$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer File: 99F644C407D1C8C133A923CC84619FC228E767AC.cer (raw, json) Hash identifier: +OfhKHSF1jXVK1bR4WFJQibKyHQLXCUS2wbo9ak9X/8= Subject key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BE5144E00065FACF3CEB9896159B157915C3E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 22:59:00 +0000 Certificate not after: Tue 21 Oct 2025 23:04:00 +0000 Subordinate resources: IP: 103.169.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e5:14:4e:00:06:5f:ac:f3:ce:b9:89:61:59:b1:57:91:5c:3e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 22 22:59:00 2024 GMT Not After : Oct 21 23:04:00 2025 GMT Subject: CN=99F644C407D1C8C133A923CC84619FC228E767AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:55:f3:7f:66:4c:07:29:43:ee:08:46:f5:7d: ec:b5:51:df:18:15:08:ac:03:de:69:92:3c:9f:20: e8:90:15:3d:91:b4:4e:b4:83:37:fa:80:84:69:ed: ba:3f:ef:44:ac:1a:0d:25:e8:4f:b9:ba:d2:1b:a7: 26:86:f2:cb:b1:97:d8:07:e6:35:cb:51:e6:77:67: 41:c5:6b:e4:aa:3d:af:85:71:5e:bf:8f:bd:69:25: a3:11:22:d9:16:a0:94:b0:51:d1:aa:9b:0b:8c:62: 3e:51:5e:25:9f:da:70:95:05:5b:80:db:63:25:a6: 38:75:60:de:8d:e0:48:07:9c:75:b7:44:2d:7e:3b: 1d:1a:6c:cb:55:eb:d5:a2:dd:e4:12:29:61:61:59: e4:0d:dd:7a:6e:af:cd:62:1d:7c:23:80:4a:b5:3a: 3e:d1:f6:9e:c4:30:dd:ed:dc:3d:a2:c8:69:9d:37: 9c:ac:0a:d2:91:98:79:0a:f6:0c:9a:11:6c:d3:5b: d6:c3:f9:7d:0f:c3:21:48:3f:9b:91:51:21:10:c5: db:2a:4e:61:61:43:4f:48:c4:0d:f9:d8:a0:ef:08: d7:c5:b1:b1:bf:bc:18:da:3e:9a:4e:21:e6:f8:a6: 06:f0:5f:2c:bd:c8:4e:3c:21:2b:99:79:af:59:96: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption 97:d0:64:e3:9f:a6:fc:35:4e:ff:cc:0e:ef:dd:34:ad:70:e3: 1c:41:22:e5:65:dd:a0:d5:35:a6:d9:a9:97:ad:32:e1:1a:ef: b2:aa:2a:01:f9:44:4f:e4:ac:fe:98:ca:ce:d2:2e:fb:61:0a: 34:38:69:e2:fd:ae:aa:fe:25:b0:62:18:69:45:cc:23:70:ce: bc:45:3c:be:d3:24:97:63:92:87:b2:32:a3:09:c4:a9:0c:fd: 6e:1a:e2:4b:65:bf:5c:e0:3e:ee:2f:60:cc:a2:57:f5:53:03: e7:5c:27:54:60:82:33:ec:ff:10:69:e7:77:38:b2:da:da:a5: 8a:46:d4:06:6e:f0:a9:46:1a:bc:91:6a:2c:27:28:50:7d:6e: 0d:e0:c1:b8:d6:d2:63:82:5a:9e:32:48:af:ca:fb:05:1a:01: 5d:fb:26:f7:b1:f5:af:d9:be:f3:ab:bd:71:30:42:b6:1d:9b: a4:2c:01:82:4d:e5:04:de:ce:84:dd:07:19:9a:32:cf:23:a6: 4b:bb:98:8d:53:b1:ad:41:90:3a:6f:a9:78:ae:cb:4d:49:41: 42:c7:d8:8f:63:a1:54:30:a3:94:3b:86:d9:76:86:36:50:07: 38:1a:3f:c4:06:fe:15:3d:29:e1:af:82:f2:ea:f7:5d:40:01: d2:63:48:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO+UUTgAGX6zzzrmJYVmxV5FcPiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMjIyNTkwMFoX DTI1MTAyMTIzMDQwMFowMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTky M0NDODQ2MTlGQzIyOEU3NjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPxV839mTAcpQ+4IRvV97LVR3xgVCKwD3mmSPJ8g6JAVPZG0TrSDN/qAhGnt uj/vRKwaDSXoT7m60hunJobyy7GX2AfmNctR5ndnQcVr5Ko9r4VxXr+PvWkloxEi 2RaglLBR0aqbC4xiPlFeJZ/acJUFW4DbYyWmOHVg3o3gSAecdbdELX47HRpsy1Xr 1aLd5BIpYWFZ5A3dem6vzWIdfCOASrU6PtH2nsQw3e3cPaLIaZ03nKwK0pGYeQr2 DJoRbNNb1sP5fQ/DIUg/m5FRIRDF2ypOYWFDT0jEDfnYoO8I18Wxsb+8GNo+mk4h 5vimBvBfLL3ITjwhK5l5r1mWa1cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJn2RMQH0cjBM6kjzIRhn8Io52esMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0NmI1MjQ4 LWNlMzMtNGU5Ny04ODJmLWY2MTQ1ZjMxOTAyNi8wLzk5RjY0NEM0MDdEMUM4QzEz M0E5MjNDQzg0NjE5RkMyMjhFNzY3QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqSwwDQYJKoZIhvcNAQELBQADggEBAJfQZOOfpvw1Tv/MDu/dNK1w4xxBIuVl 3aDVNabZqZetMuEa77KqKgH5RE/krP6Yys7SLvthCjQ4aeL9rqr+JbBiGGlFzCNw zrxFPL7TJJdjkoeyMqMJxKkM/W4a4ktlv1zgPu4vYMyiV/VTA+dcJ1RggjPs/xBp 53c4strapYpG1AZu8KlGGryRaiwnKFB9bg3gwbjW0mOCWp4ySK/K+wUaAV37Jvex 9a/ZvvOrvXEwQrYdm6QsAYJN5QTezoTdBxmaMs8jpku7mI1Tsa1BkDpvqXiuy01J QULH2I9joVQwo5Q7htl2hjZQBzgaP8QG/hU9KeGvgvLq911AAdJjSC4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:24 2024 by rpki-client on console-ams.rpki-client.org