$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer (raw, json) Hash identifier: Ys5pmzn0wAlstqcCxo7qkinBYcLVE6qnywD5Z+yqcxQ= Subject key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23F1D08F627787B308FA1D0C73AB6F0E5314EC18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft caRepository: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 09:44:00 +0000 Certificate not after: Mon 30 Jun 2025 09:49:00 +0000 Subordinate resources: IP: 45.116.156.0/22 IP: 103.54.92.0/22 IP: 103.104.132.0/22 IP: 2407:df00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f1:d0:8f:62:77:87:b3:08:fa:1d:0c:73:ab:6f:0e:53:14:ec:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 09:44:00 2024 GMT Not After : Jun 30 09:49:00 2025 GMT Subject: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:5b:74:2d:a9:16:be:a7:da:e5:58:48:10: 19:f8:37:bc:12:d9:01:f5:ef:ee:ed:b1:d2:2b:d5: ad:54:02:34:bc:67:1c:be:f6:f2:62:9e:b8:6e:5b: 0c:b4:ad:2d:77:ef:d6:26:73:91:43:9d:16:7b:e0: 37:6b:41:21:4c:09:85:b0:34:bc:4d:b3:d0:fc:e2: 63:8f:a2:e8:59:27:7c:b5:15:36:1a:dc:75:0d:31: ed:81:63:02:12:03:58:7f:fe:84:11:e2:e1:a3:2f: f0:26:2a:72:0a:0a:3f:f2:5a:7f:df:3d:f2:77:e0: ba:18:7d:b7:90:1b:8b:b6:ab:9d:b0:46:a3:59:be: f2:b9:8b:ce:40:ef:84:be:30:1b:88:91:1f:8a:0d: 50:4a:9a:3b:13:e4:28:8c:34:a6:c5:6f:cd:33:9d: 34:72:e7:f9:6d:23:4b:30:44:50:66:8f:48:32:f3: c3:67:f5:33:45:35:18:0b:e5:96:6b:b7:7e:db:70: f9:56:9e:53:bf:8a:b6:a0:d7:fa:a6:79:41:f7:6a: 1c:a2:b1:62:c5:20:03:f6:cb:7f:b1:fd:0d:fa:80: f3:89:ce:35:54:df:8d:72:99:36:bb:bd:c7:79:cc: 6c:ec:69:6c:2e:7c:02:4e:cb:95:79:db:9e:85:b3: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/22 103.54.92.0/22 103.104.132.0/22 IPv6: 2407:df00::/32 Signature Algorithm: sha256WithRSAEncryption 10:cd:fe:52:71:87:e9:8f:d7:bb:49:c9:6e:c8:03:a3:ee:6c: 6a:74:16:ca:9d:de:90:4f:c9:53:0e:ee:b4:e3:07:16:0e:b9: 8d:c1:21:a7:fe:e1:ef:13:9a:ed:fe:25:87:60:62:ef:e2:bc: 84:59:81:6b:27:e8:8b:fe:d3:46:94:d1:b4:ac:8e:89:9c:18: fc:ef:41:b6:f5:7a:e6:30:e4:54:a8:ce:65:c2:76:85:a7:7d: 8d:6a:98:48:38:ad:28:32:38:8e:f5:55:60:44:29:ab:a1:28: 7c:7c:21:68:ee:ff:56:60:cd:b8:29:26:ba:99:3f:fc:e8:29: 7f:6e:53:16:48:07:5c:64:5f:88:b0:53:e5:c1:ac:75:96:00: 9c:5f:65:5c:ea:3d:b8:1e:6d:90:19:8c:e2:d4:fe:b8:85:18: 07:a3:bc:1f:2b:99:e6:fd:72:34:dd:1a:8a:4b:d2:d7:03:cd: 93:1e:c5:d4:5b:35:0c:68:ca:85:1c:00:ee:c2:d5:d2:15:9a: 4f:56:6f:5e:ac:5b:26:9f:b7:48:93:9f:21:06:eb:34:fa:33: 7b:6e:21:39:c1:f1:af:d9:fe:36:a4:52:20:03:06:85:a7:99: 3e:9f:72:21:9d:65:30:c1:0d:85:4e:1b:10:86:b3:85:55:6a: ca:4c:4a:e3 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUI/HQj2J3h7MI+h0Mc6tvDlMU7BgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA5NDQwMFoX DTI1MDYzMDA5NDkwMFowMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdD OTc3RjI2NkIyQkU3NEM4MUFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORbW3QtqRa+p9rlWEgQGfg3vBLZAfXv7u2x0ivVrVQCNLxnHL728mKeuG5b DLStLXfv1iZzkUOdFnvgN2tBIUwJhbA0vE2z0PziY4+i6FknfLUVNhrcdQ0x7YFj AhIDWH/+hBHi4aMv8CYqcgoKP/Jaf9898nfguhh9t5Abi7arnbBGo1m+8rmLzkDv hL4wG4iRH4oNUEqaOxPkKIw0psVvzTOdNHLn+W0jSzBEUGaPSDLzw2f1M0U1GAvl lmu3fttw+VaeU7+KtqDX+qZ5QfdqHKKxYsUgA/bLf7H9DfqA84nONVTfjXKZNru9 x3nMbOxpbC58Ak7LlXnbnoWzPL0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCKflhiuPwZn7BfJd/Jmsr50yBq3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFm LTZkYTktNDAwZC04YjE0LTk5MmFhZTYzNzQ2Yy8wLzIyOUY5NjE4QUUzRjA2NjdF QzE3Qzk3N0YyNjZCMkJFNzRDODFBQjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAItdJwDBAJnNlwDBAJnaIQwDQQCAAIwBwMFACQH3wAwDQYJKoZIhvcNAQELBQAD ggEBABDN/lJxh+mP17tJyW7IA6PubGp0Fsqd3pBPyVMO7rTjBxYOuY3BIaf+4e8T mu3+JYdgYu/ivIRZgWsn6Iv+00aU0bSsjomcGPzvQbb1euYw5FSozmXCdoWnfY1q mEg4rSgyOI71VWBEKauhKHx8IWju/1ZgzbgpJrqZP/zoKX9uUxZIB1xkX4iwU+XB rHWWAJxfZVzqPbgebZAZjOLU/riFGAejvB8rmeb9cjTdGopL0tcDzZMexdRbNQxo yoUcAO7C1dIVmk9Wb16sWyaft0iTnyEG6zT6M3tuITnB8a/Z/jakUiADBoWnmT6f ciGdZTDBDYVOGxCGs4VVaspMSuM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:19 2024 by rpki-client on console-ams.rpki-client.org