$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer (raw, json) Hash identifier: Yf2cMMSPifRntXljsqyx31Wf91hTThP2d1+/66lw+ic= Subject key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33C5CDEC9F2B04CE94A704CB8680BA152E49FE93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft caRepository: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 31 May 2024 13:49:47 +0000 Certificate not after: Fri 30 May 2025 13:54:47 +0000 Subordinate resources: IP: 27.124.74.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:cd:ec:9f:2b:04:ce:94:a7:04:cb:86:80:ba:15:2e:49:fe:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 31 13:49:47 2024 GMT Not After : May 30 13:54:47 2025 GMT Subject: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:7e:24:68:6c:34:08:aa:6d:0a:62:aa:ba: 45:47:31:de:e5:6b:dd:25:e3:8d:aa:68:bb:d2:68: 68:da:9e:11:05:32:a6:93:3a:8f:77:29:c5:f4:89: 7a:c1:16:ed:c0:2a:35:f2:1a:ba:84:ec:56:53:ed: f6:26:dc:c4:d1:92:40:d6:0e:49:e1:37:ba:80:e6: 54:f1:62:37:5e:ba:cb:8b:78:6c:ca:e0:2b:84:c5: 6f:aa:42:c9:42:39:27:e4:90:ad:7c:d0:9e:d1:c6: 48:3c:0d:ed:05:26:a4:a3:45:26:bf:9c:34:02:73: cc:43:4e:a6:7e:fe:f7:bf:91:fc:97:cb:db:c0:c5: a2:0d:5d:f6:36:4c:4c:94:2f:7b:20:cd:6b:1e:77: 23:6b:f2:c5:84:ca:72:a4:04:44:5e:7f:cc:a4:c9: 68:58:f4:88:fb:21:fc:ba:fa:89:96:93:a4:4d:b2: 3f:88:e1:f5:dd:4d:14:27:81:22:0d:8c:ab:79:31: 8f:44:da:57:c1:19:02:69:76:f3:d0:de:03:4d:0c: fd:95:c7:1f:94:5d:79:c7:88:07:b0:52:5f:dc:f2: d5:5b:fe:e2:9a:4b:7c:3b:83:af:d0:84:fb:47:59: df:9f:fd:02:83:59:1a:6e:62:46:e2:01:d9:07:ae: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.74.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:18:b3:91:22:54:2b:a1:ef:80:21:bd:b8:da:9c:29:21:0c: ae:5f:cc:00:eb:db:e8:e5:e7:e6:c8:bf:db:76:5e:aa:e0:f5: 18:fc:27:62:48:b9:be:63:79:19:ed:63:d8:2a:d0:dc:6e:c0: ea:39:60:96:39:88:4a:75:86:cb:e5:6f:56:3f:a2:6f:ed:72: 0b:48:b2:67:7f:35:e4:ab:90:79:75:9a:98:c7:62:95:31:75: a5:8c:7c:fa:7a:a0:81:2a:57:d7:cc:d6:51:01:bd:e5:5a:f5: 63:f5:be:b6:c3:7e:94:fe:10:92:ef:6c:c7:9b:1b:1a:a4:14: f3:13:3e:11:68:ca:e5:32:36:e2:0f:ea:bc:3f:0a:70:74:1e: de:32:f3:a8:01:9d:9d:f2:d7:7d:5b:84:5c:b7:e6:6d:54:c8: 81:95:97:3e:ec:9b:ae:94:47:be:7d:f1:c7:af:5d:28:56:5a: fb:65:de:10:56:37:41:26:55:ed:4e:ea:81:88:54:fa:29:79: f3:17:43:db:16:ec:d6:5b:5f:32:49:e1:26:1c:ac:70:27:23: e9:8b:24:72:7d:67:51:40:56:9e:45:06:e4:12:9c:37:26:b4: 9b:ed:4b:a3:1a:02:3d:cc:11:3e:f9:cb:f3:b5:75:e1:2d:b6: 33:22:8d:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM8XN7J8rBM6UpwTLhoC6FS5J/pMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUzMTEzNDk0N1oX DTI1MDUzMDEzNTQ0N1owMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhB MzkwRUE3M0RGQzBFMEU3Q0Y5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9xfiRobDQIqm0KYqq6RUcx3uVr3SXjjapou9JoaNqeEQUyppM6j3cpxfSJ esEW7cAqNfIauoTsVlPt9ibcxNGSQNYOSeE3uoDmVPFiN166y4t4bMrgK4TFb6pC yUI5J+SQrXzQntHGSDwN7QUmpKNFJr+cNAJzzENOpn7+97+R/JfL28DFog1d9jZM TJQveyDNax53I2vyxYTKcqQERF5/zKTJaFj0iPsh/Lr6iZaTpE2yP4jh9d1NFCeB Ig2Mq3kxj0TaV8EZAml289DeA00M/ZXHH5RdeceIB7BSX9zy1Vv+4ppLfDuDr9CE +0dZ35/9AoNZGm5iRuIB2QeurnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCnAZA3ZB23ATPijkOpz38Dg58+aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBm LTRmYjEtNDBjMC1iMzgwLTU5YTM4ZGJjOWExNi8wLzI5QzA2NDBERDkwNzZEQzA0 Q0Y4QTM5MEVBNzNERkMwRTBFN0NGOUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEbfEowDQYJKoZIhvcNAQELBQADggEBAE0Ys5EiVCuh74AhvbjanCkhDK5fzADr 2+jl5+bIv9t2Xqrg9Rj8J2JIub5jeRntY9gq0NxuwOo5YJY5iEp1hsvlb1Y/om/t cgtIsmd/NeSrkHl1mpjHYpUxdaWMfPp6oIEqV9fM1lEBveVa9WP1vrbDfpT+EJLv bMebGxqkFPMTPhFoyuUyNuIP6rw/CnB0Ht4y86gBnZ3y131bhFy35m1UyIGVlz7s m66UR7598cevXShWWvtl3hBWN0EmVe1O6oGIVPopefMXQ9sW7NZbXzJJ4SYcrHAn I+mLJHJ9Z1FAVp5FBuQSnDcmtJvtS6MaAj3MET75y/O1deEttjMijbA= -----END CERTIFICATE-----Generated at Sun Jun 23 00:03:53 2024 by rpki-client on console-ams.rpki-client.org