$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer File: 98F94938EA9072872BE06639F79DC61C000F849C.cer (raw, json) Hash identifier: GL8Rq/XU8WJ9GCybtUGKRvxGGcxa714XAkmSmdxoodE= Subject key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63DA9110360BFAC6C6D67BBB262022F9F58E2CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft caRepository: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 21:08:58 +0000 Certificate not after: Sun 28 Jul 2024 21:13:58 +0000 Subordinate resources: IP: 103.121.148.0/23 IP: 2001:df6:4700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:da:91:10:36:0b:fa:c6:c6:d6:7b:bb:26:20:22:f9:f5:8e:2c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 21:08:58 2023 GMT Not After : Jul 28 21:13:58 2024 GMT Subject: CN=98F94938EA9072872BE06639F79DC61C000F849C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e3:ad:76:06:6b:b4:46:7d:26:d1:15:b0: 33:ed:d0:f4:fb:dd:a4:fc:47:8a:a0:b7:4f:41:7e: 7a:6e:96:34:b5:5e:6d:84:e6:32:05:fe:e0:bc:a2: 24:59:0a:00:40:97:0d:bf:17:74:3f:16:39:4a:6a: ad:a3:69:19:41:73:a3:24:aa:f0:69:ad:35:7a:12: b5:08:84:ed:a5:68:3a:99:6a:4c:80:68:e2:2d:77: a4:d4:80:4e:f1:7b:46:33:cc:59:9b:7c:ba:f7:52: aa:d4:70:12:c6:93:31:b2:15:dc:a1:94:78:28:81: d3:d1:a5:23:4f:7a:7f:1c:01:98:a8:65:ed:38:f5: 61:01:26:b2:ab:e2:78:87:24:cd:6e:a8:7d:00:a3: d1:50:62:54:02:85:95:58:f7:37:73:be:19:78:bf: 9a:64:19:2a:b8:ec:9d:4c:8d:58:86:06:28:db:60: a5:a3:d3:87:41:4e:f3:01:e6:97:5b:91:a4:e0:38: 86:dd:2c:69:6e:b9:47:d8:e7:b6:4c:07:29:70:88: 03:af:8a:83:98:bb:7e:53:44:fc:23:17:f4:35:1b: 15:2a:76:3c:95:b6:9a:71:aa:67:14:44:6a:2e:f2: 6f:0d:93:71:4c:1c:b9:f8:e6:93:25:b8:a3:15:6a: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.148.0/23 IPv6: 2001:df6:4700::/48 Signature Algorithm: sha256WithRSAEncryption 3f:e4:2b:7d:81:e0:83:86:69:29:9f:b1:63:49:a9:92:4b:a9: dc:79:f5:ac:24:a9:17:5a:52:9e:07:9d:b2:aa:fd:83:ac:e5: 6d:31:c9:02:2f:c5:f5:03:c9:1d:6f:e7:9a:bc:cf:6c:0c:11: 04:38:c6:e9:50:77:e5:90:e1:07:45:51:3b:35:13:23:16:de: 79:44:af:d6:b0:a2:24:5a:81:0d:3d:f1:d5:f3:7c:1f:3d:7b: 97:22:d1:79:59:32:ac:77:46:8e:4d:5b:c3:86:90:05:f8:f1: 8a:66:89:fb:da:c6:bb:08:70:4c:33:84:71:bd:87:5c:61:d5: 35:ae:77:98:00:6e:61:bd:59:4f:5a:2b:53:78:31:71:99:c3: c5:c4:d6:04:bd:49:f2:7b:85:c7:aa:2f:bf:20:3c:b1:c5:cb: 58:ab:bb:09:3c:d8:b6:74:a9:c7:76:b4:c6:8f:58:ba:7d:c7: 01:9e:d8:a3:44:87:a1:32:0d:bc:47:97:4d:9c:5a:9b:08:7c: 4f:41:b1:b0:dc:ab:ac:bb:01:aa:d8:ef:d4:55:33:48:83:82: d7:00:c4:41:ad:a7:44:6b:81:35:cf:15:5d:bf:ab:80:6b:ba: c3:30:8c:89:b5:22:34:09:15:93:c4:9e:6d:ca:a5:1c:f0:d5: 64:84:a9:ba -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUY9qREDYL+sbG1nu7JiAi+fWOLPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIxMDg1OFoX DTI0MDcyODIxMTM1OFowMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2 NjM5Rjc5REM2MUMwMDBGODQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUr4612Bmu0Rn0m0RWwM+3Q9PvdpPxHiqC3T0F+em6WNLVebYTmMgX+4Lyi JFkKAECXDb8XdD8WOUpqraNpGUFzoySq8GmtNXoStQiE7aVoOplqTIBo4i13pNSA TvF7RjPMWZt8uvdSqtRwEsaTMbIV3KGUeCiB09GlI096fxwBmKhl7Tj1YQEmsqvi eIckzW6ofQCj0VBiVAKFlVj3N3O+GXi/mmQZKrjsnUyNWIYGKNtgpaPTh0FO8wHm l1uRpOA4ht0saW65R9jntkwHKXCIA6+Kg5i7flNE/CMX9DUbFSp2PJW2mnGqZxRE ai7ybw2TcUwcufjmkyW4oxVqLO8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJj5STjqkHKHK+BmOfedxhwAD4ScMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjE0NmEy LTc3MTUtNDU5Zi04MjQ0LThiMzJhMzY0NjYzYy8wLzk4Rjk0OTM4RUE5MDcyODcy QkUwNjYzOUY3OURDNjFDMDAwRjg0OUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFneZQwDwQCAAIwCQMHACABDfZHADANBgkqhkiG9w0BAQsFAAOCAQEAP+QrfYHg g4ZpKZ+xY0mpkkup3Hn1rCSpF1pSngedsqr9g6zlbTHJAi/F9QPJHW/nmrzPbAwR BDjG6VB35ZDhB0VROzUTIxbeeUSv1rCiJFqBDT3x1fN8Hz17lyLReVkyrHdGjk1b w4aQBfjximaJ+9rGuwhwTDOEcb2HXGHVNa53mABuYb1ZT1orU3gxcZnDxcTWBL1J 8nuFx6ovvyA8scXLWKu7CTzYtnSpx3a0xo9Yun3HAZ7Yo0SHoTINvEeXTZxamwh8 T0GxsNyrrLsBqtjv1FUzSIOC1wDEQa2nRGuBNc8VXb+rgGu6wzCMibUiNAkVk8Se bcqlHPDVZISpug== -----END CERTIFICATE-----Generated at Thu May 2 14:31:35 2024 by rpki-client on console-fra.rpki-client.org