$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer (raw, json) Hash identifier: Ezq/GDm9RsE/fu4Z+svTHFCNWMeo6RXPjmuIZGpu6Co= Subject key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 64011BE99A90F04E875DC8DB8A98125A0079A68C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft caRepository: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Sep 2024 22:25:51 +0000 Certificate not after: Thu 11 Sep 2025 22:30:51 +0000 Subordinate resources: IP: 103.160.94.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:01:1b:e9:9a:90:f0:4e:87:5d:c8:db:8a:98:12:5a:00:79:a6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 22:25:51 2024 GMT Not After : Sep 11 22:30:51 2025 GMT Subject: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:81:2c:ac:aa:a4:ed:cb:e6:85:c6:56:8e: 70:9a:85:62:8e:b8:9f:dd:dd:bd:1a:d5:98:58:46: b6:6e:bd:11:99:b3:8a:53:ce:ab:ef:94:a7:1e:e1: 32:73:4e:66:eb:ea:4c:bb:e8:e8:25:4c:d6:18:3b: c0:12:0c:92:88:4b:4c:74:9d:9e:47:18:4a:3d:f0: 58:d6:05:a0:ed:4d:ac:9d:a4:f0:fb:16:6b:c4:f1: 2c:00:35:7c:0b:9c:72:85:54:9d:32:01:fe:2c:33: f6:b1:ee:01:4c:e2:37:67:b3:a2:10:62:99:a5:da: 66:a4:eb:4e:7c:1d:37:6a:66:cc:c5:0a:f6:0f:8b: 87:8a:dd:78:ca:36:c7:18:f8:a1:e9:2c:32:68:e8: 45:12:51:50:d3:b7:09:0c:04:cc:8b:f8:fe:6d:09: 63:b3:a5:2f:42:ce:5f:ee:c2:fd:ff:8b:a1:ea:ce: 8e:d9:06:a6:fb:6b:3a:02:cf:29:e0:f5:c2:e9:73: a7:25:63:62:9d:5c:f4:56:8a:e2:b7:e2:5f:de:65: 9a:ed:bb:5c:b5:67:4e:ae:90:0f:79:9e:26:f9:d1: fa:f7:0e:5f:24:33:fd:7f:78:4e:d8:95:6f:53:33: 73:f2:7c:c2:b7:28:2e:9b:33:70:ba:e6:83:93:8f: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.94.0/23 Signature Algorithm: sha256WithRSAEncryption 98:83:e8:f5:9e:82:c3:65:7a:db:e8:b9:7e:15:79:f6:9b:30: bb:a7:84:9e:a8:c7:52:4d:71:e3:38:6f:0f:ce:67:40:91:03: 2a:38:ef:f7:0e:a9:c0:33:74:5e:b8:ad:51:af:18:d0:cf:61: 48:7c:b9:52:57:87:4d:fd:c6:13:25:0f:2a:7a:46:d9:f0:bc: 21:1b:f7:ee:ca:3a:f7:5c:52:94:e7:b5:ae:f5:0a:99:d8:96: 15:63:b8:d7:e2:d0:d3:85:87:99:db:03:84:49:67:27:1b:d7: 91:bb:29:94:4c:22:cf:1a:ff:08:7a:ea:dd:82:4a:34:e2:e9: 4d:c6:c4:8a:e7:7d:78:f2:9b:15:0c:17:50:2d:a5:1a:ec:ae: 00:f8:59:43:64:f9:ff:bf:f5:e1:7d:d9:30:6f:f9:8e:dd:02: 6a:3c:fb:fb:0d:1b:bc:25:6e:f9:28:b9:66:e7:81:6c:5a:08: 1b:e4:59:f7:70:2d:06:cb:9c:b0:e8:a7:7c:6b:b4:c2:d2:a6: e5:fc:1f:2c:2c:f6:f4:c1:36:48:60:3a:6e:1e:5e:f9:56:c0: 7f:f3:27:79:5f:77:e2:2d:40:40:48:f0:b5:5f:c5:2e:3d:53: 9a:74:2e:44:e3:24:f3:d8:b5:37:6b:f7:3f:ce:54:4f:70:f6: d5:61:ab:2a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZAEb6ZqQ8E6HXcjbipgSWgB5powwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMjIyMjU1MVoX DTI1MDkxMTIyMzA1MVowMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVC MkU3NUQ2OTlENUMwNjI0MDc1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1kgSysqqTty+aFxlaOcJqFYo64n93dvRrVmFhGtm69EZmzilPOq++Upx7h MnNOZuvqTLvo6CVM1hg7wBIMkohLTHSdnkcYSj3wWNYFoO1NrJ2k8PsWa8TxLAA1 fAuccoVUnTIB/iwz9rHuAUziN2ezohBimaXaZqTrTnwdN2pmzMUK9g+Lh4rdeMo2 xxj4oeksMmjoRRJRUNO3CQwEzIv4/m0JY7OlL0LOX+7C/f+LoerOjtkGpvtrOgLP KeD1wulzpyVjYp1c9FaK4rfiX95lmu27XLVnTq6QD3meJvnR+vcOXyQz/X94TtiV b1Mzc/J8wrcoLpszcLrmg5OPLEUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjyosiF1HfedqWy511pnVwGJAdRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4 LWFiMTAtNDI5Ny05MmY0LWY2YTI2NjNlNTRjMC8wL0Y4RjJBMkM4ODVENDc3REU3 NkE1QjJFNzVENjk5RDVDMDYyNDA3NTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoF4wDQYJKoZIhvcNAQELBQADggEBAJiD6PWegsNletvouX4VefabMLunhJ6o x1JNceM4bw/OZ0CRAyo47/cOqcAzdF64rVGvGNDPYUh8uVJXh039xhMlDyp6Rtnw vCEb9+7KOvdcUpTnta71CpnYlhVjuNfi0NOFh5nbA4RJZycb15G7KZRMIs8a/wh6 6t2CSjTi6U3GxIrnfXjymxUMF1AtpRrsrgD4WUNk+f+/9eF92TBv+Y7dAmo8+/sN G7wlbvkouWbngWxaCBvkWfdwLQbLnLDop3xrtMLSpuX8Hyws9vTBNkhgOm4eXvlW wH/zJ3lfd+ItQEBI8LVfxS49U5p0LkTjJPPYtTdr9z/OVE9w9tVhqyo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org