$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer (raw, json) Hash identifier: X+FlhRT8O7ur7ZjCg3zAbnrIiOZEh1GlauPi0MB7cck= Subject key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A9C3CD4FC76C03984BA409D2BF19364D2261235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 11:32:30 +0000 Certificate not after: Mon 30 Jun 2025 11:37:30 +0000 Subordinate resources: IP: 103.3.58.0/23 IP: 103.241.178.0/23 IP: 120.89.88.0/22 IP: 202.47.88.0/24 IP: 203.29.26.0/23 IP: 203.148.84.0/23 IP: 2402:a100::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9c:3c:d4:fc:76:c0:39:84:ba:40:9d:2b:f1:93:64:d2:26:12:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 11:32:30 2024 GMT Not After : Jun 30 11:37:30 2025 GMT Subject: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:07:9d:54:65:85:8f:d6:62:87:8f:dc:6b: 1d:16:b1:a5:35:81:c2:5d:0c:4b:43:fe:2a:45:b2: 32:5a:34:4b:f4:b8:e7:68:eb:94:8a:c7:70:2f:1f: e0:b1:a6:49:7b:cc:3a:da:1e:d6:80:80:27:9e:41: 29:39:fe:29:85:a0:4c:1a:7d:d6:a8:6a:2c:c7:df: a9:9b:00:e8:46:9a:19:cd:f1:03:7d:0b:86:73:7c: d2:5b:ae:4e:96:c2:d3:4c:36:0a:19:d3:5e:5e:82: 06:8b:1e:1c:c1:c3:fd:88:b8:46:4c:9a:d1:76:25: d5:d9:08:5b:38:1e:33:7d:e5:a8:6b:31:67:e9:b2: ca:6c:ae:de:44:60:7b:59:f9:37:e8:52:8d:b8:e7: 33:f3:b2:45:ca:8e:00:d7:be:7c:ce:5b:17:91:c2: ee:cf:68:78:57:cd:40:01:27:52:8e:28:03:ad:25: bb:8b:b7:95:8b:ff:a0:cd:bb:cd:21:f0:82:66:2d: 0d:3a:f8:d2:58:3c:0c:09:c0:8f:32:cd:25:64:20: b0:09:77:b4:4c:ab:50:cd:35:61:72:3a:9b:c8:63: e6:2e:bc:de:ef:af:05:97:b2:9b:c2:31:e2:15:8e: fd:1f:ec:4b:e1:dd:cd:17:2b:75:89:da:fe:a7:18: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.58.0/23 103.241.178.0/23 120.89.88.0/22 202.47.88.0/24 203.29.26.0/23 203.148.84.0/23 IPv6: 2402:a100::/32 Signature Algorithm: sha256WithRSAEncryption 67:bf:50:fe:af:4c:e7:33:e9:b1:d9:b2:c1:58:a7:aa:43:0a: b4:57:61:df:32:21:0c:a4:e8:07:cf:bd:8a:51:02:02:b7:83: 65:70:ec:bb:e9:df:f1:1c:be:59:c6:67:e4:d0:83:69:c4:3d: 19:f9:67:5a:cd:03:41:55:38:09:f2:0b:70:c1:f3:be:db:e0: 02:d3:ec:63:75:34:37:09:d5:3d:72:a5:3f:e8:04:b8:96:a9: 08:2c:c1:85:20:db:64:d2:4f:cd:e1:bb:0c:b5:34:56:8f:70: da:32:f8:26:4d:f8:00:44:bf:90:9c:f4:bb:fe:51:b3:fe:56: 9f:6b:40:bb:1a:8f:98:57:89:2b:7e:2b:69:db:2e:66:56:10: b3:a6:5c:2d:1b:ee:eb:ec:9d:f3:21:82:5d:7e:10:1b:d2:01: a8:ce:86:75:33:8e:be:03:03:89:aa:4f:41:1b:3f:8c:c6:e9: 5c:7a:a5:16:1c:ec:93:f1:01:ec:13:f3:53:de:45:50:cf:23: 21:31:a4:6c:67:1b:cf:55:4e:8d:eb:bc:59:3b:f8:bd:1d:0d: 54:57:d9:e3:ba:e9:1c:57:7a:72:3d:23:a4:df:62:6f:0c:8c: 2f:9e:60:13:c3:be:96:c4:2d:d5:24:38:b1:70:71:de:ba:01: c9:53:5b:c9 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUCpw81Px2wDmEukCdK/GTZNImEjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTExMzIzMFoX DTI1MDYzMDExMzczMFowMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5 REFGQ0VGMzk0RjUxMkU0RkQ2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTjB51UZYWP1mKHj9xrHRaxpTWBwl0MS0P+KkWyMlo0S/S452jrlIrHcC8f 4LGmSXvMOtoe1oCAJ55BKTn+KYWgTBp91qhqLMffqZsA6EaaGc3xA30LhnN80luu TpbC00w2ChnTXl6CBoseHMHD/Yi4Rkya0XYl1dkIWzgeM33lqGsxZ+myymyu3kRg e1n5N+hSjbjnM/OyRcqOANe+fM5bF5HC7s9oeFfNQAEnUo4oA60lu4u3lYv/oM27 zSHwgmYtDTr40lg8DAnAjzLNJWQgsAl3tEyrUM01YXI6m8hj5i683u+vBZeym8Ix 4hWO/R/sS+HdzRcrdYna/qcYI2ECAwEAAaOCAuUwggLhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJlz5db39l3PAV6dr87zlPUS5P1hMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBk LWNlNzktNDIxNi1hNjJiLWUzZDUwY2M3OTQ0Mi8wLzk5NzNFNUQ2RjdGNjVEQ0Yw MTVFOURBRkNFRjM5NEY1MTJFNEZENjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQD BAFnAzoDBAFn8bIDBAJ4WVgDBADKL1gDBAHLHRoDBAHLlFQwDQQCAAIwBwMFACQC oQAwDQYJKoZIhvcNAQELBQADggEBAGe/UP6vTOcz6bHZssFYp6pDCrRXYd8yIQyk 6AfPvYpRAgK3g2Vw7Lvp3/EcvlnGZ+TQg2nEPRn5Z1rNA0FVOAnyC3DB877b4ALT 7GN1NDcJ1T1ypT/oBLiWqQgswYUg22TST83huwy1NFaPcNoy+CZN+ABEv5Cc9Lv+ UbP+Vp9rQLsaj5hXiSt+K2nbLmZWELOmXC0b7uvsnfMhgl1+EBvSAajOhnUzjr4D A4mqT0EbP4zG6Vx6pRYc7JPxAewT81PeRVDPIyExpGxnG89VTo3rvFk7+L0dDVRX 2eO66RxXenI9I6TfYm8MjC+eYBPDvpbELdUkOLFwcd66AclTW8k= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:51 2024 by rpki-client on console-fra.rpki-client.org