$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer (raw, json) Hash identifier: ksYmSwvhbbmIsOOGl0E2EJ3G4qErBi9H3jVQXarNyjs= Subject key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 36954FB48DFA3C80B8997BD9903614E1363A3CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft caRepository: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 31 Jan 2024 11:40:43 +0000 Certificate not after: Wed 29 Jan 2025 11:45:43 +0000 Subordinate resources: IP: 103.195.65.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:95:4f:b4:8d:fa:3c:80:b8:99:7b:d9:90:36:14:e1:36:3a:3c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 31 11:40:43 2024 GMT Not After : Jan 29 11:45:43 2025 GMT Subject: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:10:07:54:91:01:0e:0e:a1:ab:6c:bd:6a: 48:9f:57:ce:45:eb:19:b0:37:c3:bb:4d:e8:1f:5f: 24:2d:8e:d8:4f:ac:ae:09:e5:bc:e6:a3:1d:3d:ac: e1:6d:dd:1f:23:60:52:aa:3e:4a:61:a2:34:d2:5a: 81:e3:0a:3a:3f:80:c7:3a:c2:16:3a:1c:3e:6d:43: b4:bb:ad:1f:a5:c6:44:18:97:08:de:0b:c5:6f:87: d6:5c:08:9d:f5:95:c8:02:82:42:93:d8:ea:b0:27: 26:14:2c:a7:d3:5c:0d:8c:c6:51:c3:c2:bf:9e:4a: a3:26:e2:61:88:9f:d7:fa:cb:a0:28:98:9d:f4:5e: 40:de:e0:86:ce:65:24:7e:92:c6:96:5c:f8:0c:a5: 5f:ee:5f:dc:c4:aa:fb:86:3c:9e:5f:5d:a5:f7:05: 5b:26:f6:25:4a:b8:e6:05:ee:17:90:02:a9:b4:cc: ec:13:53:30:7e:2e:e3:c2:f3:12:9b:18:aa:f5:3e: 3c:4c:44:47:f1:de:d3:46:00:c7:16:a1:89:48:d0: 61:af:76:96:5d:00:98:b1:1d:59:60:c7:da:a3:5e: aa:ce:e0:2b:db:2b:7c:45:5d:44:95:f5:61:3a:46: 31:e9:21:8f:9a:a5:d0:29:6c:26:ec:38:99:c2:e7: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.65.0/24 Signature Algorithm: sha256WithRSAEncryption 37:24:15:04:3c:13:aa:d2:ed:17:bb:0c:e7:e9:51:c9:64:81: 7a:71:4c:d3:a1:d3:4e:b7:b2:b5:da:39:25:d4:9d:8e:ae:55: 91:c2:4a:44:60:db:fd:f1:3e:a3:a6:da:60:56:87:c1:35:5c: de:12:bb:05:6d:c4:2c:a8:6b:1d:8f:45:c1:84:dc:37:00:24: 85:36:7f:84:4c:6b:39:cc:a0:81:0e:30:06:ee:27:f2:8e:53: 3f:e8:7f:a2:10:b3:d2:d8:96:a9:85:f2:b3:c8:40:2a:20:79: bd:0b:22:a3:fd:32:28:13:4d:7f:41:e7:6c:b4:17:62:42:be: ec:58:06:82:8c:28:9d:39:e3:0c:63:21:a4:b7:7d:f6:b4:95: 21:23:71:8a:d4:b3:94:f4:7d:6b:0c:7c:43:88:f6:f1:2b:db: c1:74:2a:37:74:70:4e:8b:c9:ba:d4:af:89:2d:fc:d8:9f:5a: 40:f6:e0:29:65:22:e9:ec:e1:39:c0:79:43:b0:7b:0a:a0:11: 91:b7:ae:e3:7c:91:bb:e6:90:a0:d5:00:ed:b1:93:50:31:c5: 0a:62:39:77:66:68:59:6b:53:c0:ac:0f:10:99:ec:a1:2c:99: e9:88:e9:1f:ba:c0:8a:2c:de:62:9c:e3:4d:17:ad:0a:e4:a9: 08:55:ba:f5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNpVPtI36PIC4mXvZkDYU4TY6PP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEzMTExNDA0M1oX DTI1MDEyOTExNDU0M1owMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMx REI1RTBDRDFFRjIwMkZDMjFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiwEAdUkQEODqGrbL1qSJ9XzkXrGbA3w7tN6B9fJC2O2E+srgnlvOajHT2s 4W3dHyNgUqo+SmGiNNJageMKOj+AxzrCFjocPm1DtLutH6XGRBiXCN4LxW+H1lwI nfWVyAKCQpPY6rAnJhQsp9NcDYzGUcPCv55KoybiYYif1/rLoCiYnfReQN7ghs5l JH6SxpZc+AylX+5f3MSq+4Y8nl9dpfcFWyb2JUq45gXuF5ACqbTM7BNTMH4u48Lz EpsYqvU+PExER/He00YAxxahiUjQYa92ll0AmLEdWWDH2qNeqs7gK9srfEVdRJX1 YTpGMekhj5ql0ClsJuw4mcLndKkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjhLwpDPItzO+MdteDNHvIC/CHqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2 LTQ5ZGUtNDNiMS1hMTUyLWIxOGQxMWFkYTUyOS8wL0Y4RTEyRjBBNDMzQzhCNzMz QkUzMURCNUUwQ0QxRUYyMDJGQzIxRUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnw0EwDQYJKoZIhvcNAQELBQADggEBADckFQQ8E6rS7Re7DOfpUclkgXpxTNOh 0063srXaOSXUnY6uVZHCSkRg2/3xPqOm2mBWh8E1XN4SuwVtxCyoax2PRcGE3DcA JIU2f4RMaznMoIEOMAbuJ/KOUz/of6IQs9LYlqmF8rPIQCogeb0LIqP9MigTTX9B 52y0F2JCvuxYBoKMKJ054wxjIaS3ffa0lSEjcYrUs5T0fWsMfEOI9vEr28F0Kjd0 cE6LybrUr4kt/NifWkD24CllIuns4TnAeUOwewqgEZG3ruN8kbvmkKDVAO2xk1Ax xQpiOXdmaFlrU8CsDxCZ7KEsmemI6R+6wIos3mKc400XrQrkqQhVuvU= -----END CERTIFICATE-----Generated at Wed May 8 18:12:23 2024 by rpki-client on console-fra.rpki-client.org