$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer File: 09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer (raw, json) Hash identifier: alFwWk7LipSPnSnmb4nfAzAOrGf5hh+u5FcB9CMFfKs= Subject key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47F2628FF4D35292725C29564344EFE5723E5D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft caRepository: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 02:22:52 +0000 Certificate not after: Tue 01 Jul 2025 02:27:52 +0000 Subordinate resources: IP: 115.178.128.0/17 IP: 202.148.0.0/19 IP: 203.201.160.0/20 IP: 2404:1b8::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:62:8f:f4:d3:52:92:72:5c:29:56:43:44:ef:e5:72:3e:5d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 02:22:52 2024 GMT Not After : Jul 1 02:27:52 2025 GMT Subject: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:24:03:c8:96:9e:57:1e:08:0e:ce:89:ee: 8f:10:6e:09:8f:2d:12:0b:c6:ce:bf:b7:76:ca:48: 6d:62:0c:c0:88:a3:2b:75:cd:e2:95:48:47:30:06: b4:be:df:72:76:ca:77:c5:82:c2:7c:7c:b4:84:2c: 35:3e:62:ee:b9:3d:8f:83:f2:dc:25:e6:d3:96:ab: 91:e3:37:64:9c:2f:ce:5b:8c:23:b2:bc:74:60:dd: 26:34:e7:2b:60:b3:de:b7:87:1f:47:4d:86:a3:f1: 77:19:2f:de:74:d0:a1:69:b5:95:ea:33:63:cc:b6: 5a:2d:54:6e:e9:df:a6:05:1c:be:d9:83:7c:6f:f5: 63:94:3d:72:40:c6:2e:e1:c9:fa:ab:5b:93:77:0c: 97:da:67:b8:ba:cc:cc:c3:42:75:5e:46:f1:3d:83: 4b:42:df:4f:cb:5c:e1:73:28:a3:bf:08:65:16:19: f5:82:87:0e:46:c1:90:6b:c6:f0:b2:3d:94:fb:1d: 6a:7e:b8:fb:65:ff:e3:d6:3a:61:68:55:e6:6d:a8: 2b:fb:3b:62:81:cb:a8:a1:8f:09:f0:dd:62:9a:32: 6a:70:66:26:07:d2:d8:bc:77:a8:ac:7d:3b:5a:ed: 65:74:25:ab:32:7f:f4:33:b3:08:08:e6:b8:f4:fa: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.128.0/17 202.148.0.0/19 203.201.160.0/20 IPv6: 2404:1b8::/32 Signature Algorithm: sha256WithRSAEncryption 7f:6c:28:fb:77:e5:0a:a5:47:b1:36:02:c5:6f:b6:f7:cc:f0: bb:68:a5:00:41:30:8e:30:e6:43:2c:10:55:90:6f:07:f6:53: 3c:5e:72:f6:9f:fb:b6:18:d6:4e:ba:0a:90:d5:1d:40:7b:34: b1:e5:b9:aa:9c:22:c9:1a:fe:66:37:f2:d8:1a:c3:a4:ee:28: 99:16:32:7f:fe:80:6c:4e:bc:2e:e1:6b:5b:4d:a6:18:9e:88: 03:78:61:1f:3e:22:7b:12:f0:6a:3c:0c:9a:70:65:96:b4:f0: 4b:09:2f:98:6c:28:74:3a:a8:3a:bf:45:f1:bc:63:d6:c6:4d: 6d:82:1d:fd:41:d5:2b:58:f5:7e:5c:76:64:aa:bd:3e:0f:79: 88:15:47:a6:eb:24:f4:ae:df:e8:13:20:a6:98:5c:24:39:95: 3a:78:e9:f5:e4:d7:37:e3:f3:50:94:6a:f0:83:51:3b:6f:55: d0:4f:2c:65:8b:33:88:99:3f:33:40:56:8f:c9:d9:b0:0b:e9: 1a:7f:c1:00:6b:69:11:ce:09:bd:e0:b7:94:c2:54:11:d0:e5: 4d:91:37:e9:43:38:86:59:f1:1e:46:d4:8e:db:df:ed:c3:7a: a9:ee:a7:cc:5e:3d:ac:87:91:86:42:74:31:d8:67:91:90:63: 10:03:df:16 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUR/Jij/TTUpJyXClWQ0Tv5XI+XSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAyMjI1MloX DTI1MDcwMTAyMjc1MlowMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEz NDYyRkMyMzRDOUM3NjNDRjM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrsJAPIlp5XHggOzonujxBuCY8tEgvGzr+3dspIbWIMwIijK3XN4pVIRzAG tL7fcnbKd8WCwnx8tIQsNT5i7rk9j4Py3CXm05arkeM3ZJwvzluMI7K8dGDdJjTn K2Cz3reHH0dNhqPxdxkv3nTQoWm1leozY8y2Wi1UbunfpgUcvtmDfG/1Y5Q9ckDG LuHJ+qtbk3cMl9pnuLrMzMNCdV5G8T2DS0LfT8tc4XMoo78IZRYZ9YKHDkbBkGvG 8LI9lPsdan64+2X/49Y6YWhV5m2oK/s7YoHLqKGPCfDdYpoyanBmJgfS2Lx3qKx9 O1rtZXQlqzJ/9DOzCAjmuPT66Z8CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAmm8fpPxTLWtOE0YvwjTJx2PPNhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQw LTZiODQtNDllOC1iNjBiLTZlOTkwNDEyOGNhOC8wLzA5QTZGMUZBNEZDNTMyRDZC NEUxMzQ2MkZDMjM0QzlDNzYzQ0YzNjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAdzsoADBAXKlAADBATLyaAwDQQCAAIwBwMFACQEAbgwDQYJKoZIhvcNAQELBQAD ggEBAH9sKPt35QqlR7E2AsVvtvfM8LtopQBBMI4w5kMsEFWQbwf2Uzxecvaf+7YY 1k66CpDVHUB7NLHluaqcIska/mY38tgaw6TuKJkWMn/+gGxOvC7ha1tNphieiAN4 YR8+InsS8Go8DJpwZZa08EsJL5hsKHQ6qDq/RfG8Y9bGTW2CHf1B1StY9X5cdmSq vT4PeYgVR6brJPSu3+gTIKaYXCQ5lTp46fXk1zfj81CUavCDUTtvVdBPLGWLM4iZ PzNAVo/J2bAL6Rp/wQBraRHOCb3gt5TCVBHQ5U2RN+lDOIZZ8R5G1I7b3+3Deqnu p8xePayHkYZCdDHYZ5GQYxAD3xY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org