$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer (raw, json) Hash identifier: iUj/R1MxjZlet5EhthQDj8kNuC18PHGQ8IiKz17/etI= Subject key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6826B87AE8DAE6708DE0B03993F49BDEAF5221AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft caRepository: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 03:44:15 +0000 Certificate not after: Tue 01 Jul 2025 03:49:15 +0000 Subordinate resources: IP: 103.107.248.0/22 IP: 117.74.120.0/21 IP: 2402:600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:26:b8:7a:e8:da:e6:70:8d:e0:b0:39:93:f4:9b:de:af:52:21:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 03:44:15 2024 GMT Not After : Jul 1 03:49:15 2025 GMT Subject: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:06:55:c9:06:54:1a:38:76:34:49:ae:e4: 58:bc:3f:87:4f:59:37:ce:7f:fe:52:29:df:c2:d8: b3:70:65:92:14:4c:07:7a:54:0a:df:93:4c:ff:49: 45:6d:af:55:55:e5:f9:09:df:30:4c:a2:c6:1c:bf: c4:d1:d7:71:21:ed:dc:bd:8b:71:a4:75:ce:6d:87: e4:66:23:9e:86:70:26:cb:63:13:a8:8f:aa:6f:3f: 56:b6:63:6c:81:85:4c:6e:89:65:87:02:f8:0e:0c: 93:3c:c0:c0:2f:3f:05:7e:57:5b:6e:51:5e:cd:15: 88:61:c0:bb:20:22:e8:6f:2c:7d:20:f9:73:bc:54: 06:71:85:fb:d9:34:aa:f3:72:c7:88:1a:11:51:94: 59:71:95:a8:65:64:d5:54:c1:14:37:00:15:0e:c6: 8d:0c:c2:20:e3:72:95:ce:2e:2f:5a:69:05:90:46: da:f6:3b:9f:83:f0:6d:6f:24:b2:50:4d:b2:04:67: 7b:d3:50:b5:c3:73:3e:a2:ba:48:03:05:c2:1d:09: 22:77:86:14:a4:fb:e6:4d:b8:ad:60:cf:91:bd:31: 58:0d:37:4f:29:51:57:a8:0b:fb:2a:4d:18:d9:31: 2c:35:e5:36:35:c0:63:53:d5:85:4a:e2:ed:71:b8: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.248.0/22 117.74.120.0/21 IPv6: 2402:600::/32 Signature Algorithm: sha256WithRSAEncryption 0c:b9:71:80:c5:33:1b:4b:9d:7d:cf:c8:6e:3a:47:0e:bf:6b: 42:fb:b7:69:ea:dd:d1:e1:45:a1:97:37:44:98:47:f1:82:a2: 85:79:57:59:4a:53:20:83:e7:2c:7f:6d:84:7d:c2:23:60:37: c1:16:70:9b:a9:03:84:a2:8b:9e:00:82:49:a2:f9:f8:37:31: a9:68:6e:f1:48:bb:c1:a1:dc:3e:22:10:a2:3f:22:b3:e1:9a: 83:58:b7:ef:14:1d:82:a6:8a:27:5a:54:2c:b7:27:7f:f7:fe: b9:2b:9b:14:1b:0a:5a:4b:54:e3:09:96:04:c8:b0:68:6f:ec: fd:c6:70:01:fa:51:00:07:f4:94:ba:f3:a3:9e:6a:c0:08:0e: 80:5d:7f:cf:98:7e:86:b4:9a:e5:db:35:4c:b5:66:23:18:f1: f3:94:0b:6e:79:a1:ee:04:7e:3c:29:c0:a5:91:07:f9:3e:95: 1d:2d:64:5d:24:cf:f6:84:9e:a6:9e:b0:be:a1:a4:3c:4c:ef: 2f:e6:9d:ac:0f:b3:26:50:37:73:74:4f:69:b8:3f:7a:90:3f: 87:bd:e4:04:3b:46:00:a1:4b:15:f3:c4:d3:22:6c:84:e6:0b: ca:c7:fd:3d:96:ef:10:88:9c:13:58:04:bf:97:21:93:bb:fb: 9d:d4:d8:87 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUaCa4euja5nCN4LA5k/Sb3q9SIa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAzNDQxNVoX DTI1MDcwMTAzNDkxNVowMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFC RjNCREYyMEQ4MkEyRERGRDhGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdrBlXJBlQaOHY0Sa7kWLw/h09ZN85//lIp38LYs3BlkhRMB3pUCt+TTP9J RW2vVVXl+QnfMEyixhy/xNHXcSHt3L2LcaR1zm2H5GYjnoZwJstjE6iPqm8/VrZj bIGFTG6JZYcC+A4MkzzAwC8/BX5XW25RXs0ViGHAuyAi6G8sfSD5c7xUBnGF+9k0 qvNyx4gaEVGUWXGVqGVk1VTBFDcAFQ7GjQzCIONylc4uL1ppBZBG2vY7n4PwbW8k slBNsgRne9NQtcNzPqK6SAMFwh0JIneGFKT75k24rWDPkb0xWA03TylRV6gL+ypN GNkxLDXlNjXAY1PVhUri7XG4zCsCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNdstRIj64sEeG/O98g2Cot39jzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5 LTM1MzctNGJjNy04NjEzLThlOTgxNjI5ZTRjYS8wLzkzNURCMkQ0NDg4RkFFMkMx MUUxQkYzQkRGMjBEODJBMkRERkQ4RjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJna/gDBAN1SngwDQQCAAIwBwMFACQCBgAwDQYJKoZIhvcNAQELBQADggEBAAy5 cYDFMxtLnX3PyG46Rw6/a0L7t2nq3dHhRaGXN0SYR/GCooV5V1lKUyCD5yx/bYR9 wiNgN8EWcJupA4Sii54Agkmi+fg3MalobvFIu8Gh3D4iEKI/IrPhmoNYt+8UHYKm iidaVCy3J3/3/rkrmxQbClpLVOMJlgTIsGhv7P3GcAH6UQAH9JS686OeasAIDoBd f8+Yfoa0muXbNUy1ZiMY8fOUC255oe4EfjwpwKWRB/k+lR0tZF0kz/aEnqaesL6h pDxM7y/mnawPsyZQN3N0T2m4P3qQP4e95AQ7RgChSxXzxNMibITmC8rH/T2W7xCI nBNYBL+XIZO7+53U2Ic= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org