$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer (raw, json) Hash identifier: 3sjSt5upIGzpsbl15k3mzxmGbrRKWT/IS323YFQgKvs= Subject key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43B04400E85B5BFB63C65D067FAD7318018A15BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft caRepository: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Oct 2023 12:12:06 +0000 Certificate not after: Thu 10 Oct 2024 12:17:06 +0000 Subordinate resources: IP: 103.160.94.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b0:44:00:e8:5b:5b:fb:63:c6:5d:06:7f:ad:73:18:01:8a:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 12:12:06 2023 GMT Not After : Oct 10 12:17:06 2024 GMT Subject: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:81:2c:ac:aa:a4:ed:cb:e6:85:c6:56:8e: 70:9a:85:62:8e:b8:9f:dd:dd:bd:1a:d5:98:58:46: b6:6e:bd:11:99:b3:8a:53:ce:ab:ef:94:a7:1e:e1: 32:73:4e:66:eb:ea:4c:bb:e8:e8:25:4c:d6:18:3b: c0:12:0c:92:88:4b:4c:74:9d:9e:47:18:4a:3d:f0: 58:d6:05:a0:ed:4d:ac:9d:a4:f0:fb:16:6b:c4:f1: 2c:00:35:7c:0b:9c:72:85:54:9d:32:01:fe:2c:33: f6:b1:ee:01:4c:e2:37:67:b3:a2:10:62:99:a5:da: 66:a4:eb:4e:7c:1d:37:6a:66:cc:c5:0a:f6:0f:8b: 87:8a:dd:78:ca:36:c7:18:f8:a1:e9:2c:32:68:e8: 45:12:51:50:d3:b7:09:0c:04:cc:8b:f8:fe:6d:09: 63:b3:a5:2f:42:ce:5f:ee:c2:fd:ff:8b:a1:ea:ce: 8e:d9:06:a6:fb:6b:3a:02:cf:29:e0:f5:c2:e9:73: a7:25:63:62:9d:5c:f4:56:8a:e2:b7:e2:5f:de:65: 9a:ed:bb:5c:b5:67:4e:ae:90:0f:79:9e:26:f9:d1: fa:f7:0e:5f:24:33:fd:7f:78:4e:d8:95:6f:53:33: 73:f2:7c:c2:b7:28:2e:9b:33:70:ba:e6:83:93:8f: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.94.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:72:3e:f5:90:7a:c2:6d:97:9d:38:9a:e8:4e:07:40:97:6f: a2:ba:d9:ef:6b:f0:9d:3d:72:25:23:22:05:57:ea:09:fe:06: 0a:86:e2:e4:22:68:69:dc:b6:ae:46:ad:ae:dc:a8:96:7c:b0: be:f3:d8:51:8c:28:32:65:a1:79:ec:41:f2:6b:a0:95:9c:b9: 9e:4a:e3:b3:08:ca:92:46:8f:db:3c:7b:7f:f6:17:b9:a6:4f: 33:77:48:1d:3e:13:ba:99:d3:3b:81:9c:d0:3a:49:19:e5:f3: 68:5e:b3:6c:cf:97:c1:08:31:cc:30:9b:63:60:c8:22:2f:9a: e8:6b:41:f9:d2:31:a3:94:aa:3f:a1:0f:94:79:46:20:40:ba: 3b:43:6c:fa:da:d4:ca:b2:9d:be:27:61:23:22:48:ff:61:de: 26:ff:28:14:cc:75:63:ec:22:40:42:3b:df:70:89:8b:8c:42: a9:1f:d6:35:8e:ff:54:b8:06:7e:36:6a:fe:55:7e:25:48:f6: d2:83:57:72:4c:59:d3:89:b4:00:e3:d4:50:12:59:cf:24:20: f2:72:69:6b:81:32:b5:c6:ac:db:7f:13:ed:3b:4c:0c:b5:d0: 99:27:ed:da:1f:73:2d:c3:88:0f:c6:5a:cc:a4:c1:ac:25:db: 20:56:da:95 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ7BEAOhbW/tjxl0Gf61zGAGKFbowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjEyMTIwNloX DTI0MTAxMDEyMTcwNlowMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVC MkU3NUQ2OTlENUMwNjI0MDc1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1kgSysqqTty+aFxlaOcJqFYo64n93dvRrVmFhGtm69EZmzilPOq++Upx7h MnNOZuvqTLvo6CVM1hg7wBIMkohLTHSdnkcYSj3wWNYFoO1NrJ2k8PsWa8TxLAA1 fAuccoVUnTIB/iwz9rHuAUziN2ezohBimaXaZqTrTnwdN2pmzMUK9g+Lh4rdeMo2 xxj4oeksMmjoRRJRUNO3CQwEzIv4/m0JY7OlL0LOX+7C/f+LoerOjtkGpvtrOgLP KeD1wulzpyVjYp1c9FaK4rfiX95lmu27XLVnTq6QD3meJvnR+vcOXyQz/X94TtiV b1Mzc/J8wrcoLpszcLrmg5OPLEUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjyosiF1HfedqWy511pnVwGJAdRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4 LWFiMTAtNDI5Ny05MmY0LWY2YTI2NjNlNTRjMC8wL0Y4RjJBMkM4ODVENDc3REU3 NkE1QjJFNzVENjk5RDVDMDYyNDA3NTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoF4wDQYJKoZIhvcNAQELBQADggEBAF9yPvWQesJtl504muhOB0CXb6K62e9r 8J09ciUjIgVX6gn+BgqG4uQiaGnctq5Gra7cqJZ8sL7z2FGMKDJloXnsQfJroJWc uZ5K47MIypJGj9s8e3/2F7mmTzN3SB0+E7qZ0zuBnNA6SRnl82hes2zPl8EIMcww m2NgyCIvmuhrQfnSMaOUqj+hD5R5RiBAujtDbPra1Mqynb4nYSMiSP9h3ib/KBTM dWPsIkBCO99wiYuMQqkf1jWO/1S4Bn42av5VfiVI9tKDV3JMWdOJtADj1FASWc8k IPJyaWuBMrXGrNt/E+07TAy10Jkn7dofcy3DiA/GWsykwawl2yBW2pU= -----END CERTIFICATE-----Generated at Wed May 8 17:45:31 2024 by rpki-client on console-ams.rpki-client.org