$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer File: CB8106D827747D008C9DE9181B4EC6739C8EE800.cer (raw, json) Hash identifier: zBpnXn8DCbuJVUBH1SyQMyRVrZAvfi3+zC1ANMFU5jE= Subject key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4974B5AF607007F24A9C1F26768AB9996EAD53B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft caRepository: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 17:31:25 +0000 Certificate not after: Mon 30 Jun 2025 17:36:25 +0000 Subordinate resources: IP: 103.21.204.0/22 IP: 103.248.196.0/22 IP: 2400:f340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:74:b5:af:60:70:07:f2:4a:9c:1f:26:76:8a:b9:99:6e:ad:53:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 17:31:25 2024 GMT Not After : Jun 30 17:36:25 2025 GMT Subject: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:e4:e6:f3:c6:14:2f:33:5e:d6:55:d0:c9: 1a:9e:f6:86:93:ba:7f:00:f8:4e:67:52:f5:8a:c3: f3:39:5d:98:2d:6f:ac:ac:71:05:92:ec:d8:22:36: f4:b3:31:86:57:f0:e5:12:68:83:ea:9e:71:40:19: 3f:f3:0d:32:3c:0e:98:f4:bb:cd:bf:1c:89:92:18: 1d:cc:ff:77:8c:57:eb:29:92:d8:98:80:42:ce:31: 65:86:0a:57:ee:ac:fb:48:f5:75:8a:a6:4e:bc:82: 01:60:b9:97:24:8b:fc:19:67:c6:d8:08:d1:da:75: 5b:50:c5:bb:d9:1e:1e:9f:20:bb:f3:8b:ae:ea:30: 4d:83:d6:67:78:54:5b:14:6e:d6:a6:fb:81:95:ce: ad:db:a5:3c:8a:cf:29:4b:3f:7d:4f:86:a9:38:4e: 81:fb:45:cd:9e:a4:ab:c2:53:48:ed:15:5e:6c:7f: 98:3b:b7:52:8c:e5:f6:68:a5:33:bb:dc:57:34:9f: c5:9f:2d:c4:22:d4:94:9e:58:be:29:34:85:b5:fb: db:18:ac:59:fb:24:d7:02:29:92:a7:93:db:24:9f: e0:8c:f5:bd:42:4e:ac:bc:5e:3b:d4:2b:cc:e9:cd: 7f:1c:f9:3d:b6:14:95:87:88:48:27:33:1d:ae:6e: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.204.0/22 103.248.196.0/22 IPv6: 2400:f340::/32 Signature Algorithm: sha256WithRSAEncryption 07:8f:76:c0:1c:2f:1f:9e:b7:5b:c1:e9:d5:48:ff:25:bc:f9: 1d:ec:f2:6d:22:52:fd:3f:d3:b0:d2:1d:28:e6:28:e5:e7:6a: 0a:56:c7:97:1b:34:10:07:67:8a:fd:86:db:26:5a:3c:d8:9d: 88:5b:44:78:c9:e0:9f:5f:b1:24:19:d6:cb:ca:d8:b3:f0:19: 9e:1a:8b:54:f5:6a:f8:f6:23:41:d5:b5:3c:2a:cb:44:73:1b: f2:d6:7e:76:47:ce:8a:d6:d6:0f:09:34:b1:94:87:ca:12:ca: e1:f1:ad:ed:48:a3:bc:d7:10:75:2f:9b:05:6b:56:b9:3e:62: 24:92:a3:5a:75:81:5e:9c:d5:76:b8:d4:1d:f8:d5:7a:1d:77: b6:36:4e:ea:50:97:30:a8:b1:8c:46:b5:13:3e:28:2f:0a:8e: 3a:8b:64:6d:f6:5a:ee:60:db:a6:a6:f6:72:30:17:d1:47:21: 29:68:31:2b:4b:21:dd:05:5c:6a:0a:2d:ed:11:4e:d2:0a:4e: 1f:29:8b:9f:9d:3c:cf:e0:81:ff:3a:c8:29:74:34:a2:ce:43: a6:da:52:cd:5f:25:77:42:06:60:e3:05:86:1c:08:88:59:ea: cc:e2:37:00:84:6d:75:28:fe:ff:71:c4:5c:80:63:28:31:67: 9d:e4:69:03 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUSXS1r2BwB/JKnB8mdoq5mW6tU7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE3MzEyNVoX DTI1MDYzMDE3MzYyNVowMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURF OTE4MUI0RUM2NzM5QzhFRTgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKly5ObzxhQvM17WVdDJGp72hpO6fwD4TmdS9YrD8zldmC1vrKxxBZLs2CI2 9LMxhlfw5RJog+qecUAZP/MNMjwOmPS7zb8ciZIYHcz/d4xX6ymS2JiAQs4xZYYK V+6s+0j1dYqmTryCAWC5lySL/BlnxtgI0dp1W1DFu9keHp8gu/OLruowTYPWZ3hU WxRu1qb7gZXOrdulPIrPKUs/fU+GqThOgftFzZ6kq8JTSO0VXmx/mDu3Uozl9mil M7vcVzSfxZ8txCLUlJ5Yvik0hbX72xisWfsk1wIpkqeT2ySf4Iz1vUJOrLxeO9Qr zOnNfxz5PbYUlYeISCczHa5uvJECAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuBBtgndH0AjJ3pGBtOxnOcjugAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZTU3OGQw LWQzYWEtNGYwZi1iYjlkLWY3NGI0OWM2YTY1NS8wL0NCODEwNkQ4Mjc3NDdEMDA4 QzlERTkxODFCNEVDNjczOUM4RUU4MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnFcwDBAJn+MQwDQQCAAIwBwMFACQA80AwDQYJKoZIhvcNAQELBQADggEBAAeP dsAcLx+et1vB6dVI/yW8+R3s8m0iUv0/07DSHSjmKOXnagpWx5cbNBAHZ4r9htsm WjzYnYhbRHjJ4J9fsSQZ1svK2LPwGZ4ai1T1avj2I0HVtTwqy0RzG/LWfnZHzorW 1g8JNLGUh8oSyuHxre1Io7zXEHUvmwVrVrk+YiSSo1p1gV6c1Xa41B341Xodd7Y2 TupQlzCosYxGtRM+KC8KjjqLZG32Wu5g26am9nIwF9FHISloMStLId0FXGoKLe0R TtIKTh8pi5+dPM/ggf86yCl0NKLOQ6baUs1fJXdCBmDjBYYcCIhZ6sziNwCEbXUo /v9xxFyAYygxZ53kaQM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org