$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer File: 90508FF980097E19CEF65ED72A856616A6F690AB.cer (raw, json) Hash identifier: V3cxphs3XjjiGIeAN1oBNnYghvMiP5ZrKY7pSkOxc+s= Subject key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 64AD0C8D56D1258E4F34CD3C1B4FA4FC619D7346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 19:35:14 +0000 Certificate not after: Mon 30 Jun 2025 19:40:14 +0000 Subordinate resources: IP: 103.119.228.0/22 IP: 2001:df5:f100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ad:0c:8d:56:d1:25:8e:4f:34:cd:3c:1b:4f:a4:fc:61:9d:73:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 19:35:14 2024 GMT Not After : Jun 30 19:40:14 2025 GMT Subject: CN=90508FF980097E19CEF65ED72A856616A6F690AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:c1:78:7c:c5:42:57:7e:92:eb:81:c9:48: b8:87:e4:36:c8:99:d6:c9:1c:88:8d:5b:7a:81:9e: f0:69:91:71:16:41:02:0f:91:5a:32:bc:4a:67:f4: ad:6a:b1:c3:6d:30:54:de:91:71:8d:c2:58:6a:0f: 2d:55:5d:e0:c8:30:f6:f3:0b:44:53:ab:7a:d6:66: 1e:0c:55:c7:7f:c2:df:18:d9:23:c4:06:65:8b:39: cc:40:a8:b9:06:0b:03:01:65:b6:03:4c:a7:e5:5c: c7:7e:ab:e5:88:80:fd:55:d0:b9:bc:b7:10:e5:75: 88:51:79:18:5d:a0:b9:bb:cb:f1:ae:d4:f0:fb:cf: 7a:21:57:31:32:45:db:b1:c6:15:ed:8e:70:49:7e: e2:ae:f5:fa:99:3c:dc:39:60:3b:1e:3d:cd:d1:d8: 4e:ad:11:19:a0:77:e4:fa:1a:6c:d8:3f:3c:90:70: 3b:c4:fe:ae:cf:0c:2a:03:27:df:83:c7:dd:8b:73: 8d:2f:80:31:08:36:5b:06:5f:fc:e2:17:26:5c:be: bc:69:5e:5d:37:6c:6a:e3:ec:ae:0b:28:dc:c7:53: e2:94:c5:a3:63:7d:a1:a4:04:72:d8:43:12:4c:41: 5c:d8:b5:da:aa:5f:52:e1:17:88:93:75:85:aa:c3: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.228.0/22 IPv6: 2001:df5:f100::/48 Signature Algorithm: sha256WithRSAEncryption 34:9d:3b:83:ed:32:31:33:a8:a7:88:da:39:64:20:d9:e3:67: da:0a:db:d1:ff:c4:83:c2:09:88:0f:eb:31:60:b8:7c:cc:58: f2:24:23:e0:c1:81:c7:02:b9:08:f4:3c:ba:b8:1a:3d:f9:55: 49:a9:9d:22:20:04:25:31:7b:73:83:26:51:ee:c6:2d:27:25: 68:7f:e4:10:48:f9:17:6f:9c:b2:f7:bb:73:c0:f3:72:a6:6e: a1:24:e3:e7:28:8f:1c:88:14:fd:12:31:5d:ee:65:b3:a3:97: 1c:84:ea:8f:f4:56:75:59:8a:b0:f3:39:25:26:0a:b8:0d:a5: ea:3d:ed:93:e2:b2:76:c5:33:0b:df:bf:85:c3:3b:20:60:fc: e4:4e:1c:0e:47:79:f3:d6:77:e7:78:5b:32:44:fa:70:f2:23: 31:e1:42:30:cf:96:93:bd:06:13:9e:96:23:4b:56:a6:c8:ab: ac:19:13:cc:b2:a9:da:a3:04:73:d2:26:34:51:fe:07:b4:6c: 63:f8:7e:51:25:d5:4f:e7:7c:8b:7d:76:67:74:5b:57:1c:c8: 9c:db:8f:b7:97:73:20:e4:6b:79:dc:4a:02:96:3d:1c:73:94: 49:91:e3:04:17:6c:07:38:6a:ab:c0:98:9a:99:18:96:91:12: 6e:55:dc:f8 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZK0MjVbRJY5PNM08G0+k/GGdc0YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE5MzUxNFoX DTI1MDYzMDE5NDAxNFowMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1 RUQ3MkE4NTY2MTZBNkY2OTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYDwXh8xUJXfpLrgclIuIfkNsiZ1skciI1beoGe8GmRcRZBAg+RWjK8Smf0 rWqxw20wVN6RcY3CWGoPLVVd4Mgw9vMLRFOretZmHgxVx3/C3xjZI8QGZYs5zECo uQYLAwFltgNMp+Vcx36r5YiA/VXQuby3EOV1iFF5GF2gubvL8a7U8PvPeiFXMTJF 27HGFe2OcEl+4q71+pk83DlgOx49zdHYTq0RGaB35PoabNg/PJBwO8T+rs8MKgMn 34PH3YtzjS+AMQg2WwZf/OIXJly+vGleXTdsauPsrgso3MdT4pTFo2N9oaQEcthD EkxBXNi12qpfUuEXiJN1harDuTUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJBQj/mACX4ZzvZe1yqFZham9pCrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ODNlM2Jl LTU3ZTItNDEyNS1hMGM1LTlhOWVhNTAxYmYwNS8wLzkwNTA4RkY5ODAwOTdFMTlD RUY2NUVENzJBODU2NjE2QTZGNjkwQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnd+QwDwQCAAIwCQMHACABDfXxADANBgkqhkiG9w0BAQsFAAOCAQEANJ07g+0y MTOop4jaOWQg2eNn2grb0f/Eg8IJiA/rMWC4fMxY8iQj4MGBxwK5CPQ8urgaPflV SamdIiAEJTF7c4MmUe7GLSclaH/kEEj5F2+csve7c8DzcqZuoSTj5yiPHIgU/RIx Xe5ls6OXHITqj/RWdVmKsPM5JSYKuA2l6j3tk+KydsUzC9+/hcM7IGD85E4cDkd5 89Z353hbMkT6cPIjMeFCMM+Wk70GE56WI0tWpsirrBkTzLKp2qMEc9ImNFH+B7Rs Y/h+USXVT+d8i312Z3RbVxzInNuPt5dzIORredxKApY9HHOUSZHjBBdsBzhqq8CY mpkYlpESblXc+A== -----END CERTIFICATE-----Generated at Sun Feb 16 21:09:04 2025 by rpki-client