$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer (raw, json) Hash identifier: oRhLjL9N3rvS8EKDNYCtGX+Ee3vUWL/sQtRSiRZR+B8= Subject key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55060B719E7811511A7B20C4825922898C4DD782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft caRepository: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 10:54:44 +0000 Certificate not after: Mon 08 Sep 2025 10:59:44 +0000 Subordinate resources: IP: 103.142.33.0/24 IP: 103.143.218.0/24 IP: 203.142.26.0/24 IP: 2001:df1:2e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:06:0b:71:9e:78:11:51:1a:7b:20:c4:82:59:22:89:8c:4d:d7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 10:54:44 2024 GMT Not After : Sep 8 10:59:44 2025 GMT Subject: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:24:7b:59:5f:88:77:1e:4a:04:49:50:67: 5b:a5:86:b6:92:9b:ff:e9:45:6e:e2:3e:93:da:98: 7e:93:00:e6:48:b3:0b:8a:8f:cf:d7:d0:cd:2d:ed: 33:84:41:c8:35:4c:25:a8:08:23:fc:5e:ad:8f:43: f0:db:cd:47:8d:24:bd:14:30:cd:0e:b1:b5:57:34: 8e:b7:e9:80:fa:b5:99:25:54:d7:ce:18:2b:4d:09: 0f:63:91:54:91:cd:20:e3:89:84:b8:1c:55:02:42: e6:8a:70:78:29:7c:63:0d:7c:c8:b5:d2:4f:98:4e: 34:11:bb:42:58:a2:71:99:bd:c4:59:ce:f0:d3:7d: 80:04:e0:7c:37:65:90:47:cc:18:51:b7:80:4e:74: c1:1f:ee:ea:3f:6d:cf:bd:52:99:e1:e7:0c:71:74: 36:bc:77:3e:48:45:89:57:81:a8:61:0a:54:94:2a: 92:3a:b8:01:1c:07:61:ea:bb:01:21:f6:48:e9:ea: 71:e1:58:da:5a:b1:35:79:ad:fd:99:fc:ba:5c:ba: c0:cd:2e:7c:5b:22:b7:d5:02:15:cd:5b:8a:96:36: e5:8a:8e:6b:60:3e:d3:dc:3e:65:fc:2d:8d:67:3c: f2:cc:53:bd:29:1b:ef:b5:18:45:48:18:38:5f:ce: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.33.0/24 103.143.218.0/24 203.142.26.0/24 IPv6: 2001:df1:2e80::/48 Signature Algorithm: sha256WithRSAEncryption 5c:b2:bb:84:72:99:17:f9:10:c5:01:79:82:3b:44:3d:59:72: 14:66:89:e7:31:b6:97:89:80:85:db:72:fc:f1:84:68:57:29: a2:ef:21:b5:a4:49:e2:9f:6f:d2:98:1f:a8:48:78:11:16:0f: a7:4b:88:fb:fd:f4:63:36:d3:cf:8c:fa:a0:39:b7:1d:13:b9: cb:0b:60:12:4a:3a:fe:e8:47:6f:ac:66:0e:86:88:c7:a8:0d: 3f:b7:51:68:b9:64:97:a3:9e:5b:4d:df:52:5f:49:6c:54:f3: 15:95:1b:09:9b:d9:e9:02:ae:ff:3f:c7:4c:bf:46:b2:d1:d2: 8b:ad:d2:5a:0d:13:37:53:14:1c:42:4f:3c:cf:44:21:4e:02: 86:fd:3a:9a:6d:bc:66:15:d6:f5:8b:6b:e3:7b:b7:92:a5:3d: 68:9c:1c:70:d5:6d:d2:cd:78:c8:1a:f3:bd:3c:1b:78:30:ce: ae:62:51:4b:86:ab:2f:aa:77:7b:35:eb:bf:5b:47:67:33:f3: d1:b4:e6:61:7d:01:8b:5c:5b:1b:9e:a0:fd:fe:b3:ea:3d:5e: 55:f4:ba:8e:4c:cf:c2:ad:27:b5:f0:2a:bb:c1:88:62:6e:98: f0:84:ce:5e:28:89:e4:3c:47:ba:9a:b5:3d:91:af:ef:e7:e7: 9d:0a:e6:ee -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUVQYLcZ54EVEaeyDEglkiiYxN14IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwOTEwNTQ0NFoX DTI1MDkwODEwNTk0NFowMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJG RkQ0NjFBMDlBM0YzOEQwMEYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8DJHtZX4h3HkoESVBnW6WGtpKb/+lFbuI+k9qYfpMA5kizC4qPz9fQzS3t M4RByDVMJagII/xerY9D8NvNR40kvRQwzQ6xtVc0jrfpgPq1mSVU184YK00JD2OR VJHNIOOJhLgcVQJC5opweCl8Yw18yLXST5hONBG7QliicZm9xFnO8NN9gATgfDdl kEfMGFG3gE50wR/u6j9tz71SmeHnDHF0Nrx3PkhFiVeBqGEKVJQqkjq4ARwHYeq7 ASH2SOnqceFY2lqxNXmt/Zn8uly6wM0ufFsit9UCFc1bipY25YqOa2A+09w+Zfwt jWc88sxTvSkb77UYRUgYOF/Oc4MCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJj0xldc+PdWpEv/1GGgmj840A8EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kN2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGI2YzRm LTlmZGYtNDdmNi1iMjRjLTAzM2ZlM2E0NGQ1MC8wLzk4RjRDNjU3NUNGOEY3NTZB NDRCRkZENDYxQTA5QTNGMzhEMDBGMDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnjiEDBABnj9oDBADLjhowDwQCAAIwCQMHACABDfEugDANBgkqhkiG9w0BAQsF AAOCAQEAXLK7hHKZF/kQxQF5gjtEPVlyFGaJ5zG2l4mAhdty/PGEaFcpou8htaRJ 4p9v0pgfqEh4ERYPp0uI+/30YzbTz4z6oDm3HRO5ywtgEko6/uhHb6xmDoaIx6gN P7dRaLlkl6OeW03fUl9JbFTzFZUbCZvZ6QKu/z/HTL9GstHSi63SWg0TN1MUHEJP PM9EIU4Chv06mm28ZhXW9Ytr43u3kqU9aJwccNVt0s14yBrzvTwbeDDOrmJRS4ar L6p3ezXrv1tHZzPz0bTmYX0Bi1xbG56g/f6z6j1eVfS6jkzPwq0ntfAqu8GIYm6Y 8ITOXiiJ5DxHupq1PZGv7+fnnQrm7g== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:44 2024 by rpki-client on console-ams.rpki-client.org