$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.cer (raw, json) Hash identifier: DFNKzXk4zhSwPspQ5tPDClT6V2nHtVFoobrqPWFtNY4= Subject key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48BBE4263274E8554139C3B5649E8063E77C7379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft caRepository: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 16:33:49 +0000 Certificate not after: Mon 30 Jun 2025 16:38:49 +0000 Subordinate resources: IP: 202.127.96.0/20 IP: 210.79.208.0/20 IP: 2406:5c00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:e4:26:32:74:e8:55:41:39:c3:b5:64:9e:80:63:e7:7c:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 16:33:49 2024 GMT Not After : Jun 30 16:38:49 2025 GMT Subject: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:ef:c6:6f:af:a6:3d:53:cd:c7:8e:80:d1: c2:ec:cb:44:46:b6:bc:ed:b8:15:08:ec:2a:bf:ec: 77:e8:7a:09:e2:da:ab:45:7c:93:96:b2:59:90:1b: e6:db:77:9a:28:68:e7:4b:39:75:02:3b:5b:59:f3: 32:b8:a8:ce:1b:01:8f:54:1c:3c:6e:cf:47:89:bc: 57:f1:17:fe:9b:7b:5b:d0:2b:00:06:f9:ba:9b:cb: c1:5e:89:95:82:c7:fd:47:01:bc:80:af:16:c9:e2: 39:a0:78:11:fe:b6:ce:30:da:ed:89:98:5e:07:21: 68:c3:a7:9e:b9:44:f2:eb:a5:8b:0a:0a:26:c9:64: 43:e7:c3:4d:f2:de:91:a9:b4:e5:79:11:e0:70:e5: 8c:76:ac:24:20:6b:0b:23:50:db:0f:aa:b7:4f:00: ba:e1:1f:89:8a:02:f2:2a:ad:0a:77:2d:c4:d1:f1: 6a:3b:c9:d9:ab:47:7a:2b:43:91:ad:04:a9:2f:59: da:2d:26:be:e2:15:c9:7c:d3:b4:e2:61:23:b8:27: 82:b0:98:14:44:a1:2d:86:b7:83:58:0e:59:a1:aa: 20:f8:ee:63:ca:81:cd:34:9b:cb:7f:3c:f7:68:cf: 33:14:9f:e5:8e:1b:a2:80:e8:52:65:f1:64:f5:d6: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.127.96.0/20 210.79.208.0/20 IPv6: 2406:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 69:92:0f:38:4f:b1:39:33:9f:df:1f:5c:c0:a3:05:ec:d0:ca: e5:db:ab:1a:a4:f7:ca:72:b1:6b:14:66:40:84:80:3a:87:5e: 80:13:d4:f6:84:e1:3a:40:2c:fe:ad:9d:bc:ec:98:72:7d:89: 0d:cb:8f:26:6c:a9:f3:7d:49:b8:bf:1c:39:93:1f:4d:a8:a3: f8:81:9f:f5:d0:91:2e:78:5a:0c:ab:27:36:c1:43:68:a4:c7: 4f:c5:23:23:78:42:f2:10:d6:2a:d0:87:8c:24:70:a5:3f:b7: 57:02:b6:4a:00:98:ca:82:a4:29:68:ad:ba:26:17:47:52:16: fb:1d:55:f0:02:93:a6:c0:34:42:1f:8a:7f:be:8d:91:59:77: 80:24:66:52:4e:d1:c5:88:99:31:8c:26:f9:5f:b2:93:fe:a2: 77:bb:c9:f4:f3:30:4c:4c:1e:93:50:31:78:c8:b0:4e:6e:82: 5d:1d:7d:aa:00:2d:36:b6:c3:ad:31:11:19:08:e2:a3:8c:f3: 3e:5d:9c:80:af:fe:a0:fc:30:92:92:52:b4:c8:66:e7:83:de: 3d:bc:2a:85:83:a7:c5:02:34:d1:65:11:1f:46:83:2b:bf:17: c9:c3:62:88:96:3c:0e:40:56:86:89:9d:c0:4f:32:d0:0b:d4: f3:74:e2:fa -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUSLvkJjJ06FVBOcO1ZJ6AY+d8c3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MzM0OVoX DTI1MDYzMDE2Mzg0OVowMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYx NUQ0RTFDNkFFMzQwQzM0QkVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+578Zvr6Y9U83HjoDRwuzLREa2vO24FQjsKr/sd+h6CeLaq0V8k5ayWZAb 5tt3miho50s5dQI7W1nzMriozhsBj1QcPG7PR4m8V/EX/pt7W9ArAAb5upvLwV6J lYLH/UcBvICvFsniOaB4Ef62zjDa7YmYXgchaMOnnrlE8uuliwoKJslkQ+fDTfLe kam05XkR4HDljHasJCBrCyNQ2w+qt08AuuEfiYoC8iqtCnctxNHxajvJ2atHeitD ka0EqS9Z2i0mvuIVyXzTtOJhI7gngrCYFEShLYa3g1gOWaGqIPjuY8qBzTSby388 92jPMxSf5Y4booDoUmXxZPXWiasCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBY19eQZeYNBvcYV1OHGrjQMNL7tMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMy LTU0OTItNGE1YS05NDNmLWJkYjQ3MzM0MTIzMy8wLzE2MzVGNUU0MTk3OTgzNDFC REM2MTVENEUxQzZBRTM0MEMzNEJFRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BATKf2ADBATST9AwDQQCAAIwBwMFACQGXAAwDQYJKoZIhvcNAQELBQADggEBAGmS DzhPsTkzn98fXMCjBezQyuXbqxqk98pysWsUZkCEgDqHXoAT1PaE4TpALP6tnbzs mHJ9iQ3LjyZsqfN9Sbi/HDmTH02oo/iBn/XQkS54WgyrJzbBQ2ikx0/FIyN4QvIQ 1irQh4wkcKU/t1cCtkoAmMqCpClorbomF0dSFvsdVfACk6bANEIfin++jZFZd4Ak ZlJO0cWImTGMJvlfspP+one7yfTzMExMHpNQMXjIsE5ugl0dfaoALTa2w60xERkI 4qOM8z5dnICv/qD8MJKSUrTIZueD3j28KoWDp8UCNNFlER9Ggyu/F8nDYoiWPA5A VoaJncBPMtAL1PN04vo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:39 2024 by rpki-client on console-ams.rpki-client.org