$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer (raw, json) Hash identifier: sVtwbGQShnk4E6PCySIO15S/XoFnMcXgpzc2HYbzRQA= Subject key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C6DDF32399E6F6C8A6D3899D756B76ABE3D23FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft caRepository: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 10:47:19 +0000 Certificate not after: Mon 08 Sep 2025 10:52:19 +0000 Subordinate resources: IP: 202.47.175.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6d:df:32:39:9e:6f:6c:8a:6d:38:99:d7:56:b7:6a:be:3d:23:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 9 10:47:19 2024 GMT Not After : Sep 8 10:52:19 2025 GMT Subject: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:47:6d:e0:d0:ff:0c:8e:60:85:91:8b:4d: 26:e0:31:41:6c:de:45:16:27:42:a1:f9:50:13:56: 15:01:ee:60:ee:d3:95:e3:b9:22:b5:41:fe:ba:75: aa:46:26:fe:d5:5e:8c:85:79:53:7f:5e:b1:ca:7d: 0c:04:17:09:18:16:32:52:28:64:4a:c8:68:f6:57: 1c:a2:a1:43:ac:88:ad:c0:1b:59:d8:96:86:ce:9f: 11:87:82:c0:cf:a9:6a:3c:a7:0b:d0:b0:c2:29:d7: 17:ba:3b:20:53:41:b2:5a:30:92:58:6f:b0:5d:be: 97:ca:b6:70:b8:22:f9:fa:2a:20:ee:33:66:26:9d: c2:a6:bd:a1:2b:12:41:b0:bc:5e:3d:74:bf:d1:40: 2e:ab:99:4e:f2:14:a3:e8:dd:f2:b6:e7:1b:e5:28: 06:d5:b3:7e:a4:2e:26:68:9b:18:2f:49:ea:d1:fd: b3:d6:8f:b5:49:84:2e:ec:b7:fa:a1:cf:8b:a2:cb: 0f:61:3e:71:a6:8d:70:62:2a:f8:92:23:07:90:5b: 47:6a:33:93:a5:8f:e8:bf:84:7d:f1:42:1e:e8:fc: 98:ec:f2:c8:ad:3a:eb:12:a1:2a:6f:93:3f:ea:6a: 41:c3:11:ba:81:f0:13:c7:da:3b:d7:0d:4a:86:78: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.175.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e5:b8:98:d2:42:1a:e3:e0:06:d9:0a:1e:8d:23:7b:01:8f: 90:fb:e8:76:9f:0d:8a:76:0f:6a:5e:a8:72:45:37:dc:7b:a8: 1c:06:6a:64:e8:0b:e2:29:3e:e2:a9:f5:21:8f:97:ca:21:f7: b7:e5:6b:6f:b6:50:99:c3:39:95:0a:42:2d:e6:67:50:bc:3d: 2b:94:6d:ee:56:81:ca:5b:61:32:03:a6:65:8c:82:cd:3f:c5: 8c:d0:5e:31:6a:c5:3e:6f:ae:15:d7:5e:4d:b6:28:10:bd:70: 81:9a:e2:5f:f0:49:a3:db:47:1e:8c:79:db:77:24:35:b4:cc: 2a:75:9e:ff:44:b0:52:24:25:78:18:38:65:af:3d:2d:ea:25: 8c:ab:70:43:66:39:bd:bb:cd:d0:33:7a:1e:3a:63:38:b4:b6: 4a:ee:a2:93:9a:dd:1e:53:69:0d:4a:ef:95:8e:29:99:41:b7: 7e:32:fc:a4:a1:83:4e:14:4f:1f:17:3e:c0:85:72:25:38:a8: 94:aa:97:2e:54:5c:bc:57:a7:22:09:ec:07:0f:51:67:db:ad: 5e:fe:14:75:88:16:55:78:b2:31:44:6f:89:00:e9:82:1d:48: dc:cb:a7:13:aa:91:c6:08:13:ec:d4:24:eb:88:86:04:bb:59: 5b:70:e5:58 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfG3fMjmeb2yKbTiZ11a3ar49I/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwOTEwNDcxOVoX DTI1MDkwODEwNTIxOVowMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2 MTE4MERGNDc3MDE3Nzk1N0UzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1PR23g0P8MjmCFkYtNJuAxQWzeRRYnQqH5UBNWFQHuYO7TleO5IrVB/rp1 qkYm/tVejIV5U39escp9DAQXCRgWMlIoZErIaPZXHKKhQ6yIrcAbWdiWhs6fEYeC wM+pajynC9CwwinXF7o7IFNBslowklhvsF2+l8q2cLgi+foqIO4zZiadwqa9oSsS QbC8Xj10v9FALquZTvIUo+jd8rbnG+UoBtWzfqQuJmibGC9J6tH9s9aPtUmELuy3 +qHPi6LLD2E+caaNcGIq+JIjB5BbR2ozk6WP6L+EffFCHuj8mOzyyK066xKhKm+T P+pqQcMRuoHwE8faO9cNSoZ4NvkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBTPmd76G5J26+5hGA30dwF3lX47MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wOTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA5N2Y1MTYx LTA3MGYtNDMzOS1hZjRlLWJjMzNmZGZiNjdiOC8wLzE0Q0Y5OURFRkExQjkyNzZF QkVFNjExODBERjQ3NzAxNzc5NTdFM0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKL68wDQYJKoZIhvcNAQELBQADggEBAEDluJjSQhrj4AbZCh6NI3sBj5D76Haf DYp2D2peqHJFN9x7qBwGamToC+IpPuKp9SGPl8oh97fla2+2UJnDOZUKQi3mZ1C8 PSuUbe5WgcpbYTIDpmWMgs0/xYzQXjFqxT5vrhXXXk22KBC9cIGa4l/wSaPbRx6M edt3JDW0zCp1nv9EsFIkJXgYOGWvPS3qJYyrcENmOb27zdAzeh46Yzi0tkruopOa 3R5TaQ1K75WOKZlBt34y/KShg04UTx8XPsCFciU4qJSqly5UXLxXpyIJ7AcPUWfb rV7+FHWIFlV4sjFEb4kA6YIdSNzLpxOqkcYIE+zUJOuIhgS7WVtw5Vg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:44 2025 by rpki-client