$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer (raw, json) Hash identifier: zNk165mnLyXv1DMBJYf32jpkbEmQ3KVsRQGb5Zucz2c= Subject key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41FC5D2B597EF44B36E51040244EA32794E4FB47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft caRepository: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Aug 2024 06:32:01 +0000 Certificate not after: Tue 26 Aug 2025 06:37:01 +0000 Subordinate resources: IP: 202.74.72.0/22 IP: 2400:7dc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fc:5d:2b:59:7e:f4:4b:36:e5:10:40:24:4e:a3:27:94:e4:fb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 27 06:32:01 2024 GMT Not After : Aug 26 06:37:01 2025 GMT Subject: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:15:48:83:66:f8:9d:ae:f8:97:0d:f5:a3: fb:58:9c:4e:58:2e:81:ba:2b:7e:dc:65:82:72:bc: 98:de:d4:01:aa:07:b9:c2:0e:22:81:20:7f:85:9d: eb:ce:94:2d:51:b2:cd:69:41:8b:16:3f:97:95:11: 5b:ab:9d:0f:ec:8e:d7:17:8f:92:8e:8d:31:03:6f: c2:5e:26:fe:8a:72:eb:d1:79:e3:21:1a:5e:f7:2f: 4e:9d:f5:a9:45:f8:07:c5:c5:35:84:3e:9f:33:c5: 80:4a:9f:eb:2b:ee:90:61:e2:e7:7c:bc:55:cd:93: d3:1b:0d:f2:9c:4a:6b:7e:2a:94:2f:8b:c9:5c:65: e8:84:1f:d1:b9:53:7e:a7:d0:d2:93:4a:57:45:03: 1e:ff:6e:cd:4f:3b:02:70:d3:07:58:33:bc:62:33: e2:96:fb:00:97:a7:0e:0c:02:6d:86:bc:cc:69:4f: 7d:b9:a1:af:d9:4e:9d:10:5e:ab:19:34:1d:1c:8d: ee:40:2f:5e:98:e1:80:99:55:1b:5d:d6:c6:ef:70: 10:99:cd:5f:25:9b:59:63:4c:e5:f0:75:37:91:bb: b0:4f:30:9f:2a:ec:ec:9a:7f:5d:ee:25:35:0b:24: 08:78:5b:79:ca:ff:68:0f:4b:74:19:4f:8d:cc:5d: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.74.72.0/22 IPv6: 2400:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:5c:75:0b:4b:f5:98:67:ad:35:02:06:20:13:6d:90:98:68: e5:47:60:ed:b8:45:94:29:64:e3:35:4d:d3:c7:13:c3:d8:39: f5:ff:fc:93:d1:d5:a7:89:d6:1d:39:d5:4d:27:09:eb:27:eb: 6f:7b:8a:b4:ee:12:34:d2:6e:57:83:06:8b:1c:e0:e2:da:a1: ed:86:06:6f:fc:e7:55:66:29:e5:51:89:d5:6d:28:92:3e:72: 12:c0:fe:d4:a9:f8:dc:c2:51:3a:28:7f:4c:5a:36:f2:65:e3: b8:85:ff:11:3b:4c:85:4f:e1:31:9a:68:3f:9d:d2:8e:bb:78: 14:c8:f6:1b:bf:4a:d8:ae:64:d7:09:ba:c1:ce:8e:8f:15:ef: e5:06:59:49:4a:e7:6a:66:ff:d8:f5:22:96:b5:58:e9:11:f4: 4f:40:c5:8f:18:ab:47:7f:1b:3b:58:d1:51:88:17:80:f9:ce: 00:68:18:45:40:46:35:fa:66:4f:8e:6e:d2:30:8b:0f:44:c0: 84:eb:1f:ff:65:13:2d:42:28:da:d6:dd:fc:85:1f:75:6d:93: cf:c3:5a:8c:9f:f9:9f:d5:ee:67:4f:a3:bb:ea:8b:bc:19:0e: 43:5f:e9:c4:4c:e1:d9:f8:51:88:3b:08:a0:eb:81:db:1d:42: 58:6e:35:d1 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQfxdK1l+9Es25RBAJE6jJ5Tk+0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNzA2MzIwMVoX DTI1MDgyNjA2MzcwMVowMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdG RjFFMEMyQTYxQTFERjQ0NDkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxhFUiDZvidrviXDfWj+1icTlgugborftxlgnK8mN7UAaoHucIOIoEgf4Wd 686ULVGyzWlBixY/l5URW6udD+yO1xePko6NMQNvwl4m/opy69F54yEaXvcvTp31 qUX4B8XFNYQ+nzPFgEqf6yvukGHi53y8Vc2T0xsN8pxKa34qlC+LyVxl6IQf0blT fqfQ0pNKV0UDHv9uzU87AnDTB1gzvGIz4pb7AJenDgwCbYa8zGlPfbmhr9lOnRBe qxk0HRyN7kAvXpjhgJlVG13Wxu9wEJnNXyWbWWNM5fB1N5G7sE8wnyrs7Jp/Xe4l NQskCHhbecr/aA9LdBlPjcxdwwkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJZ+lLPedx5MWXf/HgwqYaHfREk5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MGM4Njdi LTJjYjktNDU3Yi04NTZiLWEyYWZhMzhmNTdjYy8wLzk2N0U5NEIzREU3NzFFNEM1 OTc3RkYxRTBDMkE2MUExREY0NDQ5MzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BALKSkgwDQQCAAIwBwMFACQAfcAwDQYJKoZIhvcNAQELBQADggEBAG5cdQtL9Zhn rTUCBiATbZCYaOVHYO24RZQpZOM1TdPHE8PYOfX//JPR1aeJ1h051U0nCesn6297 irTuEjTSbleDBosc4OLaoe2GBm/851VmKeVRidVtKJI+chLA/tSp+NzCUToof0xa NvJl47iF/xE7TIVP4TGaaD+d0o67eBTI9hu/StiuZNcJusHOjo8V7+UGWUlK52pm /9j1Ipa1WOkR9E9AxY8Yq0d/GztY0VGIF4D5zgBoGEVARjX6Zk+ObtIwiw9EwITr H/9lEy1CKNrW3fyFH3Vtk8/DWoyf+Z/V7mdPo7vqi7wZDkNf6cRM4dn4UYg7CKDr gdsdQlhuNdE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:44 2024 by rpki-client on console-ams.rpki-client.org