$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer File: 98F94938EA9072872BE06639F79DC61C000F849C.cer (raw, json) Hash identifier: WVrSyPZAm+FucE8WULfPoVGWXPKtBQ+baz193MPUZoY= Subject key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7DF32AE389FE0DF2B24C65A3DDB7F3087F71648C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft caRepository: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 06:39:12 +0000 Certificate not after: Mon 30 Jun 2025 06:44:12 +0000 Subordinate resources: IP: 103.121.148.0/23 IP: 2001:df6:4700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f3:2a:e3:89:fe:0d:f2:b2:4c:65:a3:dd:b7:f3:08:7f:71:64:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 06:39:12 2024 GMT Not After : Jun 30 06:44:12 2025 GMT Subject: CN=98F94938EA9072872BE06639F79DC61C000F849C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e3:ad:76:06:6b:b4:46:7d:26:d1:15:b0: 33:ed:d0:f4:fb:dd:a4:fc:47:8a:a0:b7:4f:41:7e: 7a:6e:96:34:b5:5e:6d:84:e6:32:05:fe:e0:bc:a2: 24:59:0a:00:40:97:0d:bf:17:74:3f:16:39:4a:6a: ad:a3:69:19:41:73:a3:24:aa:f0:69:ad:35:7a:12: b5:08:84:ed:a5:68:3a:99:6a:4c:80:68:e2:2d:77: a4:d4:80:4e:f1:7b:46:33:cc:59:9b:7c:ba:f7:52: aa:d4:70:12:c6:93:31:b2:15:dc:a1:94:78:28:81: d3:d1:a5:23:4f:7a:7f:1c:01:98:a8:65:ed:38:f5: 61:01:26:b2:ab:e2:78:87:24:cd:6e:a8:7d:00:a3: d1:50:62:54:02:85:95:58:f7:37:73:be:19:78:bf: 9a:64:19:2a:b8:ec:9d:4c:8d:58:86:06:28:db:60: a5:a3:d3:87:41:4e:f3:01:e6:97:5b:91:a4:e0:38: 86:dd:2c:69:6e:b9:47:d8:e7:b6:4c:07:29:70:88: 03:af:8a:83:98:bb:7e:53:44:fc:23:17:f4:35:1b: 15:2a:76:3c:95:b6:9a:71:aa:67:14:44:6a:2e:f2: 6f:0d:93:71:4c:1c:b9:f8:e6:93:25:b8:a3:15:6a: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.148.0/23 IPv6: 2001:df6:4700::/48 Signature Algorithm: sha256WithRSAEncryption 6a:a1:64:91:7a:19:09:cf:e4:fb:2c:f1:7a:b3:9f:51:f5:9a: e1:05:d1:29:72:9e:4d:42:32:73:e0:ef:23:ec:63:62:8a:06: 51:d3:e9:09:c0:bf:eb:86:b7:be:fa:ac:80:1c:e1:d4:b8:f3: 3c:ae:df:fc:37:63:75:6f:3f:f2:56:f5:0e:36:7f:06:8d:8b: 40:6d:62:50:60:81:4a:98:a6:95:41:d5:5f:62:58:6c:c2:39: 04:bf:91:0a:e3:d5:f3:c9:2c:1d:ec:32:e4:e1:6e:dc:40:c6: 3d:6d:7b:8d:9e:45:d3:f3:39:8c:fe:cb:68:fb:61:4a:32:b5: b6:70:58:a1:1b:ec:ce:77:f3:9c:fc:80:de:a1:9e:0b:ec:56: 63:35:9c:72:80:b3:66:16:00:b0:59:fd:31:a2:43:f3:9c:e4: 0d:4e:a7:28:fa:80:24:51:14:55:f2:cf:15:78:6b:54:ab:97: 8b:8a:b1:8e:bc:14:8c:0c:60:d2:c2:08:7f:d5:fb:8c:53:e9: 86:33:f5:f9:90:f6:14:d1:d6:56:c9:92:60:1e:51:7d:53:97: 7a:14:17:ac:15:e0:e9:77:de:4e:36:50:e7:39:a4:a5:a4:f9: d8:6c:4f:53:4b:f5:2e:bb:94:65:b1:71:f0:1c:12:e1:b6:01: 71:40:56:c6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUffMq44n+DfKyTGWj3bfzCH9xZIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA2MzkxMloX DTI1MDYzMDA2NDQxMlowMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2 NjM5Rjc5REM2MUMwMDBGODQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUr4612Bmu0Rn0m0RWwM+3Q9PvdpPxHiqC3T0F+em6WNLVebYTmMgX+4Lyi JFkKAECXDb8XdD8WOUpqraNpGUFzoySq8GmtNXoStQiE7aVoOplqTIBo4i13pNSA TvF7RjPMWZt8uvdSqtRwEsaTMbIV3KGUeCiB09GlI096fxwBmKhl7Tj1YQEmsqvi eIckzW6ofQCj0VBiVAKFlVj3N3O+GXi/mmQZKrjsnUyNWIYGKNtgpaPTh0FO8wHm l1uRpOA4ht0saW65R9jntkwHKXCIA6+Kg5i7flNE/CMX9DUbFSp2PJW2mnGqZxRE ai7ybw2TcUwcufjmkyW4oxVqLO8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJj5STjqkHKHK+BmOfedxhwAD4ScMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjE0NmEy LTc3MTUtNDU5Zi04MjQ0LThiMzJhMzY0NjYzYy8wLzk4Rjk0OTM4RUE5MDcyODcy QkUwNjYzOUY3OURDNjFDMDAwRjg0OUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFneZQwDwQCAAIwCQMHACABDfZHADANBgkqhkiG9w0BAQsFAAOCAQEAaqFkkXoZ Cc/k+yzxerOfUfWa4QXRKXKeTUIyc+DvI+xjYooGUdPpCcC/64a3vvqsgBzh1Ljz PK7f/DdjdW8/8lb1DjZ/Bo2LQG1iUGCBSpimlUHVX2JYbMI5BL+RCuPV88ksHewy 5OFu3EDGPW17jZ5F0/M5jP7LaPthSjK1tnBYoRvsznfznPyA3qGeC+xWYzWccoCz ZhYAsFn9MaJD85zkDU6nKPqAJFEUVfLPFXhrVKuXi4qxjrwUjAxg0sIIf9X7jFPp hjP1+ZD2FNHWVsmSYB5RfVOXehQXrBXg6XfeTjZQ5zmkpaT52GxPU0v1LruUZbFx 8BwS4bYBcUBWxg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:24 2024 by rpki-client on console-ams.rpki-client.org