$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer File: 194F6EF659F1115C068AB59065D57F150E23F5B6.cer (raw, json) Hash identifier: KtiQmxlCSxME41CLhRRc4wnhUvKJ0la60GFQfXg8zq0= Subject key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59F8B6C4223608F0B861118CCB620052A88F0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft caRepository: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 21 Oct 2024 20:58:33 +0000 Certificate not after: Mon 20 Oct 2025 21:03:33 +0000 Subordinate resources: IP: 43.240.224.0/22 IP: 103.248.216.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:b6:c4:22:36:08:f0:b8:61:11:8c:cb:62:00:52:a8:8f:0a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 21 20:58:33 2024 GMT Not After : Oct 20 21:03:33 2025 GMT Subject: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:df:55:c1:10:cd:49:b0:61:cd:ad:45:dc: 4b:42:47:10:62:5d:c3:d8:ab:0f:2f:2d:b1:04:0b: f4:cb:c2:cb:95:c8:9a:51:8f:d1:71:04:95:44:f5: 39:48:f6:44:ae:a3:6a:97:ac:fe:b2:c5:49:b4:9e: 61:70:9c:4e:26:ca:9f:35:62:df:dc:b3:f0:13:f0: f8:24:cb:84:db:e1:e0:53:e1:ed:33:10:bb:c3:23: 2a:04:e0:23:aa:d5:a7:7f:03:b8:0b:69:a9:6f:9a: 10:13:62:ea:e1:56:5c:8f:0d:91:15:cc:53:74:2b: 34:0a:66:71:73:90:04:e2:46:e7:67:5a:e0:45:0e: 88:c3:91:1c:f6:8b:b5:d5:13:80:84:b9:31:5e:ac: 72:f2:cf:4f:60:a9:06:18:c2:90:57:fe:f4:e6:5f: ff:54:71:f6:9a:c1:03:26:17:6a:4f:7c:b2:33:d9: 0c:30:55:30:db:44:82:c5:ea:04:69:44:21:9d:c4: c0:82:fe:df:d7:62:e9:61:12:e2:e0:53:54:b3:52: 6f:83:c2:86:75:89:81:8f:c2:f3:07:b9:09:cc:1c: 3f:82:63:04:fc:57:46:31:75:99:08:8e:a4:9f:85: 98:c0:8f:4c:fe:68:75:42:50:31:a8:b1:fc:92:1c: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.224.0/22 103.248.216.0/22 Signature Algorithm: sha256WithRSAEncryption 51:6c:4b:15:ba:60:aa:ca:c8:89:77:e9:76:a1:e9:c4:37:a7: 00:9f:8c:18:ae:64:6e:7c:ef:45:d0:a5:83:e1:a7:78:b3:9c: 40:b3:ea:a7:23:c7:a6:53:2a:f2:e6:bd:51:6a:3d:16:31:ba: 70:f3:ad:b7:4e:cc:59:3c:d3:9d:28:ad:a0:19:d2:60:01:aa: 06:dd:19:b9:e4:ff:08:ae:a6:f0:b5:f5:49:6c:2b:71:97:8a: 72:36:73:68:f3:1d:d7:b8:cd:3f:66:78:61:83:70:7a:60:bb: 95:4e:bc:ea:d9:4c:9d:cd:7b:a7:60:15:61:4b:23:97:3c:ee: de:ef:bd:76:78:7c:a2:db:b1:4e:8c:4a:2c:ea:27:b7:df:20: 1d:68:f3:01:a4:77:6c:0f:3a:e4:a3:85:ac:17:48:e7:48:b3: cd:1e:c0:ac:5d:6d:08:cd:cb:f2:bf:fd:9e:da:bc:49:fc:f2: 5d:4a:c6:10:94:2c:1d:ef:98:1e:21:c7:31:81:38:ca:47:ff: 75:26:2d:69:49:5e:b3:ea:42:0b:f0:2b:88:ea:63:32:29:9b: 3f:cc:96:5e:49:df:59:ff:7b:bf:81:dc:7a:06:4f:fe:b6:29: 0b:fb:02:7f:83:2a:9d:32:58:9b:7a:09:5b:21:81:e3:f5:09: 9d:a0:a2:55 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUWfi2xCI2CPC4YRGMy2IAUqiPCgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMTIwNTgzM1oX DTI1MTAyMDIxMDMzM1owMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFC NTkwNjVENTdGMTUwRTIzRjVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkw31XBEM1JsGHNrUXcS0JHEGJdw9irDy8tsQQL9MvCy5XImlGP0XEElUT1 OUj2RK6japes/rLFSbSeYXCcTibKnzVi39yz8BPw+CTLhNvh4FPh7TMQu8MjKgTg I6rVp38DuAtpqW+aEBNi6uFWXI8NkRXMU3QrNApmcXOQBOJG52da4EUOiMORHPaL tdUTgIS5MV6scvLPT2CpBhjCkFf+9OZf/1Rx9prBAyYXak98sjPZDDBVMNtEgsXq BGlEIZ3EwIL+39di6WES4uBTVLNSb4PChnWJgY/C8we5CcwcP4JjBPxXRjF1mQiO pJ+FmMCPTP5odUJQMaix/JIcSuUCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBlPbvZZ8RFcBoq1kGXVfxUOI/W2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcx LTdlY2ItNGRiZC1hNDIxLTk5YjljZDIwOTAzYS8wLzE5NEY2RUY2NTlGMTExNUMw NjhBQjU5MDY1RDU3RjE1MEUyM0Y1QjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIr8OADBAJn+NgwDQYJKoZIhvcNAQELBQADggEBAFFsSxW6YKrKyIl36Xah6cQ3 pwCfjBiuZG5870XQpYPhp3iznECz6qcjx6ZTKvLmvVFqPRYxunDzrbdOzFk8050o raAZ0mABqgbdGbnk/wiupvC19UlsK3GXinI2c2jzHde4zT9meGGDcHpgu5VOvOrZ TJ3Ne6dgFWFLI5c87t7vvXZ4fKLbsU6MSizqJ7ffIB1o8wGkd2wPOuSjhawXSOdI s80ewKxdbQjNy/K//Z7avEn88l1KxhCULB3vmB4hxzGBOMpH/3UmLWlJXrPqQgvw K4jqYzIpmz/Mll5J31n/e7+B3HoGT/62KQv7An+DKp0yWJt6CVshgeP1CZ2golU= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:45 2024 by rpki-client on console-fra.rpki-client.org