$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer File: 2985976A4B3081770748882703E16497964D05A6.cer (raw, json) Hash identifier: nHWaYFPjdoGR1aZ31eUIhigVaWcPMqtj9pVjaFRyiJs= Subject key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2729F77B94F0475A6236F01006D11AC3D9E7DCFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 10:10:27 +0000 Certificate not after: Tue 01 Jul 2025 10:15:27 +0000 Subordinate resources: IP: 103.197.92.0/22 IP: 2403:80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:f7:7b:94:f0:47:5a:62:36:f0:10:06:d1:1a:c3:d9:e7:dc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 10:10:27 2024 GMT Not After : Jul 1 10:15:27 2025 GMT Subject: CN=2985976A4B3081770748882703E16497964D05A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:39:a4:a5:ed:b9:fc:ad:34:9e:94:a2:96: c6:6d:07:41:54:e1:0a:9a:75:61:3d:5c:76:b9:74: 8d:b3:f4:2e:74:45:70:9b:c0:ae:ae:ae:d6:6d:c8: 23:6b:f9:fb:31:6f:a1:c0:1c:36:f1:85:95:b7:8a: a8:c9:9e:37:6d:b8:54:f4:dd:ed:2a:13:90:89:cd: 97:0f:af:c8:e0:1d:ea:08:c7:2c:bd:e0:e6:6b:9a: 4e:e4:72:95:04:93:7e:ca:e5:13:fc:e6:00:66:0b: 18:6b:46:b9:26:b3:11:a4:b4:6e:8b:8b:48:bd:98: c1:08:59:43:14:43:7f:bd:1f:50:ec:c5:42:53:fb: 7f:c5:3f:66:2a:b5:78:6b:1e:db:c6:4a:dc:f2:1f: 39:31:60:7d:e2:8b:96:5d:2e:2a:e7:e0:ea:b1:85: 34:94:fe:de:b4:c8:2b:4d:50:37:77:49:bb:91:ed: 42:d3:63:e0:bd:1b:2c:51:61:74:b2:76:9b:c1:0d: 03:6e:86:72:9e:0b:ff:00:ec:aa:ff:1f:cf:2c:52: 9d:82:56:59:e3:3b:e2:c6:97:f4:be:bb:bd:28:d0: d7:0b:b3:97:89:6e:79:8f:70:12:de:4c:b3:db:da: b8:fb:ca:48:34:f9:bc:1c:a3:dd:64:fb:af:b1:f5: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.92.0/22 IPv6: 2403:80::/32 Signature Algorithm: sha256WithRSAEncryption 4b:86:b8:58:4c:1b:0e:bf:6d:cf:e7:9f:26:21:62:e8:dd:8b: 8c:f9:bd:bf:01:84:39:12:4b:72:82:b6:8e:b3:85:0d:f6:98: 35:a7:40:64:a2:3b:fd:db:03:28:77:a6:e1:18:bb:cc:8e:24: 76:2e:1b:86:75:6e:00:b3:61:06:a0:5d:9c:f7:6a:5e:ae:e7: d0:71:8f:59:eb:92:74:76:ce:01:78:38:1a:93:6f:44:07:40: 81:31:5d:46:3c:ad:32:dc:15:1d:f2:81:ae:8d:25:d0:b8:d6: df:f4:ce:d3:c5:06:21:d8:28:6f:8b:16:c5:f0:5c:be:4b:75: ff:3d:33:ee:61:ea:d1:a2:2f:b9:73:c1:1b:49:70:c8:be:58: bd:46:7a:8d:2d:8f:3b:dc:0d:c3:73:9e:ac:94:ec:02:8c:52: 52:b0:d7:bd:70:08:a2:44:18:ce:ad:4f:9a:d9:cd:47:33:27: f6:19:83:aa:1a:44:20:c3:df:b3:c0:cb:c1:23:ad:b8:bd:92: f8:0e:55:6c:a6:e8:d6:a0:6a:51:9b:ec:38:4c:48:0b:0c:10: dc:b0:e6:b4:00:45:e5:d5:e5:cc:f8:b4:61:13:a2:4a:76:12: 82:1f:ee:72:3f:df:7c:d6:1b:6d:2b:de:2f:82:8d:e2:44:b1: b0:be:a1:0f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJyn3e5TwR1piNvAQBtEaw9nn3P4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjEwMTAyN1oX DTI1MDcwMTEwMTUyN1owMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4 ODI3MDNFMTY0OTc5NjREMDVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPOOaSl7bn8rTSelKKWxm0HQVThCpp1YT1cdrl0jbP0LnRFcJvArq6u1m3I I2v5+zFvocAcNvGFlbeKqMmeN224VPTd7SoTkInNlw+vyOAd6gjHLL3g5muaTuRy lQSTfsrlE/zmAGYLGGtGuSazEaS0bouLSL2YwQhZQxRDf70fUOzFQlP7f8U/Ziq1 eGse28ZK3PIfOTFgfeKLll0uKufg6rGFNJT+3rTIK01QN3dJu5HtQtNj4L0bLFFh dLJ2m8ENA26Gcp4L/wDsqv8fzyxSnYJWWeM74saX9L67vSjQ1wuzl4lueY9wEt5M s9vauPvKSDT5vByj3WT7r7H1BbcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCmFl2pLMIF3B0iIJwPhZJeWTQWmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlZDEwMGRm LTA0NDEtNDM4MS1hM2ZhLTU4N2RiOWU5YzJmMC8wLzI5ODU5NzZBNEIzMDgxNzcw NzQ4ODgyNzAzRTE2NDk3OTY0RDA1QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnxVwwDQQCAAIwBwMFACQDAIAwDQYJKoZIhvcNAQELBQADggEBAEuGuFhMGw6/ bc/nnyYhYujdi4z5vb8BhDkSS3KCto6zhQ32mDWnQGSiO/3bAyh3puEYu8yOJHYu G4Z1bgCzYQagXZz3al6u59Bxj1nrknR2zgF4OBqTb0QHQIExXUY8rTLcFR3yga6N JdC41t/0ztPFBiHYKG+LFsXwXL5Ldf89M+5h6tGiL7lzwRtJcMi+WL1Geo0tjzvc DcNznqyU7AKMUlKw171wCKJEGM6tT5rZzUczJ/YZg6oaRCDD37PAy8Ejrbi9kvgO VWym6NagalGb7DhMSAsMENyw5rQAReXV5cz4tGETokp2EoIf7nI/33zWG20r3i+C jeJEsbC+oQ8= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org