$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer (raw, json) Hash identifier: l/kjEScXolLtqhurKWwPs2pVqw7tJyyH+QNGCfbh1XA= Subject key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 341A6E736742FF4C6D1C645BF160CE989130D62D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Jul 2024 03:54:55 +0000 Certificate not after: Thu 03 Jul 2025 03:59:55 +0000 Subordinate resources: IP: 103.35.219.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1a:6e:73:67:42:ff:4c:6d:1c:64:5b:f1:60:ce:98:91:30:d6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 03:54:55 2024 GMT Not After : Jul 3 03:59:55 2025 GMT Subject: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:12:38:97:64:4e:45:53:a7:c5:c3:6e:a5: ce:56:58:19:27:81:35:e0:b2:f0:b1:1f:b9:93:3c: 4b:9b:b0:b4:e2:7e:ba:c3:15:34:48:92:03:69:3e: 76:af:e2:67:fd:4a:c9:c3:a5:0e:db:f4:f9:0d:b2: b6:bd:99:67:44:d5:ad:46:60:ef:06:53:f5:28:12: 05:45:0a:ec:d9:dc:fc:c5:b5:43:46:15:1a:61:0d: 2e:79:82:90:12:f4:0c:8f:01:9f:6d:ee:ad:68:a7: 96:1c:30:d5:04:80:c1:81:e2:3f:82:b5:5a:75:00: 26:55:46:96:e5:44:3c:a3:74:49:42:a9:ab:c8:d4: cf:3d:ad:ca:6d:89:34:71:dc:11:b1:a2:b2:8c:b8: c5:d1:89:80:71:e3:9a:4e:04:45:70:f9:9d:df:e3: f8:3b:cf:ec:63:9a:d3:0a:1e:33:49:6e:28:5d:26: bc:d1:dc:2c:e7:72:56:dc:86:1a:60:2f:eb:37:16: 95:bb:13:d2:6f:c6:5b:c3:1f:61:a6:d6:32:05:23: 86:9d:35:28:be:f9:01:20:8b:e6:51:bb:28:3b:06: 29:4e:8d:0e:51:e1:9f:28:04:ec:c3:73:85:53:b5: 18:8b:39:3b:e2:74:e1:d9:76:71:7c:83:51:29:39: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.219.0/24 Signature Algorithm: sha256WithRSAEncryption 57:14:2c:10:70:6d:ce:4e:24:6b:89:e1:a5:4c:0c:ee:1c:80: 33:42:15:1d:14:c3:8e:d0:6f:03:3d:aa:95:92:8a:81:43:18: e1:ef:4d:06:11:9e:bc:71:a0:d7:68:e5:93:1c:fb:e4:e9:84: 66:05:9f:fc:f7:24:59:a3:0c:de:82:8c:ff:29:8f:4e:f7:d4: c6:97:9a:82:c5:f6:39:51:e5:20:c3:b4:9d:21:b6:2d:df:5f: 4b:a7:d1:e9:ae:1a:f3:87:00:e5:c7:f5:d9:64:e1:9f:6f:c9: e8:bc:9d:0a:c2:58:5b:68:2b:f6:f3:86:b6:ba:c8:2c:54:33: 6d:74:b9:77:c1:e8:27:b2:7b:b8:7d:15:58:0f:f8:22:9e:c9: 33:d6:0e:75:0d:4b:26:f6:4a:b9:3d:7b:d0:a1:80:f9:68:7c: d9:b2:d9:c5:9d:72:a4:4e:20:d8:fa:b8:f6:22:2c:8d:66:42: fa:ad:40:36:8a:8e:ce:eb:98:b8:a6:e4:37:9f:8c:bb:0b:76: 9d:1a:fb:55:c3:e6:24:64:fe:24:8f:30:95:60:ff:35:60:c6: 16:24:18:73:75:12:e1:07:f1:39:2b:79:c7:d6:70:9a:1b:9e: c9:a9:f3:34:dc:f1:17:07:f0:af:49:64:51:80:30:33:1e:59: 44:14:49:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNBpuc2dC/0xtHGRb8WDOmJEw1i0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwNDAzNTQ1NVoX DTI1MDcwMzAzNTk1NVowMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVG MEY0MzJCQUFCQ0YyMEY1RTgwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2rEjiXZE5FU6fFw26lzlZYGSeBNeCy8LEfuZM8S5uwtOJ+usMVNEiSA2k+ dq/iZ/1KycOlDtv0+Q2ytr2ZZ0TVrUZg7wZT9SgSBUUK7Nnc/MW1Q0YVGmENLnmC kBL0DI8Bn23urWinlhww1QSAwYHiP4K1WnUAJlVGluVEPKN0SUKpq8jUzz2tym2J NHHcEbGisoy4xdGJgHHjmk4ERXD5nd/j+DvP7GOa0woeM0luKF0mvNHcLOdyVtyG GmAv6zcWlbsT0m/GW8MfYabWMgUjhp01KL75ASCL5lG7KDsGKU6NDlHhnygE7MNz hVO1GIs5O+J04dl2cXyDUSk50McCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJlNq4TbQBdcNjXw9DK6q88g9egKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDQyYTI5 LWJkNDgtNGVmNy1hZjQ4LTBhYTBkMzVkYjM3Yi8wLzk5NERBQjg0REI0MDE3NUMz NjM1RjBGNDMyQkFBQkNGMjBGNUU4MEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnI9swDQYJKoZIhvcNAQELBQADggEBAFcULBBwbc5OJGuJ4aVMDO4cgDNCFR0U w47QbwM9qpWSioFDGOHvTQYRnrxxoNdo5ZMc++TphGYFn/z3JFmjDN6CjP8pj073 1MaXmoLF9jlR5SDDtJ0hti3fX0un0emuGvOHAOXH9dlk4Z9vyei8nQrCWFtoK/bz hra6yCxUM210uXfB6Ceye7h9FVgP+CKeyTPWDnUNSyb2Srk9e9ChgPlofNmy2cWd cqROINj6uPYiLI1mQvqtQDaKjs7rmLim5DefjLsLdp0a+1XD5iRk/iSPMJVg/zVg xhYkGHN1EuEH8TkrecfWcJobnsmp8zTc8RcH8K9JZFGAMDMeWUQUSYU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:21 2024 by rpki-client on console-fra.rpki-client.org