$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer File: FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer (raw, json) Hash identifier: Mv4z/KHHa4JBGLS4CafcH9NyLRDCuRSegrywHU+Ru7M= Subject key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E63C482C9B0B00CA4520F833CF981B21F303F36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 Nov 2023 16:29:33 +0000 Certificate not after: Thu 14 Nov 2024 16:34:33 +0000 Subordinate resources: IP: 103.89.76.0/22 IP: 2001:df0:a900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:63:c4:82:c9:b0:b0:0c:a4:52:0f:83:3c:f9:81:b2:1f:30:3f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 16 16:29:33 2023 GMT Not After : Nov 14 16:34:33 2024 GMT Subject: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:40:a8:8a:72:19:88:47:93:fb:bb:71:50: 50:cb:a9:14:6e:71:45:f4:38:f7:61:25:1c:da:26: d9:01:3a:f4:8f:b4:f5:5d:0b:07:9a:13:48:20:33: 88:34:e6:14:d4:7b:46:1f:66:f4:31:07:e4:80:17: 72:a4:46:ff:90:6f:03:c5:1e:45:d2:e8:4d:78:be: db:35:fc:4a:fc:1d:de:64:15:91:0a:db:dc:e7:a2: bb:7c:b3:02:ac:f5:df:ee:11:2b:8e:62:4b:63:6b: f6:0b:61:83:e3:e3:19:b4:89:d3:3c:fa:0c:69:2f: e1:12:c5:46:c5:14:ee:e1:4b:e9:71:89:19:52:10: db:e3:ef:10:54:88:88:a1:65:1c:a1:5c:ac:99:07: 33:67:fc:7b:fb:84:a3:15:f4:55:98:db:c8:00:7c: 4e:b8:da:c3:04:88:b0:99:f7:ad:5b:05:51:7c:6d: 2a:b5:20:25:c5:22:bd:2c:da:00:1a:bf:06:66:90: 0a:73:b3:3a:37:96:75:ed:6e:f4:d4:fa:fa:dc:26: 0c:c0:a2:c6:d1:88:14:b6:5d:76:a9:e9:dd:b4:c0: e5:c3:76:b7:cc:e4:c5:9d:43:be:a4:1e:19:1b:1a: 01:d1:79:97:ae:1a:bf:c0:50:1a:20:08:a0:92:1f: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.76.0/22 IPv6: 2001:df0:a900::/48 Signature Algorithm: sha256WithRSAEncryption 7d:fe:c5:6c:26:91:79:05:29:9f:76:80:72:ed:a8:9f:f4:3e: d2:74:f5:0b:ea:c0:30:ef:55:dc:3c:77:02:a1:c9:28:e5:a4: 4a:86:da:8d:20:28:c2:ae:6c:76:14:2c:ce:76:6c:7a:63:60: 40:60:c1:37:9d:c3:7c:07:f7:38:cf:47:f9:58:00:77:95:49: ce:7a:94:9d:64:b9:aa:d1:20:4e:18:65:2e:74:6b:1b:ce:74: 5f:5b:01:5b:5b:a3:9c:ce:b7:eb:34:03:ca:e0:32:7b:fd:a4: 49:62:03:62:86:6e:9d:19:db:c5:ba:23:fe:be:9a:9d:91:b7: bc:37:8a:10:3f:04:df:1b:19:fa:0b:38:ae:b3:a8:00:13:4b: 38:c5:de:96:16:a2:1a:d1:31:6a:94:78:bf:f3:23:c8:0a:31: 9c:74:1a:ae:80:87:c9:54:25:07:5c:f1:ad:7a:89:c5:22:36: 25:13:b3:36:46:5d:b0:9d:32:75:0a:99:87:41:37:eb:1f:87: 85:1a:b8:d0:9e:8a:ef:4a:26:68:76:dc:69:d5:24:35:00:72: 17:89:e2:6c:78:04:ef:1d:4d:ce:a7:f4:43:15:4c:44:82:ce: 3d:51:66:e4:be:dd:23:78:3c:a3:c7:0c:5f:34:8f:29:89:c6: 99:2b:8c:b7 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTmPEgsmwsAykUg+DPPmBsh8wPzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNjE2MjkzM1oX DTI0MTExNDE2MzQzM1owMzExMC8GA1UEAxMoRkI4OEE4ODUyNTE2REJDRUFDNDI5 QzVCNkY5QjdGOThGQUEwMTQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfOQKiKchmIR5P7u3FQUMupFG5xRfQ492ElHNom2QE69I+09V0LB5oTSCAz iDTmFNR7Rh9m9DEH5IAXcqRG/5BvA8UeRdLoTXi+2zX8Svwd3mQVkQrb3Oeiu3yz Aqz13+4RK45iS2Nr9gthg+PjGbSJ0zz6DGkv4RLFRsUU7uFL6XGJGVIQ2+PvEFSI iKFlHKFcrJkHM2f8e/uEoxX0VZjbyAB8TrjawwSIsJn3rVsFUXxtKrUgJcUivSza ABq/BmaQCnOzOjeWde1u9NT6+twmDMCixtGIFLZddqnp3bTA5cN2t8zkxZ1DvqQe GRsaAdF5l64av8BQGiAIoJIfpBkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPuIqIUlFtvOrEKcW2+bf5j6oBQOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMWIxY2RkNS0yYjNkLTQ2MWEtOWE3Mi0wMDMxZjBiZmI0NWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxYjFjZGQ1 LTJiM2QtNDYxYS05YTcyLTAwMzFmMGJmYjQ1ZC8wL0ZCODhBODg1MjUxNkRCQ0VB QzQyOUM1QjZGOUI3Rjk4RkFBMDE0MEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnWUwwDwQCAAIwCQMHACABDfCpADANBgkqhkiG9w0BAQsFAAOCAQEAff7FbCaR eQUpn3aAcu2on/Q+0nT1C+rAMO9V3Dx3AqHJKOWkSobajSAowq5sdhQsznZsemNg QGDBN53DfAf3OM9H+VgAd5VJznqUnWS5qtEgThhlLnRrG850X1sBW1ujnM636zQD yuAye/2kSWIDYoZunRnbxboj/r6anZG3vDeKED8E3xsZ+gs4rrOoABNLOMXelhai GtExapR4v/MjyAoxnHQaroCHyVQlB1zxrXqJxSI2JROzNkZdsJ0ydQqZh0E36x+H hRq40J6K70omaHbcadUkNQByF4nibHgE7x1Nzqf0QxVMRILOPVFm5L7dI3g8o8cM XzSPKYnGmSuMtw== -----END CERTIFICATE-----Generated at Wed May 8 09:50:45 2024 by rpki-client on console-fra.rpki-client.org