$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer (raw, json) Hash identifier: /ukGWWkkZa0iVW7YAe9w+ww/TSLmy+lUQwNnm9TMmtY= Subject key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E1F1D273064CBFD386348F0C6EC015BFAA37A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft caRepository: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 Jun 2023 16:13:55 +0000 Certificate not after: Wed 05 Jun 2024 16:18:55 +0000 Subordinate resources: IP: 103.189.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1f:1d:27:30:64:cb:fd:38:63:48:f0:c6:ec:01:5b:fa:a3:7a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 7 16:13:55 2023 GMT Not After : Jun 5 16:18:55 2024 GMT Subject: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:96:5a:c9:7a:4f:04:32:e8:77:f3:a0:57: 26:38:d6:f0:f0:2d:10:63:b6:db:6b:48:1e:f5:c0: 1e:f9:7c:cf:a6:1b:87:43:81:4a:61:2e:8f:37:23: 15:df:55:48:aa:6a:15:ca:4c:ca:2b:c0:0c:bf:52: a0:bb:45:77:14:5a:d0:76:d1:22:ef:3d:1c:af:98: 16:42:71:98:1b:57:81:e5:05:c1:b2:66:08:e0:53: ab:a0:a6:5a:3a:42:52:8d:8f:90:bb:c7:85:98:4e: a8:f4:9f:c3:71:fc:2d:6a:b5:0e:4d:10:2f:ed:bf: ec:6c:3e:62:b2:1f:7c:df:70:01:6c:bc:18:0c:d9: 9a:28:b1:a7:85:f8:b5:52:eb:b4:ed:2f:7a:24:c4: 4b:25:f6:6d:e2:f2:3a:5f:94:39:2f:4d:93:f5:2a: b3:7b:c4:b4:49:a0:10:f1:0b:c8:6b:a3:34:3d:6f: 9f:62:ea:a5:a9:1e:a0:d5:fd:ea:41:f7:68:8b:06: ef:c3:e0:9c:eb:9c:47:22:4d:bd:4b:aa:b0:05:5c: 7f:e1:8a:b4:f9:0e:e3:df:ca:12:a6:2a:b3:35:3a: 05:c5:5a:2f:32:0c:59:67:be:ae:06:64:bd:ef:b4: d4:b5:48:80:e0:ed:5b:d0:bd:f5:01:1e:44:f1:3f: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.116.0/23 Signature Algorithm: sha256WithRSAEncryption 26:94:90:ec:6e:e8:f6:49:84:b9:2a:45:af:6e:68:41:b3:b6: 4a:04:f3:af:54:93:da:b9:76:e7:c4:ca:fa:47:c2:d1:7a:f3: 3c:d2:b5:85:ec:97:04:75:00:07:16:b3:74:b2:88:b1:43:b0: aa:7d:5f:5b:54:f7:ab:c9:47:32:d7:79:d1:fa:6b:7d:89:8b: c3:8a:b8:0c:55:bf:d8:05:44:aa:4c:62:61:1f:5c:90:b8:98: 23:7d:3d:84:dd:68:68:77:9c:14:bc:45:9b:65:eb:d8:36:ab: f3:5d:49:eb:41:85:3a:da:7f:28:63:cf:5b:a0:5d:d9:8b:2d: 18:c0:1a:75:09:2e:34:3a:86:67:64:2e:04:10:1f:67:52:6b: cd:93:b3:d4:43:64:ff:8f:d6:28:55:39:38:dc:8f:c9:98:15: f8:c1:83:03:82:5a:df:77:4c:47:69:a9:ff:4d:95:b0:c7:1e: 58:de:20:17:20:a7:c5:a0:dc:c9:d6:73:4e:df:b6:9b:6d:00: 21:3b:31:d4:18:6a:87:f9:5d:c5:c6:f2:72:9c:dc:ad:17:33: 08:44:c7:af:bb:1e:c7:59:33:59:17:4c:3f:99:42:b1:80:79: ee:05:bf:a6:d0:f1:9d:97:22:e7:17:7e:22:73:3e:d9:7d:84: c4:6b:39:fe -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDh8dJzBky/04Y0jwxuwBW/qjeowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwNzE2MTM1NVoX DTI0MDYwNTE2MTg1NVowMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0Yx MEI4N0YzOUE5NEJFMURCM0RDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4zllrJek8EMuh386BXJjjW8PAtEGO222tIHvXAHvl8z6Ybh0OBSmEujzcj Fd9VSKpqFcpMyivADL9SoLtFdxRa0HbRIu89HK+YFkJxmBtXgeUFwbJmCOBTq6Cm WjpCUo2PkLvHhZhOqPSfw3H8LWq1Dk0QL+2/7Gw+YrIffN9wAWy8GAzZmiixp4X4 tVLrtO0veiTESyX2beLyOl+UOS9Nk/Uqs3vEtEmgEPELyGujND1vn2LqpakeoNX9 6kH3aIsG78PgnOucRyJNvUuqsAVcf+GKtPkO49/KEqYqszU6BcVaLzIMWWe+rgZk ve+01LVIgODtW9C99QEeRPE/V7MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi3yOXdvdA2UT8QuH85qUvh2z3KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMDVhYjMw LTU2NTMtNDJiYy05YzNmLWFhZjU2N2VhZTcwMS8wL0Y4QjdDOEU1RERCREQwMzY1 MTNGMTBCODdGMzlBOTRCRTFEQjNEQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXQwDQYJKoZIhvcNAQELBQADggEBACaUkOxu6PZJhLkqRa9uaEGztkoE869U k9q5dufEyvpHwtF68zzStYXslwR1AAcWs3SyiLFDsKp9X1tU96vJRzLXedH6a32J i8OKuAxVv9gFRKpMYmEfXJC4mCN9PYTdaGh3nBS8RZtl69g2q/NdSetBhTrafyhj z1ugXdmLLRjAGnUJLjQ6hmdkLgQQH2dSa82Ts9RDZP+P1ihVOTjcj8mYFfjBgwOC Wt93TEdpqf9NlbDHHljeIBcgp8Wg3MnWc07ftpttACE7MdQYaof5XcXG8nKc3K0X MwhEx6+7HsdZM1kXTD+ZQrGAee4Fv6bQ8Z2XIucXfiJzPtl9hMRrOf4= -----END CERTIFICATE-----Generated at Wed May 8 15:00:01 2024 by rpki-client on console-ams.rpki-client.org