$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer File: 9A97A919AD61446780D593589DED8D76DE76F83A.cer (raw, json) Hash identifier: Smzb4SRkL38+sN9C+neR1uXjsRDb2qvXnJotiw4wbm0= Subject key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76B1F9E308D0A9C2742DEB4B9B4039DF253EAFEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Dec 2024 07:35:06 +0000 Certificate not after: Thu 04 Dec 2025 07:40:06 +0000 Subordinate resources: IP: 36.50.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b1:f9:e3:08:d0:a9:c2:74:2d:eb:4b:9b:40:39:df:25:3e:af:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 5 07:35:06 2024 GMT Not After : Dec 4 07:40:06 2025 GMT Subject: CN=9A97A919AD61446780D593589DED8D76DE76F83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:e4:ce:a4:e0:dd:1e:38:e9:35:05:96:5e: 6f:91:ac:43:e2:e6:98:a0:cd:35:21:e9:fb:c1:3a: af:2c:a3:42:dd:a7:50:73:22:13:68:dd:90:91:bf: 6b:cd:54:f6:86:3e:dc:c4:ad:3d:0a:ed:30:38:e4: 3b:c2:f5:ee:3d:5f:2c:f0:2b:93:39:07:f3:11:33: f6:81:35:23:41:2d:46:7d:c0:0d:ba:8a:80:ee:67: 95:08:fd:d9:8f:df:45:71:90:da:31:43:f0:cb:85: a9:3c:a8:76:d0:cb:49:c8:b7:50:25:8e:db:dd:8b: 85:ae:08:2b:fe:ea:89:5d:26:e8:60:c7:de:d9:c2: 0c:64:3a:db:43:66:8f:0e:36:02:de:d3:7f:de:a6: c4:f6:5b:01:cb:b2:be:6c:27:ff:5e:79:7e:38:71: c6:e9:d6:8b:81:14:6d:db:67:d1:5b:f9:dd:1b:68: 96:11:b7:18:aa:6c:f4:a8:ad:4e:42:d8:10:89:ae: 6f:ee:95:77:9e:d9:03:aa:af:a0:c5:02:d0:98:08: c3:44:44:50:56:4d:94:3e:65:1e:73:42:09:0f:99: 27:47:fa:4e:08:99:de:d3:13:5c:27:ad:f1:83:a9: 9b:37:1e:cd:da:37:7a:ec:50:33:39:71:4f:dc:8b: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.56.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:d6:19:d1:75:07:3b:73:3e:f2:45:b3:17:0d:9e:2b:30:be: d7:c9:b7:e8:17:82:91:fe:a0:43:ba:7c:20:fb:e3:24:d8:b7: 97:67:5f:39:64:32:ae:e4:b0:b3:7a:63:20:2d:0f:e2:21:79: 2e:c1:d3:bc:49:37:55:4e:e3:aa:0e:b5:48:2b:f6:12:c7:b8: c2:24:b7:a6:d4:e3:ac:48:6c:ef:1f:ce:54:bb:26:7f:eb:c8: 40:ca:7e:da:4e:af:2c:9f:6c:a1:52:37:51:80:72:aa:0b:d0: 99:01:53:55:31:04:79:8d:e2:8d:42:b8:ab:f2:7b:20:da:c7: c1:6e:19:53:33:32:fe:e9:dc:d0:c4:95:38:23:f2:e3:8b:2b: 90:ab:ba:d3:c9:74:1f:bc:78:a1:ea:ff:2e:e1:14:da:3c:2b: 71:9d:3f:52:79:b1:cc:fd:f9:0b:6c:c4:68:c4:8c:31:b8:1f: 97:64:5e:4b:ca:d7:5f:ef:28:5c:59:ef:14:0b:90:eb:2d:d2: 25:66:8a:71:3f:85:1c:50:df:ad:e0:ff:87:82:c9:3e:83:dc: d2:ca:aa:58:d5:02:12:ca:cc:e2:4f:11:73:3f:e9:69:68:f7: da:76:b6:28:3c:62:58:c9:5b:48:e2:47:f4:88:1b:13:a6:dd: 2f:31:38:02 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdrH54wjQqcJ0LetLm0A53yU+r+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNTA3MzUwNloX DTI1MTIwNDA3NDAwNlowMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5 MzU4OURFRDhENzZERTc2RjgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjQ5M6k4N0eOOk1BZZeb5GsQ+LmmKDNNSHp+8E6ryyjQt2nUHMiE2jdkJG/ a81U9oY+3MStPQrtMDjkO8L17j1fLPArkzkH8xEz9oE1I0EtRn3ADbqKgO5nlQj9 2Y/fRXGQ2jFD8MuFqTyodtDLSci3UCWO292Lha4IK/7qiV0m6GDH3tnCDGQ620Nm jw42At7Tf96mxPZbAcuyvmwn/155fjhxxunWi4EUbdtn0Vv53RtolhG3GKps9Kit TkLYEImub+6Vd57ZA6qvoMUC0JgIw0REUFZNlD5lHnNCCQ+ZJ0f6TgiZ3tMTXCet 8YOpmzcezdo3euxQMzlxT9yLCN8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJqXqRmtYURngNWTWJ3tjXbedvg6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1 LWZkYTMtNGEzZS05MmY3LWZhYmZlZDA1YTk1Yy8wLzlBOTdBOTE5QUQ2MTQ0Njc4 MEQ1OTM1ODlERUQ4RDc2REU3NkY4M0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEkMjgwDQYJKoZIhvcNAQELBQADggEBAHzWGdF1BztzPvJFsxcNniswvtfJt+gX gpH+oEO6fCD74yTYt5dnXzlkMq7ksLN6YyAtD+IheS7B07xJN1VO46oOtUgr9hLH uMIkt6bU46xIbO8fzlS7Jn/ryEDKftpOryyfbKFSN1GAcqoL0JkBU1UxBHmN4o1C uKvyeyDax8FuGVMzMv7p3NDElTgj8uOLK5CrutPJdB+8eKHq/y7hFNo8K3GdP1J5 scz9+QtsxGjEjDG4H5dkXkvK11/vKFxZ7xQLkOst0iVminE/hRxQ363g/4eCyT6D 3NLKqljVAhLKzOJPEXM/6Wlo99p2tig8YljJW0jiR/SIGxOm3S8xOAI= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:49 2025 by rpki-client