$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer (raw, json) Hash identifier: 98wJvsag4GLe0EWxhfdxiiVK4QTP2M7UuJ1xoCubRI0= Subject key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4793B142721C9A235ACE49179CFA3A7779580947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft caRepository: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 04:10:06 +0000 Certificate not after: Mon 29 Jul 2024 04:15:06 +0000 Subordinate resources: IP: 121.100.0.0/21 IP: 175.158.32.0/19 IP: 2402:9800::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:93:b1:42:72:1c:9a:23:5a:ce:49:17:9c:fa:3a:77:79:58:09:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 04:10:06 2023 GMT Not After : Jul 29 04:15:06 2024 GMT Subject: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:84:7b:0b:c8:f1:1b:30:4a:50:dd:07:cf: 08:6b:85:3d:96:95:28:35:7b:40:24:c0:2e:86:2f: 81:d8:3d:21:dd:d6:7f:13:92:68:f6:d9:66:7f:16: 3c:31:1a:91:d5:30:62:82:5b:75:da:83:85:fa:34: 56:54:9e:3a:64:68:d8:ec:ae:2b:92:34:4b:7f:c0: 18:9c:5c:6f:e6:f4:25:7c:50:5c:54:91:93:bf:3f: a1:97:59:29:62:8a:c0:83:fa:d6:4e:c2:92:b5:9a: 83:67:d4:93:95:ed:02:54:85:e2:19:49:87:52:64: 0b:07:24:8a:65:64:a1:34:b0:4a:03:76:ce:1a:f3: 51:9c:2a:66:9e:87:a1:8b:26:78:1c:bd:24:bd:3f: ab:b0:67:e5:91:7b:d5:99:6e:d6:3a:61:43:b7:8b: 93:25:a7:bd:90:20:32:61:8e:c6:28:75:70:ef:8d: f5:39:f4:6b:13:d7:83:3a:9b:c1:8a:1b:1e:68:92: 39:e9:36:a9:8a:21:63:df:49:63:5b:e2:31:03:d4: 83:2f:63:10:78:92:f7:ea:7e:04:78:5a:6e:55:fa: 8a:19:fd:2c:14:18:8a:6e:01:e1:97:29:6a:fd:fa: 97:eb:c6:83:5d:e9:94:cb:df:7b:8e:5c:9c:8a:4f: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.100.0.0/21 175.158.32.0/19 IPv6: 2402:9800::/32 Signature Algorithm: sha256WithRSAEncryption 89:df:eb:55:57:e0:d6:6a:b7:df:7e:76:d7:45:b3:8b:b2:17: d1:42:5c:9a:c1:f3:8f:7c:33:86:4a:08:35:c2:3a:40:7d:34: a3:e9:1a:eb:58:b3:9b:f8:09:7e:09:2a:03:ca:63:5d:65:5c: 17:56:93:8b:eb:c4:af:ac:42:17:c6:bc:70:d0:06:90:ac:1b: b0:4a:b6:c8:b2:88:82:92:dc:0a:f5:95:ad:da:96:92:d7:9e: d6:9b:80:1b:3b:c8:ed:7f:8a:6c:71:bf:e9:eb:a8:85:3b:5c: 8f:a8:2c:ab:5b:c0:ba:3b:32:64:79:8b:3b:de:4d:98:68:51: 2f:ac:50:35:82:c1:a5:2d:c9:4b:6a:1c:b5:da:1e:f0:19:66: cd:29:6d:ca:83:90:66:97:22:73:ec:97:96:eb:37:46:a2:0a: e2:09:4b:ab:23:a0:52:ec:af:84:fd:8d:d6:b2:c3:e0:70:72: 16:be:25:ce:88:9c:9b:a7:9b:75:bc:00:13:cd:29:ae:c7:38: 61:45:8b:e8:c7:15:32:cd:0e:70:29:83:39:83:1e:b9:21:2e: 61:55:66:91:88:2d:c6:6c:e2:aa:89:3c:81:ba:38:db:df:9d: 7f:4a:5b:30:38:58:97:38:89:57:31:63:10:d1:9d:e2:50:ad: 05:14:78:1f -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUR5OxQnIcmiNazkkXnPo6d3lYCUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA0MTAwNloX DTI0MDcyOTA0MTUwNlowMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEz MzlFRTE5RDkyNEQ3MkZGQUUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOP3hHsLyPEbMEpQ3QfPCGuFPZaVKDV7QCTALoYvgdg9Id3WfxOSaPbZZn8W PDEakdUwYoJbddqDhfo0VlSeOmRo2OyuK5I0S3/AGJxcb+b0JXxQXFSRk78/oZdZ KWKKwIP61k7CkrWag2fUk5XtAlSF4hlJh1JkCwckimVkoTSwSgN2zhrzUZwqZp6H oYsmeBy9JL0/q7Bn5ZF71Zlu1jphQ7eLkyWnvZAgMmGOxih1cO+N9Tn0axPXgzqb wYobHmiSOek2qYohY99JY1viMQPUgy9jEHiS9+p+BHhablX6ihn9LBQYim4B4Zcp av36l+vGg13plMvfe45cnIpPunUCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPzQU4WQTgDzwQoznuGdkk1y/64OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFm LWZlNjctNDVjOC04MGI3LTA2ZmMxMThkZjhlMi8wL0ZDRDA1Mzg1OTA0RTAwRjND MTBBMzM5RUUxOUQ5MjRENzJGRkFFMEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAN5ZAADBAWvniAwDQQCAAIwBwMFACQCmAAwDQYJKoZIhvcNAQELBQADggEBAInf 61VX4NZqt99+dtdFs4uyF9FCXJrB8498M4ZKCDXCOkB9NKPpGutYs5v4CX4JKgPK Y11lXBdWk4vrxK+sQhfGvHDQBpCsG7BKtsiyiIKS3Ar1la3alpLXntabgBs7yO1/ imxxv+nrqIU7XI+oLKtbwLo7MmR5izveTZhoUS+sUDWCwaUtyUtqHLXaHvAZZs0p bcqDkGaXInPsl5brN0aiCuIJS6sjoFLsr4T9jdayw+Bwcha+Jc6InJunm3W8ABPN Ka7HOGFFi+jHFTLNDnApgzmDHrkhLmFVZpGILcZs4qqJPIG6ONvfnX9KWzA4WJc4 iVcxYxDRneJQrQUUeB8= -----END CERTIFICATE-----Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org