$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer File: DA8766A90851AE44D76B8563D83586F0164FE5CF.cer (raw, json) Hash identifier: e9yjOFda/9Lnaw8LJeiUnnbN86EynaF63QV+Pfy6xOU= Subject key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 354CE4FF7FE2E6F4D44539B2A42401AB37EDB6E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft caRepository: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 02:00:54 +0000 Certificate not after: Tue 01 Jul 2025 02:05:54 +0000 Subordinate resources: IP: 103.147.52.0/23 IP: 2405:aac0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:e4:ff:7f:e2:e6:f4:d4:45:39:b2:a4:24:01:ab:37:ed:b6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 02:00:54 2024 GMT Not After : Jul 1 02:05:54 2025 GMT Subject: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:8c:42:03:b5:af:fc:e0:9e:fc:0d:44:d5: 02:97:dc:e2:2f:ea:57:03:ed:62:99:6c:29:61:60: 97:d6:7c:cb:71:df:65:55:38:8a:33:a4:f7:3d:ba: 5a:29:42:25:af:67:dd:52:42:e5:8f:f2:bf:9f:01: b9:fe:45:70:e5:dc:4c:16:32:2f:80:60:02:37:9b: 0e:25:1f:0a:b6:c9:c8:37:14:e8:15:0a:ef:42:d3: b6:7a:a3:54:33:33:89:c2:c4:57:ac:eb:bd:4a:fd: 5f:38:ae:53:eb:00:d8:76:39:ad:ac:b8:a1:45:0f: 23:ac:3e:da:ea:b6:ba:46:22:4f:09:93:ff:11:ab: 5d:d5:93:22:4e:4b:78:67:a6:b3:b1:be:40:bc:52: e1:b8:f6:85:c8:e9:6f:38:22:7f:f9:8f:cd:8c:09: c7:c2:19:3c:1b:27:10:5f:4f:ed:34:a0:09:98:d2: 54:10:72:fa:9d:23:61:d8:d6:a7:38:f1:78:0b:79: b7:da:09:5d:2c:38:57:8e:83:88:fe:de:d8:0e:fc: c2:9d:be:b7:93:d4:c5:b2:c0:f5:8d:1f:15:e7:39: 46:a8:6b:34:d2:43:04:48:b4:4b:b0:a6:ba:60:df: 22:63:72:40:8d:70:2a:d2:ca:19:4d:98:8e:b5:0a: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.52.0/23 IPv6: 2405:aac0::/32 Signature Algorithm: sha256WithRSAEncryption 06:94:76:24:92:88:12:fe:43:01:ed:7f:54:33:46:74:aa:4d: 86:90:c4:1f:b7:04:3e:0b:3a:e8:77:f9:1b:f3:9a:6d:3a:1a: 5f:00:24:7f:0a:74:2d:b7:d0:df:8a:18:e5:b4:69:65:b3:b6: c3:07:a8:52:e8:e9:a6:62:b1:12:6d:14:82:80:89:8a:6f:e1: f5:cd:11:50:fc:49:b8:41:3d:80:46:3d:24:4a:8c:05:46:24: c8:e6:d9:fa:c7:42:85:7d:7d:13:9f:60:57:55:96:34:ce:05: f3:72:85:60:55:3a:d9:ed:8a:ec:e1:34:6a:18:86:3b:3e:b3: 8c:65:eb:e8:2e:56:10:4d:40:98:92:fc:9b:64:cc:fd:27:b5: 04:73:f4:fc:ad:f0:52:f9:72:a8:2f:90:63:fd:a7:d3:2e:a5: 14:88:5a:3f:d9:0b:bb:6d:54:36:e4:e2:5d:88:38:b4:33:cd: 53:0f:9c:5a:a4:64:5f:10:62:eb:fc:6d:ba:02:e5:ec:29:73: 7d:92:fd:8b:5a:69:13:2f:22:fd:3e:23:9f:9c:32:e1:17:97: 33:67:9a:62:44:a5:ed:f8:08:45:3b:74:c0:e0:ee:17:e6:91: 3a:05:9e:64:fb:6d:b9:0e:87:4c:f3:d9:50:f6:36:5a:c7:f2: 08:18:5c:ae -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUNUzk/3/i5vTURTmypCQBqzfttuUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAyMDA1NFoX DTI1MDcwMTAyMDU1NFowMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4 NTYzRDgzNTg2RjAxNjRGRTVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLyjEIDta/84J78DUTVApfc4i/qVwPtYplsKWFgl9Z8y3HfZVU4ijOk9z26 WilCJa9n3VJC5Y/yv58Buf5FcOXcTBYyL4BgAjebDiUfCrbJyDcU6BUK70LTtnqj VDMzicLEV6zrvUr9XziuU+sA2HY5ray4oUUPI6w+2uq2ukYiTwmT/xGrXdWTIk5L eGems7G+QLxS4bj2hcjpbzgif/mPzYwJx8IZPBsnEF9P7TSgCZjSVBBy+p0jYdjW pzjxeAt5t9oJXSw4V46DiP7e2A78wp2+t5PUxbLA9Y0fFec5RqhrNNJDBEi0S7Cm umDfImNyQI1wKtLKGU2YjrUKv/UCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNqHZqkIUa5E12uFY9g1hvAWT+XPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMz LWNkNGQtNDYyMC05MzcyLWU2ZTAzOWZjMDZiOS8wL0RBODc2NkE5MDg1MUFFNDRE NzZCODU2M0Q4MzU4NkYwMTY0RkU1Q0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkzQwDQQCAAIwBwMFACQFqsAwDQYJKoZIhvcNAQELBQADggEBAAaUdiSSiBL+ QwHtf1QzRnSqTYaQxB+3BD4LOuh3+Rvzmm06Gl8AJH8KdC230N+KGOW0aWWztsMH qFLo6aZisRJtFIKAiYpv4fXNEVD8SbhBPYBGPSRKjAVGJMjm2frHQoV9fROfYFdV ljTOBfNyhWBVOtntiuzhNGoYhjs+s4xl6+guVhBNQJiS/JtkzP0ntQRz9Pyt8FL5 cqgvkGP9p9MupRSIWj/ZC7ttVDbk4l2IOLQzzVMPnFqkZF8QYuv8bboC5ewpc32S /YtaaRMvIv0+I5+cMuEXlzNnmmJEpe34CEU7dMDg7hfmkToFnmT7bbkOh0zz2VD2 NlrH8ggYXK4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org