$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer (raw, json) Hash identifier: XXGhJvYuPNC7pPNVM7038zcADOY3axsgXrGwp7acORI= Subject key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 249AC4E52B8CA1026AB0A120F06F74BEFA3F206B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft caRepository: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 09 Aug 2023 16:52:45 +0000 Certificate not after: Wed 07 Aug 2024 16:57:45 +0000 Subordinate resources: IP: 103.198.120.0/22 IP: 202.52.48.0/23 IP: 2403:1880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 10:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9a:c4:e5:2b:8c:a1:02:6a:b0:a1:20:f0:6f:74:be:fa:3f:20:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 16:52:45 2023 GMT Not After : Aug 7 16:57:45 2024 GMT Subject: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:8c:a9:c4:03:7a:dc:29:79:54:c5:81:e9: 23:9a:4a:19:fb:f6:7a:1d:f4:2f:38:fc:85:c5:9f: 4b:e9:b6:c3:67:d4:23:ed:c8:4f:85:ab:ec:8b:6e: 51:1f:5c:00:e1:de:2d:03:1b:2a:92:4d:19:6c:f7: 7d:33:52:95:be:5b:05:d6:49:ce:6c:ba:ec:56:58: d2:56:bd:51:d2:47:07:30:6d:8e:0d:26:4c:21:34: 31:a8:4d:76:86:04:5b:ee:02:af:b5:2d:3f:3c:27: e9:81:03:49:9c:fd:5d:d4:9c:f3:e5:36:d5:85:8d: a9:b3:ca:d8:da:2c:77:a5:03:dc:f2:fe:fb:78:11: df:0a:e7:5e:da:7f:89:2b:0b:1b:9b:b1:93:00:83: c2:d4:dd:91:99:0b:a4:90:b1:7b:92:27:e7:8c:3e: f8:66:3d:94:35:89:c7:91:9b:8d:26:4d:a8:10:ba: 9c:db:e7:46:ec:44:81:2f:84:aa:83:34:5d:22:d0: 3e:19:5f:16:64:44:86:44:54:f5:4c:a2:f5:c4:a4: 56:ff:52:19:a0:5d:ac:ed:60:7b:65:4e:94:48:75: 9b:72:55:ba:74:36:1e:c6:34:6a:38:98:9b:ee:55: c6:33:48:76:f2:c9:01:2d:d5:db:e5:5c:2c:14:dd: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.120.0/22 202.52.48.0/23 IPv6: 2403:1880::/32 Signature Algorithm: sha256WithRSAEncryption 98:2f:30:1a:16:8f:b2:54:6c:30:1d:e8:0d:bd:94:7b:3f:3e: ab:bf:33:d0:69:8f:85:1c:2d:df:55:c2:11:c0:96:c0:38:cb: 43:b2:ee:63:96:3e:d9:2d:94:ed:f0:bb:e7:5b:8d:f3:cc:30: ba:15:72:4c:32:e1:2e:79:49:2b:67:ac:46:d1:06:ef:27:66: d1:eb:55:c4:eb:4e:56:ac:77:96:fc:54:cc:69:3a:08:03:18: 91:84:b3:a6:8e:76:b0:c6:3f:3a:5e:f9:4d:44:15:65:5c:da: 5e:4d:29:ab:06:4c:cc:fe:2b:c6:11:d2:fc:71:36:5c:b1:a3: b6:e6:06:a0:96:4b:cd:5c:b8:55:fc:15:05:e7:6f:ec:89:46: 6c:ae:22:81:f3:6e:19:6f:2c:9e:89:2b:90:6f:2a:db:42:c9: bf:f5:6c:22:39:7e:21:fb:b7:6d:6c:da:24:87:ec:7e:02:81: 1a:db:59:fa:a5:90:8d:37:c0:49:71:72:bc:d8:b5:4f:f6:a8: d0:58:ed:fe:5b:b7:e8:15:6d:f6:87:3b:a2:ef:ec:57:a5:53: a6:ec:13:9d:6b:c6:ba:19:50:d0:46:28:84:6e:bb:1c:00:32: 20:81:70:31:16:6c:e3:20:0a:fa:39:b8:da:34:3b:72:d1:7c: a1:62:e6:e1 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUJJrE5SuMoQJqsKEg8G90vvo/IGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwOTE2NTI0NVoX DTI0MDgwNzE2NTc0NVowMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1 MUM0RTQ0QjBDQkMxM0ZGREE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpajKnEA3rcKXlUxYHpI5pKGfv2eh30Lzj8hcWfS+m2w2fUI+3IT4Wr7Itu UR9cAOHeLQMbKpJNGWz3fTNSlb5bBdZJzmy67FZY0la9UdJHBzBtjg0mTCE0MahN doYEW+4Cr7UtPzwn6YEDSZz9XdSc8+U21YWNqbPK2Nosd6UD3PL++3gR3wrnXtp/ iSsLG5uxkwCDwtTdkZkLpJCxe5In54w++GY9lDWJx5GbjSZNqBC6nNvnRuxEgS+E qoM0XSLQPhlfFmREhkRU9Uyi9cSkVv9SGaBdrO1ge2VOlEh1m3JVunQ2HsY0ajiY m+5VxjNIdvLJAS3V2+VcLBTd5/kCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPvTsoyQdVKd7oFRxORLDLwT/9qRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0 LThjMmQtNGViMS1iNGNkLTM1YjQ5MjE2ZTA3My8wL0ZCRDNCMjhDOTA3NTUyOURF RTgxNTFDNEU0NEIwQ0JDMTNGRkRBOTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnxngDBAHKNDAwDQQCAAIwBwMFACQDGIAwDQYJKoZIhvcNAQELBQADggEBAJgv MBoWj7JUbDAd6A29lHs/Pqu/M9Bpj4UcLd9VwhHAlsA4y0Oy7mOWPtktlO3wu+db jfPMMLoVckwy4S55SStnrEbRBu8nZtHrVcTrTlasd5b8VMxpOggDGJGEs6aOdrDG Pzpe+U1EFWVc2l5NKasGTMz+K8YR0vxxNlyxo7bmBqCWS81cuFX8FQXnb+yJRmyu IoHzbhlvLJ6JK5BvKttCyb/1bCI5fiH7t21s2iSH7H4CgRrbWfqlkI03wElxcrzY tU/2qNBY7f5bt+gVbfaHO6Lv7FelU6bsE51rxroZUNBGKIRuuxwAMiCBcDEWbOMg Cvo5uNo0O3LRfKFi5uE= -----END CERTIFICATE-----Generated at Sat Apr 20 02:37:36 2024 by rpki-client on console-ams.rpki-client.org