$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer (raw, json) Hash identifier: vdOAx1YsR/yY5VY9u3btTREXq5uBJKCmu1y/EZ9HqAw= Subject key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 694D1DB7FA5AC67E3A2BB89D46B65F5E4AE29378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft caRepository: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:12:41 +0000 Certificate not after: Mon 30 Jun 2025 14:17:41 +0000 Subordinate resources: IP: 103.110.184.0/23 IP: 2001:df4:6d00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4d:1d:b7:fa:5a:c6:7e:3a:2b:b8:9d:46:b6:5f:5e:4a:e2:93:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:12:41 2024 GMT Not After : Jun 30 14:17:41 2025 GMT Subject: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:44:d9:70:3f:b7:18:79:c9:9c:b0:92:bf: 27:63:a9:a9:3e:83:53:4a:2a:43:d3:b1:96:e2:5a: 25:57:dc:77:7f:3b:18:cd:56:e8:f5:20:b4:a8:b2: 05:f3:fb:98:23:a3:57:d4:80:23:51:76:9d:b3:f0: 0d:db:99:cf:c6:5a:16:92:ad:ee:05:e3:fc:f7:34: 43:a6:7c:cb:fc:44:26:d1:11:5c:27:c1:92:9f:3c: ad:d8:85:e4:98:ff:13:c0:81:72:ef:38:1a:68:9e: 45:4b:88:a5:6b:c1:3d:42:09:08:9d:52:de:9e:fa: c7:6b:92:25:c2:36:26:87:f1:43:0e:93:d4:7e:03: a7:15:2a:93:5e:52:3e:aa:1e:ab:86:f6:14:c4:bb: e7:4c:bc:9d:bf:08:88:fa:e2:6e:bb:b1:b1:ad:46: e1:cd:bd:92:52:d8:68:91:1c:8e:41:41:29:15:56: 05:78:59:f7:fd:cc:3e:41:0b:7e:67:31:0c:c3:e0: c1:e8:7b:7d:a5:64:41:61:2c:e0:06:3f:78:1b:87: a3:17:1b:b9:85:5f:f6:a9:76:37:da:75:8e:b1:41: 2b:6b:c5:8a:b0:4f:89:05:34:7d:f3:60:c5:e8:2b: 5b:47:66:b4:50:39:37:a1:25:fb:8e:29:8d:d7:94: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.184.0/23 IPv6: 2001:df4:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 11:9d:4f:7f:40:c1:10:42:c2:0f:d2:73:11:22:59:f7:df:5c: c7:27:9a:c9:7e:7c:8b:5e:7c:79:ae:3b:96:85:1d:99:91:7b: 46:64:fc:f8:f4:fb:03:ee:95:fe:83:6c:e1:eb:41:c8:7c:ce: af:48:07:56:7f:a1:eb:38:97:e3:f1:c4:d9:7a:b6:ed:7b:25: ab:ba:bc:b7:a7:57:3a:3e:cb:1b:9b:30:21:3d:f9:71:33:17: a6:1e:34:92:b5:6a:ad:cc:95:06:42:d0:0c:9a:dc:2f:6e:d7: 2b:93:c3:47:68:ed:03:0e:55:26:78:52:f2:c1:66:fc:6b:03: 83:5d:13:0c:ae:08:49:b6:2d:17:5a:3b:d8:72:65:93:8b:6c: b5:77:8b:31:03:b6:21:7f:ff:07:49:bc:fc:d5:b7:54:ef:d7: 07:d1:77:e5:04:c6:18:42:e4:2d:88:01:57:6d:fc:f5:da:4e: c6:69:1b:7e:09:f1:c4:da:5c:0d:64:da:7e:33:a1:9d:64:93: 7f:27:e0:35:e3:21:42:df:ec:a4:e1:75:83:78:e8:e8:a3:21: a1:0c:8a:5d:83:c3:b9:f6:09:5a:59:32:14:1f:a4:7d:67:e3: 66:6c:9c:b0:6f:66:8e:d3:6c:c0:2f:a3:f9:70:1f:0b:45:74: 96:9e:6c:0d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUaU0dt/paxn46K7idRrZfXkrik3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MTI0MVoX DTI1MDYzMDE0MTc0MVowMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIz QkM5QUM1RUMzOUIzNTA1NkFFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyORNlwP7cYecmcsJK/J2OpqT6DU0oqQ9OxluJaJVfcd387GM1W6PUgtKiy BfP7mCOjV9SAI1F2nbPwDduZz8ZaFpKt7gXj/Pc0Q6Z8y/xEJtERXCfBkp88rdiF 5Jj/E8CBcu84GmieRUuIpWvBPUIJCJ1S3p76x2uSJcI2JofxQw6T1H4DpxUqk15S Pqoeq4b2FMS750y8nb8IiPribruxsa1G4c29klLYaJEcjkFBKRVWBXhZ9/3MPkEL fmcxDMPgweh7faVkQWEs4AY/eBuHoxcbuYVf9ql2N9p1jrFBK2vFirBPiQU0ffNg xegrW0dmtFA5N6El+44pjdeUSLECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJhSq7hQjeVR8XI7yaxew5s1BWriMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhNjZmMzUw LWU2NDItNDAyZi04YWMzLTZhZWY3ZTExYWFjMy8wLzk4NTJBQkI4NTA4REU1NTFG MTcyM0JDOUFDNUVDMzlCMzUwNTZBRTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnbrgwDwQCAAIwCQMHACABDfRtADANBgkqhkiG9w0BAQsFAAOCAQEAEZ1Pf0DB EELCD9JzESJZ999cxyeayX58i158ea47loUdmZF7RmT8+PT7A+6V/oNs4etByHzO r0gHVn+h6ziX4/HE2Xq27Xslq7q8t6dXOj7LG5swIT35cTMXph40krVqrcyVBkLQ DJrcL27XK5PDR2jtAw5VJnhS8sFm/GsDg10TDK4ISbYtF1o72HJlk4tstXeLMQO2 IX//B0m8/NW3VO/XB9F35QTGGELkLYgBV2389dpOxmkbfgnxxNpcDWTafjOhnWST fyfgNeMhQt/spOF1g3jo6KMhoQyKXYPDufYJWlkyFB+kfWfjZmycsG9mjtNswC+j +XAfC0V0lp5sDQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org