$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer (raw, json) Hash identifier: sIzS7wC0YMlpD/pc3DftKJ77aNmkAHvoS0Ks3AXivg8= Subject key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C76FA6815E081A6580068694B67250937DCCFCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft caRepository: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Nov 2024 18:01:24 +0000 Certificate not after: Mon 17 Nov 2025 18:06:24 +0000 Subordinate resources: IP: 103.191.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:76:fa:68:15:e0:81:a6:58:00:68:69:4b:67:25:09:37:dc:cf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 18:01:24 2024 GMT Not After : Nov 17 18:06:24 2025 GMT Subject: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:15:25:84:08:53:d6:47:36:8a:75:47:3e: 12:9a:24:37:1b:83:c8:cc:b6:33:9e:25:ab:ce:cc: 9a:04:d3:c1:96:45:2e:51:18:e6:6a:27:ab:54:32: 00:87:26:a6:50:29:76:66:28:23:30:e6:4d:77:5a: 43:fe:ff:26:26:08:1a:70:32:77:89:29:ee:ab:68: 56:24:c7:00:43:0f:e2:8b:97:c0:c8:02:f5:c1:60: 9b:fc:4a:ac:71:17:ff:5a:fb:4e:d9:d4:30:bc:3d: 21:40:4c:89:53:36:b6:76:56:4d:28:50:df:4e:a2: 44:ca:79:85:94:0f:43:5b:e2:cf:22:25:80:1e:95: 3e:dd:9f:dd:c5:50:c4:40:93:c7:a2:c9:68:8e:70: c9:87:b9:25:cd:fd:82:0e:ce:6d:ad:67:8d:00:65: 74:61:1c:97:8c:80:1f:21:58:13:e1:62:2d:d6:30: 4a:02:a2:3e:c0:f4:c8:32:77:ec:78:7e:ca:21:6b: 32:2d:d8:c8:01:95:d2:82:f4:02:0a:86:25:4f:6d: 0b:e6:93:93:94:d5:17:fa:58:c0:b6:2d:a4:62:f1: e2:d4:68:79:2c:cc:c7:31:04:84:05:7f:ce:0c:80: e1:87:e5:b4:b1:5f:14:03:3c:00:4b:52:19:47:fc: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.200.0/23 Signature Algorithm: sha256WithRSAEncryption 00:12:7d:2f:38:4e:35:4d:1e:53:7a:a8:5b:d2:a2:6b:b8:91: fa:84:54:95:4c:93:14:42:0a:0a:ad:a5:e0:76:5a:e8:1d:dd: 81:15:f0:53:80:b1:5c:a3:b4:8c:3f:a8:fd:78:59:b3:1d:a7: ae:6e:dd:64:c7:5f:06:79:47:79:cb:31:0d:b9:54:ce:fd:d1: a7:62:08:01:e1:41:b6:09:cb:72:2d:c1:77:56:6f:72:7e:c8: df:7a:a5:a5:e9:e3:37:c7:72:79:fa:c5:7c:a4:66:1f:7a:9d: 11:04:f4:e5:f7:77:c8:8d:5c:65:58:64:78:5e:49:7b:d5:ac: ee:2c:be:13:5e:79:d0:14:5e:40:70:63:7b:76:a1:67:bf:96: 19:d5:dc:15:ab:3b:6d:48:ef:13:0a:0d:82:3a:4e:90:04:ae: c8:d6:9a:8a:7f:63:28:a8:f7:17:cd:88:74:39:b8:6f:ee:16: d4:f2:5f:a9:69:8b:87:9c:0a:78:59:e7:f7:08:5f:1d:32:1b: 79:15:d5:dc:be:b5:b8:9b:d0:50:0c:f4:22:7f:68:7a:10:f5: 9e:38:8d:ca:69:33:8e:b2:59:e9:10:72:08:a4:11:d8:f3:58: a2:98:1e:a7:c8:6e:52:16:a5:45:52:af:41:78:99:42:22:52: 58:b3:b8:8e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPHb6aBXggaZYAGhpS2clCTfcz8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExODE4MDEyNFoX DTI1MTExNzE4MDYyNFowMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVE RTRDRTk5NDYzMkMwRDNBMjUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4hFSWECFPWRzaKdUc+EpokNxuDyMy2M54lq87MmgTTwZZFLlEY5monq1Qy AIcmplApdmYoIzDmTXdaQ/7/JiYIGnAyd4kp7qtoViTHAEMP4ouXwMgC9cFgm/xK rHEX/1r7TtnUMLw9IUBMiVM2tnZWTShQ306iRMp5hZQPQ1vizyIlgB6VPt2f3cVQ xECTx6LJaI5wyYe5Jc39gg7Oba1njQBldGEcl4yAHyFYE+FiLdYwSgKiPsD0yDJ3 7Hh+yiFrMi3YyAGV0oL0AgqGJU9tC+aTk5TVF/pYwLYtpGLx4tRoeSzMxzEEhAV/ zgyA4YfltLFfFAM8AEtSGUf8z5sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNgHtadxbLVtA27eTOmUYywNOiUBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwM2U3MWZl LWFkMzMtNGQxMi04NzIwLTQzMTQzZmYwMWRiZi8wL0Q4MDdCNUE3NzE2Q0I1NkQw MzZFREU0Q0U5OTQ2MzJDMEQzQTI1MDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8gwDQYJKoZIhvcNAQELBQADggEBAAASfS84TjVNHlN6qFvSomu4kfqEVJVM kxRCCgqtpeB2Wugd3YEV8FOAsVyjtIw/qP14WbMdp65u3WTHXwZ5R3nLMQ25VM79 0adiCAHhQbYJy3ItwXdWb3J+yN96paXp4zfHcnn6xXykZh96nREE9OX3d8iNXGVY ZHheSXvVrO4svhNeedAUXkBwY3t2oWe/lhnV3BWrO21I7xMKDYI6TpAErsjWmop/ Yyio9xfNiHQ5uG/uFtTyX6lpi4ecCnhZ5/cIXx0yG3kV1dy+tbib0FAM9CJ/aHoQ 9Z44jcppM46yWekQcgikEdjzWKKYHqfIblIWpUVSr0F4mUIiUlizuI4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org