$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer (raw, json) Hash identifier: z4aYkrWAh2WvY5rLSvGA3ejyYlFNJm5BLM24MYlhntk= Subject key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 631E9C46CE1E0FE81FC0E7E6C0439FC97DE50217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 May 2024 16:28:33 +0000 Certificate not after: Mon 26 May 2025 16:33:33 +0000 Subordinate resources: IP: 113.59.232.0/21 IP: 2400:b080::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1e:9c:46:ce:1e:0f:e8:1f:c0:e7:e6:c0:43:9f:c9:7d:e5:02:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 27 16:28:33 2024 GMT Not After : May 26 16:33:33 2025 GMT Subject: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:ee:2a:00:57:af:91:d1:a3:67:33:9e:df: b1:c2:f6:71:fe:2a:3b:71:6e:4c:6e:d3:64:6c:51: ab:14:5e:a5:cd:f6:88:96:b5:9d:27:b6:e7:31:1e: db:85:bf:b4:da:f8:51:2a:7e:4a:d6:a8:5e:3e:74: 9b:91:24:73:e3:af:37:4e:ce:f7:95:86:8a:2a:76: 52:65:ed:6f:a7:b4:35:b8:4d:57:27:83:50:6a:b8: d7:ac:cc:f8:b7:93:8a:21:d0:3c:e0:c0:bd:8b:ad: 5f:83:49:a2:62:cb:1b:3a:7f:cb:6f:a4:de:72:04: b0:f7:a5:7b:86:6f:53:69:d2:28:fe:4d:8c:42:e7: 21:d5:79:85:c2:28:35:ec:e6:ec:53:f4:41:e3:4b: 5b:e0:28:df:20:4b:0a:c9:72:d6:30:c4:d5:fa:13: ca:3f:68:99:07:cd:e5:be:75:a0:c1:51:87:b6:67: a2:53:e7:a7:06:b1:da:27:ba:2e:73:1e:60:ff:95: dc:00:cf:37:23:82:df:40:35:52:ef:ef:b3:25:65: af:67:5f:bd:c7:a3:5d:ad:e5:d8:96:86:34:b5:68: 42:b0:61:9d:69:04:c5:b9:42:19:85:95:6f:a2:20: 29:a4:82:9b:0b:9b:5c:cd:97:d4:e2:e0:20:69:cf: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.232.0/21 IPv6: 2400:b080::/32 Signature Algorithm: sha256WithRSAEncryption 04:b1:5b:0c:f9:41:7e:ab:ca:22:2a:46:8c:67:d2:6c:07:48: 2a:68:0c:40:c4:e1:59:45:9a:4b:aa:ed:89:00:6b:d0:c1:fc: b0:c3:dd:57:51:db:b8:a2:8f:54:4c:54:9c:4c:7e:37:9d:9f: 03:9d:25:29:c4:c1:04:5e:75:a4:f7:2e:06:5c:a3:3f:bd:3c: 7e:ea:3a:99:ee:c1:44:43:50:a0:4f:0a:0d:0c:68:ab:d4:0c: 83:62:89:36:5a:f1:e8:db:5c:9b:c7:90:8c:93:48:28:d1:41: 88:1d:2a:c0:7a:e0:58:b7:e0:2a:22:27:c8:7e:79:ee:5c:fe: b0:8e:c4:bc:b2:4e:7a:89:bb:55:95:26:bb:e0:2c:02:0d:b1: bd:f2:59:44:03:7f:d9:09:c7:68:b7:ca:c7:f7:08:64:fb:0b: 68:f6:80:4a:41:ec:8a:38:2c:cf:02:42:f8:ff:40:ee:8e:85: b7:5b:4f:8e:1b:c7:d4:40:68:7f:25:5d:f5:79:c7:a0:ad:3f: fd:59:7c:c8:b2:a4:5e:74:ce:57:2a:7c:11:e9:d8:1d:cb:d8: bf:64:ea:0a:cc:07:d0:06:3b:28:db:2d:df:96:2e:b5:a9:c1: e5:85:56:d3:12:71:2a:bc:e8:39:fd:48:6b:ec:e2:d0:fc:ff: 9c:1d:42:97 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUYx6cRs4eD+gfwOfmwEOfyX3lAhcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNzE2MjgzM1oX DTI1MDUyNjE2MzMzM1owMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVD NUE2MjVEQzAwQzJBNTlGOTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoC7ioAV6+R0aNnM57fscL2cf4qO3FuTG7TZGxRqxRepc32iJa1nSe25zEe 24W/tNr4USp+StaoXj50m5Ekc+OvN07O95WGiip2UmXtb6e0NbhNVyeDUGq416zM +LeTiiHQPODAvYutX4NJomLLGzp/y2+k3nIEsPele4ZvU2nSKP5NjELnIdV5hcIo Nezm7FP0QeNLW+Ao3yBLCsly1jDE1foTyj9omQfN5b51oMFRh7ZnolPnpwax2ie6 LnMeYP+V3ADPNyOC30A1Uu/vsyVlr2dfvcejXa3l2JaGNLVoQrBhnWkExblCGYWV b6IgKaSCmwubXM2X1OLgIGnPcjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsvAEdtasG6qwXFpiXcAMKln5nXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThm LWY0YzYtNDc3NS04OTU3LTk5ZDJiZDY2NjM2My8wLzlCMkYwMDQ3NkQ2QUMxQkFB QjA1QzVBNjI1REMwMEMyQTU5Rjk5RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BANxO+gwDQQCAAIwBwMFACQAsIAwDQYJKoZIhvcNAQELBQADggEBAASxWwz5QX6r yiIqRoxn0mwHSCpoDEDE4VlFmkuq7YkAa9DB/LDD3VdR27iij1RMVJxMfjednwOd JSnEwQRedaT3LgZcoz+9PH7qOpnuwURDUKBPCg0MaKvUDINiiTZa8ejbXJvHkIyT SCjRQYgdKsB64Fi34CoiJ8h+ee5c/rCOxLyyTnqJu1WVJrvgLAINsb3yWUQDf9kJ x2i3ysf3CGT7C2j2gEpB7Io4LM8CQvj/QO6OhbdbT44bx9RAaH8lXfV5x6CtP/1Z fMiypF50zlcqfBHp2B3L2L9k6grMB9AGOyjbLd+WLrWpweWFVtMScSq86Dn9SGvs 4tD8/5wdQpc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org