b:73:51:ad:af:10:d1:ab:c0: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.12.0/22 103.29.164.0/22 119.110.64.0/20 122.144.0.0/21 175.103.32.0/19 203.173.88.0/22 IPv6: 2404:3900::/32 Signature Algorithm: sha256WithRSAEncryption 93:bb:76:dd:0e:ca:f8:78:69:cf:2b:8e:6a:17:1f:9f:f6:c7: 3a:c5:5f:1c:c7:df:a4:ce:a1:f0:46:4f:a3:29:d9:33:96:78: 26:5a:59:85:e8:e1:2f:c3:a4:b4:e1:50:e7:cc:e6:b8:9a:a3: 46:88:aa:ad:ee:d6:26:08:a6:0b:0a:f9:e3:8e:19:67:37:54: 87:16:cc:c0:1a:f1:bb:82:de:b9:12:61:6d:ad:5d:57:f5:c9: 54:c9:08:39:4e:af:8a:32:b8:4b:19:9c:a7:32:79:88:76:b6: 76:7f:ec:40:4e:4b:74:19:73:c0:30:ea:a5:c6:02:a9:dd:a7: c9:17:0b:db:28:3e:df:48:90:e6:fd:b2:32:62:28:20:09:7f: 47:c8:d8:dc:ab:ea:5c:89:2a:56:15:2e:07:01:e8:f0:fb:b2: 60:2b:09:4a:1f:45:4a:47:e1:5d:85:7a:3f:94:74:56:17:ec: bf:8e:f1:86:8b:25:68:e9:b7:d4:0f:9c:8f:87:22:ec:a9:65: eb:0f:24:e3:3f:18:76:87:a7:d9:46:ed:21:ce:26:54:fa:2a: af:67:9f:3f:ce:c1:49:ea:5a:29:8d:44:25:4a:d6:91:0b:17: 6c:69:f4:45:09:7c:a5:7b:ad:b6:06:99:1a:96:54:4d:a4:05: 5c:6b:90:4f -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUP77xwuKDPMGP4F9n1ZTbmFAElDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA3NDEwMVoX DTI0MDcyOTA3NDYwMVowMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJC M0IwRjRFNDVBMjMzMUY4MDJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLAscWdC14SSJiK8EBmVVpjILQ371v9MYePXfq66vHSQchfXG8ka92BRMEP 3rIZfFMOIRKqM/aKm6MAZIsvqZSrk7AIUFVFyKBzkUbfVd1KblJptwWzzNqzSkcI xVT92t0kcL8uhj939ZD8E6NJDdrtWq8vB6Slb+HVDza/3dKIbbOEGQojjn5TP5dz XnnYKi6x2Nz/o26k5WfbIS3UBs706MD9jDr89R+IkyxMLdIKqS7WRYJVxXuEI3HN L3TRXd5SzttqoiSJG7gWlHP0tlHTm37PbskW5VlcRgPSd2MCYrPqCaOAUNvKxIB4 XD2OZl0w7NsgO3NRra8Q0avALoECAwEAAaOCAuUwggLhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMjdXYT6+r9+r2KzsPTkWiMx+ALhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZl LTA4OTUtNDc1OS1hNzdjLWEwNmNlMTRlMjQzYy8wL0M4REQ1RDg0RkFGQUJGN0VB RjYyQjNCMEY0RTQ1QTIzMzFGODAyRTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQD BAIr9wwDBAJnHaQDBAR3bkADBAN6kAADBAWvZyADBALLrVgwDQQCAAIwBwMFACQE OQAwDQYJKoZIhvcNAQELBQADggEBAJO7dt0Oyvh4ac8rjmoXH5/2xzrFXxzH36TO ofBGT6Mp2TOWeCZaWYXo4S/DpLThUOfM5riao0aIqq3u1iYIpgsK+eOOGWc3VIcW zMAa8buC3rkSYW2tXVf1yVTJCDlOr4oyuEsZnKcyeYh2tnZ/7EBOS3QZc8Aw6qXG Aqndp8kXC9soPt9IkOb9sjJiKCAJf0fI2Nyr6lyJKlYVLgcB6PD7smArCUofRUpH 4V2Fej+UdFYX7L+O8YaLJWjpt9QPnI+HIuypZesPJOM/GHaHp9lG7SHOJlT6Kq9n nz/OwUnqWimNRCVK1pELF2xp9EUJfKV7rbYGmRqWVE2kBVxrkE8= -----END CERTIFICATE-----Generated at Wed May 8 10:06:56 2024 by rpki-client on console-ams.rpki-client.org