$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer (raw, json) Hash identifier: ilvWhACCuQay5HZtDi0STc3M8vGIrnymStt9hdmhaDw= Subject key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53FF1754B47F752ACA1BA84977DF271C5448EF33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 26 Jun 2023 13:26:27 +0000 Certificate not after: Mon 24 Jun 2024 13:31:27 +0000 Subordinate resources: IP: 113.59.232.0/21 IP: 2400:b080::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ff:17:54:b4:7f:75:2a:ca:1b:a8:49:77:df:27:1c:54:48:ef:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 26 13:26:27 2023 GMT Not After : Jun 24 13:31:27 2024 GMT Subject: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:ee:2a:00:57:af:91:d1:a3:67:33:9e:df: b1:c2:f6:71:fe:2a:3b:71:6e:4c:6e:d3:64:6c:51: ab:14:5e:a5:cd:f6:88:96:b5:9d:27:b6:e7:31:1e: db:85:bf:b4:da:f8:51:2a:7e:4a:d6:a8:5e:3e:74: 9b:91:24:73:e3:af:37:4e:ce:f7:95:86:8a:2a:76: 52:65:ed:6f:a7:b4:35:b8:4d:57:27:83:50:6a:b8: d7:ac:cc:f8:b7:93:8a:21:d0:3c:e0:c0:bd:8b:ad: 5f:83:49:a2:62:cb:1b:3a:7f:cb:6f:a4:de:72:04: b0:f7:a5:7b:86:6f:53:69:d2:28:fe:4d:8c:42:e7: 21:d5:79:85:c2:28:35:ec:e6:ec:53:f4:41:e3:4b: 5b:e0:28:df:20:4b:0a:c9:72:d6:30:c4:d5:fa:13: ca:3f:68:99:07:cd:e5:be:75:a0:c1:51:87:b6:67: a2:53:e7:a7:06:b1:da:27:ba:2e:73:1e:60:ff:95: dc:00:cf:37:23:82:df:40:35:52:ef:ef:b3:25:65: af:67:5f:bd:c7:a3:5d:ad:e5:d8:96:86:34:b5:68: 42:b0:61:9d:69:04:c5:b9:42:19:85:95:6f:a2:20: 29:a4:82:9b:0b:9b:5c:cd:97:d4:e2:e0:20:69:cf: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.232.0/21 IPv6: 2400:b080::/32 Signature Algorithm: sha256WithRSAEncryption 80:e6:f8:fb:d7:98:10:b4:b5:ad:51:d5:a1:c5:c6:ba:4f:bf: 47:f8:8c:de:2a:86:3f:eb:df:39:02:b7:4f:34:10:d3:87:ac: f5:83:51:62:a9:92:3b:1e:fc:c3:1b:50:0f:c8:df:04:5d:63: 01:a9:a3:61:31:14:06:09:07:80:b2:f1:30:3a:b4:8d:65:e7: 47:c0:62:a6:3d:57:0a:91:1f:36:bd:58:d6:10:b6:54:8e:64: 95:af:9e:89:9f:cf:0b:21:e1:4d:fe:3a:ee:8c:5e:48:45:cc: 89:23:4f:90:28:ca:a7:2a:ee:90:bd:2c:71:3c:fa:da:a5:cf: bb:70:d2:43:28:73:8a:12:d6:b2:48:75:d7:60:c5:39:8c:3a: 7f:c9:25:2b:95:02:40:a3:dc:c4:43:16:85:ac:24:00:2b:9c: 9d:e3:77:31:6f:d6:51:15:96:b2:00:87:a8:c4:b5:b1:f5:5d: 2d:6f:2b:04:d3:8b:65:57:cf:3e:1f:22:eb:be:06:5c:7d:49: ce:9c:1f:b6:13:0d:83:4b:14:fa:ae:31:f8:c3:73:bf:cc:5f: 02:3f:a2:78:8f:21:18:0b:77:d7:d8:78:93:fe:56:71:72:af: 3c:27:36:31:66:0f:1f:92:44:27:1c:f6:21:45:f3:b4:8e:e1: 29:04:6d:70 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUU/8XVLR/dSrKG6hJd98nHFRI7zMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyNjEzMjYyN1oX DTI0MDYyNDEzMzEyN1owMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVD NUE2MjVEQzAwQzJBNTlGOTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoC7ioAV6+R0aNnM57fscL2cf4qO3FuTG7TZGxRqxRepc32iJa1nSe25zEe 24W/tNr4USp+StaoXj50m5Ekc+OvN07O95WGiip2UmXtb6e0NbhNVyeDUGq416zM +LeTiiHQPODAvYutX4NJomLLGzp/y2+k3nIEsPele4ZvU2nSKP5NjELnIdV5hcIo Nezm7FP0QeNLW+Ao3yBLCsly1jDE1foTyj9omQfN5b51oMFRh7ZnolPnpwax2ie6 LnMeYP+V3ADPNyOC30A1Uu/vsyVlr2dfvcejXa3l2JaGNLVoQrBhnWkExblCGYWV b6IgKaSCmwubXM2X1OLgIGnPcjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsvAEdtasG6qwXFpiXcAMKln5nXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThm LWY0YzYtNDc3NS04OTU3LTk5ZDJiZDY2NjM2My8wLzlCMkYwMDQ3NkQ2QUMxQkFB QjA1QzVBNjI1REMwMEMyQTU5Rjk5RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BANxO+gwDQQCAAIwBwMFACQAsIAwDQYJKoZIhvcNAQELBQADggEBAIDm+PvXmBC0 ta1R1aHFxrpPv0f4jN4qhj/r3zkCt080ENOHrPWDUWKpkjse/MMbUA/I3wRdYwGp o2ExFAYJB4Cy8TA6tI1l50fAYqY9VwqRHza9WNYQtlSOZJWvnomfzwsh4U3+Ou6M XkhFzIkjT5Aoyqcq7pC9LHE8+tqlz7tw0kMoc4oS1rJIdddgxTmMOn/JJSuVAkCj 3MRDFoWsJAArnJ3jdzFv1lEVlrIAh6jEtbH1XS1vKwTTi2VXzz4fIuu+Blx9Sc6c H7YTDYNLFPquMfjDc7/MXwI/oniPIRgLd9fYeJP+VnFyrzwnNjFmDx+SRCcc9iFF 87SO4SkEbXA= -----END CERTIFICATE-----Generated at Tue May 7 18:07:13 2024 by rpki-client on console-fra.rpki-client.org