$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer File: 20566897603B029812606C25ABC972BAC5BF4AFB.cer (raw, json) Hash identifier: w6P/bDinPfXE3WjAymxn2jRsNztPU73zo36ZFaP57CI= Subject key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 588F0CA60DA1CD628C3DE650625C2F008C5A3C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Nov 2024 08:17:58 +0000 Certificate not after: Mon 24 Nov 2025 08:22:58 +0000 Subordinate resources: IP: 203.190.40.0/21 IP: 2406:1b00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8f:0c:a6:0d:a1:cd:62:8c:3d:e6:50:62:5c:2f:00:8c:5a:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 25 08:17:58 2024 GMT Not After : Nov 24 08:22:58 2025 GMT Subject: CN=20566897603B029812606C25ABC972BAC5BF4AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:fe:36:7b:26:b0:fe:b1:1f:c0:22:cd:6c: f1:24:51:68:72:66:e2:cb:a8:09:02:76:3f:cf:75: f8:f5:39:9a:2e:86:56:9f:cb:49:f3:21:2a:2e:d1: 57:8d:2d:a4:b0:92:70:44:30:c8:e7:b0:01:7a:90: 14:5f:90:59:a4:96:84:67:6d:19:d5:ae:60:98:93: ed:4c:4a:eb:fd:cd:c0:c5:94:65:35:58:42:8b:a1: 63:0e:08:b7:ec:72:d7:cd:90:e4:1c:b9:4c:03:ae: 65:45:fa:e4:34:9e:4b:c4:3c:d2:3e:3b:02:19:8f: 1f:32:82:ff:c0:76:6c:0f:89:09:55:f1:56:88:72: cc:94:56:f1:65:e8:6e:0f:30:ca:97:08:21:c1:24: 62:17:f7:fe:dc:8e:48:e7:b8:d4:5e:8f:1f:86:a5: a0:76:7d:1a:89:75:33:68:fa:5b:d5:3c:e3:41:3a: d0:69:c9:6e:ab:2d:90:48:df:a3:75:4b:be:b7:07: 3a:19:ea:9c:59:3f:7e:de:bb:25:de:0a:6d:9a:1d: 82:11:50:86:5a:36:a7:a5:c1:20:4c:3f:9d:2a:10: 2f:70:0e:87:69:d9:cd:d9:61:68:7a:cc:b3:e7:59: c7:c5:52:46:ec:3a:85:8b:81:88:7e:fe:1c:c5:10: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.40.0/21 IPv6: 2406:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 25:73:da:b6:96:ac:fa:8b:f7:18:fa:49:2f:27:79:5a:1b:8b: bc:a4:02:ce:e4:92:b4:99:3a:90:89:fd:a2:0b:85:56:0c:fd: 76:bc:e2:54:4f:4c:20:9d:29:a0:14:03:ca:80:71:93:58:db: 71:e6:07:9d:65:cf:81:24:75:ae:16:44:16:5c:e5:2d:78:c7: fd:fb:7e:18:73:f8:f4:bf:81:11:cc:33:07:61:f2:fb:fb:eb: c3:27:e2:a8:a2:db:6f:43:37:27:b6:ff:88:eb:dd:8c:b2:98: e4:a2:1e:66:cc:8d:42:31:f2:1c:30:14:29:9b:15:f3:47:81: bb:0e:41:d1:fe:cd:bf:e4:ed:e9:d9:8a:ec:1a:de:05:42:9e: 3e:dd:06:f1:cc:86:37:bc:6b:f0:c1:60:fc:91:ec:f8:ca:d6: 35:76:ab:56:2a:5d:91:15:36:54:15:59:fb:27:15:af:86:b7: c8:32:27:01:ea:69:c2:6c:e5:3e:95:01:19:ef:61:26:72:a0: 79:97:56:c3:43:ca:19:a1:c8:fb:fc:14:c7:93:e1:db:93:03: cc:61:6a:f1:df:18:c0:77:d2:b0:8a:a0:dd:6a:00:dc:86:e1: 9d:b8:c4:93:08:ca:58:f7:a4:e3:70:e2:27:3a:05:e8:c9:48: f1:19:da:83 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUWI8Mpg2hzWKMPeZQYlwvAIxaPC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyNTA4MTc1OFoX DTI1MTEyNDA4MjI1OFowMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2 QzI1QUJDOTcyQkFDNUJGNEFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHs/jZ7JrD+sR/AIs1s8SRRaHJm4suoCQJ2P891+PU5mi6GVp/LSfMhKi7R V40tpLCScEQwyOewAXqQFF+QWaSWhGdtGdWuYJiT7UxK6/3NwMWUZTVYQouhYw4I t+xy182Q5By5TAOuZUX65DSeS8Q80j47AhmPHzKC/8B2bA+JCVXxVohyzJRW8WXo bg8wypcIIcEkYhf3/tyOSOe41F6PH4aloHZ9Gol1M2j6W9U840E60GnJbqstkEjf o3VLvrcHOhnqnFk/ft67Jd4KbZodghFQhlo2p6XBIEw/nSoQL3AOh2nZzdlhaHrM s+dZx8VSRuw6hYuBiH7+HMUQMLcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCBWaJdgOwKYEmBsJavJcrrFv0r7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYWNjMzY1 LWUxOTQtNGFjMC05NTNhLTRkZjNhNTkwMGIxNC8wLzIwNTY2ODk3NjAzQjAyOTgx MjYwNkMyNUFCQzk3MkJBQzVCRjRBRkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLvigwDQQCAAIwBwMFACQGGwAwDQYJKoZIhvcNAQELBQADggEBACVz2raWrPqL 9xj6SS8neVobi7ykAs7kkrSZOpCJ/aILhVYM/Xa84lRPTCCdKaAUA8qAcZNY23Hm B51lz4Ekda4WRBZc5S14x/37fhhz+PS/gRHMMwdh8vv768Mn4qii229DNye2/4jr 3YyymOSiHmbMjUIx8hwwFCmbFfNHgbsOQdH+zb/k7enZiuwa3gVCnj7dBvHMhje8 a/DBYPyR7PjK1jV2q1YqXZEVNlQVWfsnFa+Gt8gyJwHqacJs5T6VARnvYSZyoHmX VsNDyhmhyPv8FMeT4duTA8xhavHfGMB30rCKoN1qANyG4Z24xJMIylj3pONw4ic6 BejJSPEZ2oM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:18 2024 by rpki-client on console-ams.rpki-client.org