$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer (raw, json) Hash identifier: KsBaHtGf+J4TA87PwA4gvXatSAQmUx60AQlYfNX5zLM= Subject key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32C792B91BD76F4DAE63EB143B67B974B2578E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 03:48:51 +0000 Certificate not after: Fri 08 Aug 2025 03:53:51 +0000 Subordinate resources: IP: 2404:97c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:92:b9:1b:d7:6f:4d:ae:63:eb:14:3b:67:b9:74:b2:57:8e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 03:48:51 2024 GMT Not After : Aug 8 03:53:51 2025 GMT Subject: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:8c:c0:8c:c4:0a:8f:22:e2:5f:ab:e9:71: bf:a4:1c:23:09:a5:e2:ec:b7:4e:50:88:0c:d1:ce: a0:f6:d9:50:eb:14:ab:aa:73:0b:60:b7:49:d8:bd: d8:f3:01:ee:c0:3b:eb:54:34:c7:f8:24:dd:97:67: 79:52:a1:55:8d:20:20:a8:84:ce:2b:f0:e3:01:b3: 21:4f:c9:d3:ea:50:ae:40:6e:1a:15:88:7b:72:11: b3:93:12:52:30:14:12:f8:18:15:bf:b6:df:01:78: 2b:c6:a6:63:10:f5:38:d4:0b:3f:a5:a7:e1:30:d0: dd:59:31:ea:aa:2e:21:c5:8c:d0:d3:ad:95:ca:ec: 0e:64:40:a4:87:8f:c9:cb:cb:05:33:e6:47:f8:e2: 84:8b:e1:a2:0b:c6:4d:a9:89:b2:4c:c5:64:87:5c: e2:3e:f2:0c:4b:e6:c5:50:d9:ac:54:62:03:01:df: 1b:a4:d0:af:9e:75:2c:7e:9e:37:27:27:f5:bc:1b: 74:58:6d:1b:0b:ea:10:a8:01:8a:70:d1:91:0a:16: 77:ce:ef:89:71:37:4d:6e:1b:d1:01:aa:d4:57:3a: fd:40:50:5a:6c:a9:85:ed:13:89:2e:30:e2:71:3c: b7:68:e4:87:00:c2:0c:35:48:55:3c:ba:34:e2:a0: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:c5:61:11:9e:92:26:34:fc:5a:36:3f:71:ae:69:72:f9:3a: 56:c6:e5:dd:d4:b5:b5:11:75:90:59:13:50:b7:ef:02:8d:22: d8:c2:19:42:ac:70:7d:1c:20:ed:82:97:3c:b0:86:3b:87:fc: cd:e5:f0:06:fa:7c:96:a7:f7:d9:1b:a1:f5:c3:fc:d2:e4:71: 06:d8:92:0e:6c:59:00:47:9f:b6:e3:da:4d:30:c7:17:9e:6f: 4b:71:ca:58:ba:18:16:e6:40:c5:e7:a0:14:41:8d:f0:7f:63: 5a:8e:bf:31:11:10:da:63:9d:7b:59:f2:08:f2:c4:9e:bd:8c: 34:8c:0b:e6:fd:a6:5b:43:30:51:40:11:ea:92:6a:b7:75:03: 41:51:7c:c2:3e:d5:2b:3e:bf:b2:35:3a:1f:d6:75:b5:20:9e: a9:28:7a:b4:e4:25:2a:9c:90:06:22:00:91:74:a0:eb:09:24: eb:20:00:eb:d3:2b:1f:37:21:12:1c:84:de:4b:23:22:55:20: 34:21:de:5e:48:8f:ee:c6:c4:19:8b:c3:84:44:cc:d3:1f:19: e2:1a:9f:0d:95:5d:1f:0b:5e:ad:e6:a4:38:5a:0c:95:72:3f: 67:52:60:71:b6:66:ef:6a:a1:d9:b3:bc:6e:fd:d6:2f:e9:1c: 8f:58:fe:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMseSuRvXb02uY+sUO2e5dLJXjncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwOTAzNDg1MVoX DTI1MDgwODAzNTM1MVowMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEz MDczNkU0Q0NCMDQ4QzFENTE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrujMCMxAqPIuJfq+lxv6QcIwml4uy3TlCIDNHOoPbZUOsUq6pzC2C3Sdi9 2PMB7sA761Q0x/gk3ZdneVKhVY0gIKiEzivw4wGzIU/J0+pQrkBuGhWIe3IRs5MS UjAUEvgYFb+23wF4K8amYxD1ONQLP6Wn4TDQ3Vkx6qouIcWM0NOtlcrsDmRApIeP ycvLBTPmR/jihIvhogvGTamJskzFZIdc4j7yDEvmxVDZrFRiAwHfG6TQr551LH6e Nycn9bwbdFhtGwvqEKgBinDRkQoWd87viXE3TW4b0QGq1Fc6/UBQWmyphe0TiS4w 4nE8t2jkhwDCDDVIVTy6NOKgXFECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3z2z2iHQAiICEwc25MywSMHVFYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODEx LWJlNTAtNGNhYS05Zjk2LTYzZDM3MjAzMTFkZS8xLzRERjNEQjNEQTIxRDAwMjIy MDIxMzA3MzZFNENDQjA0OEMxRDUxNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBJfAMA0GCSqGSIb3DQEBCwUAA4IBAQAdxWERnpImNPxaNj9xrmly+TpWxuXd 1LW1EXWQWRNQt+8CjSLYwhlCrHB9HCDtgpc8sIY7h/zN5fAG+nyWp/fZG6H1w/zS 5HEG2JIObFkAR5+249pNMMcXnm9LccpYuhgW5kDF56AUQY3wf2Najr8xERDaY517 WfII8sSevYw0jAvm/aZbQzBRQBHqkmq3dQNBUXzCPtUrPr+yNTof1nW1IJ6pKHq0 5CUqnJAGIgCRdKDrCSTrIADr0ysfNyESHITeSyMiVSA0Id5eSI/uxsQZi8OERMzT HxniGp8NlV0fC16t5qQ4WgyVcj9nUmBxtmbvaqHZs7xu/dYv6RyPWP4i -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:17 2024 by rpki-client on console-fra.rpki-client.org