$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer File: 1F969EE9B0838D22156118A888B81BF27B859BD5.cer (raw, json) Hash identifier: 1CDscWXoIPfS5PkLy8Edtdviv3NQvJCW/WR9Y5gjPRA= Subject key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 439283298D2B8CBDDD71D2713F804B870C6B702E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft caRepository: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Mar 2024 16:08:44 +0000 Certificate not after: Thu 13 Mar 2025 16:13:44 +0000 Subordinate resources: IP: 202.57.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:83:29:8d:2b:8c:bd:dd:71:d2:71:3f:80:4b:87:0c:6b:70:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 16:08:44 2024 GMT Not After : Mar 13 16:13:44 2025 GMT Subject: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:ea:b8:3a:4d:a0:b1:73:7a:53:3e:85:14: 63:d7:bf:6f:75:da:1a:0e:9c:04:55:6e:1f:4d:40: 20:09:22:5a:e1:33:7a:23:30:69:1d:1e:27:46:54: 3d:b1:da:fe:c6:62:46:ff:dd:86:c7:ba:7c:57:15: 7e:9e:02:f4:49:2b:a2:a6:65:c0:f7:58:8a:e5:43: a9:9b:a5:6b:4e:70:d9:2a:d5:57:dc:f7:dc:9f:0d: d4:f9:9e:b0:75:0a:b9:7f:0a:1d:8c:74:f4:8e:ae: 3e:09:da:23:0b:7c:d2:0e:58:a5:c3:23:52:96:75: 0e:2b:97:ba:b0:4e:76:e4:af:75:30:6f:3e:00:52: cc:8a:d8:16:2f:17:01:b5:ff:fd:e3:ef:42:3c:14: 90:35:39:8f:b9:14:be:fe:ce:0a:18:11:58:b3:6d: b1:b5:d2:82:b6:db:ff:b2:69:99:cf:0d:9f:1a:b8: e5:64:cd:42:7e:9e:f9:97:19:e4:53:b7:03:c0:d0: 75:2f:f7:f0:4e:b7:2b:95:10:4d:ec:62:a5:53:4f: 1d:fc:40:cc:32:06:93:bd:56:e1:53:a6:95:94:04: 2e:4d:1d:d1:87:c7:6d:d9:12:38:9b:5c:b8:fd:e8: f5:da:d8:99:cd:8a:ce:84:66:ed:35:db:2e:f0:37: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.16.0/20 Signature Algorithm: sha256WithRSAEncryption 50:97:91:41:81:19:86:77:85:1b:82:80:a2:78:eb:5f:85:b4: 27:45:1a:e6:03:18:e8:f5:35:5d:49:05:50:24:17:ef:6d:e0: 48:d2:19:7d:2e:13:2a:d0:0f:d8:a6:ff:ec:ae:f7:da:a4:a5: 4b:8c:f0:67:98:7b:18:ac:6a:67:2b:bb:5a:22:8a:7f:34:3a: 78:ad:86:c0:fe:d4:48:eb:4e:32:f4:5e:b2:8d:30:09:d3:80: 5e:f5:11:2a:87:27:f4:1a:4a:cc:12:bd:7b:03:36:f7:a0:19: 44:b4:82:85:d7:af:10:82:f3:bf:2b:14:39:c6:ee:db:5e:3b: 4a:a7:e7:14:e3:9d:d4:90:d3:c6:63:0e:73:9c:1c:e7:d6:e7: fe:f0:54:5e:f1:8e:f6:a9:de:27:cb:52:34:57:22:be:89:61: 6c:f9:9f:a3:c7:23:e4:6f:05:45:5a:b9:1c:ce:1a:a5:14:bc: 0d:49:98:be:c2:96:91:03:69:ff:0c:fd:c4:1f:3b:33:73:92: 19:bb:7e:2e:6b:c5:7b:50:c3:a8:94:bf:72:97:ed:44:e6:2c: 39:cb:bd:7f:54:61:0f:09:87:76:30:a6:28:e9:32:d9:6b:3d: f4:d0:59:cb:61:c7:ab:9c:d2:e6:a1:6d:bd:20:7c:7d:db:ea: 93:5b:b0:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ5KDKY0rjL3dcdJxP4BLhwxrcC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNDE2MDg0NFoX DTI1MDMxMzE2MTM0NFowMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjEx OEE4ODhCODFCRjI3Qjg1OUJENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMda6rg6TaCxc3pTPoUUY9e/b3XaGg6cBFVuH01AIAkiWuEzeiMwaR0eJ0ZU PbHa/sZiRv/dhse6fFcVfp4C9EkroqZlwPdYiuVDqZula05w2SrVV9z33J8N1Pme sHUKuX8KHYx09I6uPgnaIwt80g5YpcMjUpZ1DiuXurBOduSvdTBvPgBSzIrYFi8X AbX//ePvQjwUkDU5j7kUvv7OChgRWLNtsbXSgrbb/7Jpmc8Nnxq45WTNQn6e+ZcZ 5FO3A8DQdS/38E63K5UQTexipVNPHfxAzDIGk71W4VOmlZQELk0d0YfHbdkSOJtc uP3o9drYmc2KzoRm7TXbLvA3yokCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB+Wnumwg40iFWEYqIi4G/J7hZvVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTVi LTcxMzAtNDEyMi1hZjI1LTdkMmU3YTExYjFiMS8wLzFGOTY5RUU5QjA4MzhEMjIx NTYxMThBODg4QjgxQkYyN0I4NTlCRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKORAwDQYJKoZIhvcNAQELBQADggEBAFCXkUGBGYZ3hRuCgKJ461+FtCdFGuYD GOj1NV1JBVAkF+9t4EjSGX0uEyrQD9im/+yu99qkpUuM8GeYexisamcru1oiin80 OnithsD+1EjrTjL0XrKNMAnTgF71ESqHJ/QaSswSvXsDNvegGUS0goXXrxCC878r FDnG7tteO0qn5xTjndSQ08ZjDnOcHOfW5/7wVF7xjvap3ifLUjRXIr6JYWz5n6PH I+RvBUVauRzOGqUUvA1JmL7ClpEDaf8M/cQfOzNzkhm7fi5rxXtQw6iUv3KX7UTm LDnLvX9UYQ8Jh3YwpijpMtlrPfTQWcthx6uc0uahbb0gfH3b6pNbsBE= -----END CERTIFICATE-----Generated at Wed May 8 04:37:47 2024 by rpki-client on console-fra.rpki-client.org