$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer File: 9A97A919AD61446780D593589DED8D76DE76F83A.cer (raw, json) Hash identifier: 8Da0YZLLeDyT4VApyPvi9WnjUw3Gp36URbG1Ll1Nzbw= Subject key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B362ABF4E09DD7C5D721905B643577458A85476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Jan 2024 06:20:07 +0000 Certificate not after: Thu 02 Jan 2025 06:25:07 +0000 Subordinate resources: IP: 36.50.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:36:2a:bf:4e:09:dd:7c:5d:72:19:05:b6:43:57:74:58:a8:54:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 4 06:20:07 2024 GMT Not After : Jan 2 06:25:07 2025 GMT Subject: CN=9A97A919AD61446780D593589DED8D76DE76F83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:e4:ce:a4:e0:dd:1e:38:e9:35:05:96:5e: 6f:91:ac:43:e2:e6:98:a0:cd:35:21:e9:fb:c1:3a: af:2c:a3:42:dd:a7:50:73:22:13:68:dd:90:91:bf: 6b:cd:54:f6:86:3e:dc:c4:ad:3d:0a:ed:30:38:e4: 3b:c2:f5:ee:3d:5f:2c:f0:2b:93:39:07:f3:11:33: f6:81:35:23:41:2d:46:7d:c0:0d:ba:8a:80:ee:67: 95:08:fd:d9:8f:df:45:71:90:da:31:43:f0:cb:85: a9:3c:a8:76:d0:cb:49:c8:b7:50:25:8e:db:dd:8b: 85:ae:08:2b:fe:ea:89:5d:26:e8:60:c7:de:d9:c2: 0c:64:3a:db:43:66:8f:0e:36:02:de:d3:7f:de:a6: c4:f6:5b:01:cb:b2:be:6c:27:ff:5e:79:7e:38:71: c6:e9:d6:8b:81:14:6d:db:67:d1:5b:f9:dd:1b:68: 96:11:b7:18:aa:6c:f4:a8:ad:4e:42:d8:10:89:ae: 6f:ee:95:77:9e:d9:03:aa:af:a0:c5:02:d0:98:08: c3:44:44:50:56:4d:94:3e:65:1e:73:42:09:0f:99: 27:47:fa:4e:08:99:de:d3:13:5c:27:ad:f1:83:a9: 9b:37:1e:cd:da:37:7a:ec:50:33:39:71:4f:dc:8b: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.56.0/23 Signature Algorithm: sha256WithRSAEncryption 00:3c:46:29:a9:75:2e:d5:e4:84:89:f7:ce:58:71:93:a7:86: d9:b7:96:36:fe:11:05:d9:67:df:33:21:2f:4a:d0:79:d0:23: 4f:22:69:86:37:0b:ab:a8:7a:ab:92:ca:b1:7a:b2:b0:67:55: 2e:64:40:90:a2:2b:18:c9:8b:f9:d3:a9:1c:d5:7a:46:0d:3f: 58:a0:1b:ff:4f:0b:32:a9:dc:9a:e3:fd:ad:25:b4:df:72:5f: 94:60:43:a1:b0:17:f4:2a:a3:4f:3d:56:11:2c:33:eb:27:5c: d8:23:38:f0:01:3c:7f:b1:cc:6b:b0:89:a7:a4:15:81:ad:8f: c7:4b:d4:fd:c3:9d:9a:df:f4:44:88:3d:2e:2e:d3:38:41:4c: a1:0b:4b:49:6f:4b:40:68:2d:39:d3:0c:02:ea:a6:01:90:77: 38:02:a1:40:c1:17:d4:61:01:75:76:38:fd:51:6c:e9:dc:86: 48:30:5a:f7:75:cf:09:4d:3d:fe:2a:dd:cf:d8:fd:c4:36:e5: 52:8c:da:bc:35:bc:ff:f6:92:76:7b:14:4c:f7:92:f9:53:d9: 8f:30:b9:e9:bd:e5:38:05:16:71:a2:c2:47:78:68:ea:10:a1: fa:7e:10:d0:3c:f9:7e:9c:22:ea:fb:a7:0e:b5:58:78:50:61: 9d:f0:55:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUezYqv04J3XxdchkFtkNXdFioVHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwNDA2MjAwN1oX DTI1MDEwMjA2MjUwN1owMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5 MzU4OURFRDhENzZERTc2RjgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjQ5M6k4N0eOOk1BZZeb5GsQ+LmmKDNNSHp+8E6ryyjQt2nUHMiE2jdkJG/ a81U9oY+3MStPQrtMDjkO8L17j1fLPArkzkH8xEz9oE1I0EtRn3ADbqKgO5nlQj9 2Y/fRXGQ2jFD8MuFqTyodtDLSci3UCWO292Lha4IK/7qiV0m6GDH3tnCDGQ620Nm jw42At7Tf96mxPZbAcuyvmwn/155fjhxxunWi4EUbdtn0Vv53RtolhG3GKps9Kit TkLYEImub+6Vd57ZA6qvoMUC0JgIw0REUFZNlD5lHnNCCQ+ZJ0f6TgiZ3tMTXCet 8YOpmzcezdo3euxQMzlxT9yLCN8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJqXqRmtYURngNWTWJ3tjXbedvg6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1 LWZkYTMtNGEzZS05MmY3LWZhYmZlZDA1YTk1Yy8wLzlBOTdBOTE5QUQ2MTQ0Njc4 MEQ1OTM1ODlERUQ4RDc2REU3NkY4M0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEkMjgwDQYJKoZIhvcNAQELBQADggEBAAA8RimpdS7V5ISJ985YcZOnhtm3ljb+ EQXZZ98zIS9K0HnQI08iaYY3C6uoequSyrF6srBnVS5kQJCiKxjJi/nTqRzVekYN P1igG/9PCzKp3Jrj/a0ltN9yX5RgQ6GwF/Qqo089VhEsM+snXNgjOPABPH+xzGuw iaekFYGtj8dL1P3DnZrf9ESIPS4u0zhBTKELS0lvS0BoLTnTDALqpgGQdzgCoUDB F9RhAXV2OP1RbOnchkgwWvd1zwlNPf4q3c/Y/cQ25VKM2rw1vP/2knZ7FEz3kvlT 2Y8wuem95TgFFnGiwkd4aOoQofp+ENA8+X6cIur7pw61WHhQYZ3wVcw= -----END CERTIFICATE-----Generated at Wed May 8 09:50:34 2024 by rpki-client on console-fra.rpki-client.org