$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer (raw, json) Hash identifier: C+8rZYL4WxdCUYcWr5YyB3vdUZjhy3vm/X6ri8vcCmg= Subject key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 397FC8E302D3870EF36A75962C9D2521970B9B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft caRepository: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Aug 2024 02:44:52 +0000 Certificate not after: Tue 19 Aug 2025 02:49:52 +0000 Subordinate resources: IP: 202.90.198.0/23 IP: 2001:df0:c5::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7f:c8:e3:02:d3:87:0e:f3:6a:75:96:2c:9d:25:21:97:0b:9b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 20 02:44:52 2024 GMT Not After : Aug 19 02:49:52 2025 GMT Subject: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:fc:0f:d7:c5:32:72:c5:e1:fc:e6:15:27: d3:af:6b:c8:f5:eb:b6:f0:0f:fe:34:af:1d:38:ed: 64:2d:57:4e:27:4a:0f:c3:17:3a:6c:a5:39:dc:d6: 89:ec:02:27:ec:7d:0a:e3:dc:a9:10:1e:ed:b9:93: b1:0a:19:ca:64:f8:ed:62:42:e1:b8:c4:9e:2b:b8: a7:3e:cc:a7:c0:19:72:7d:7a:1a:d1:d7:31:8b:42: eb:f0:2c:9b:31:34:46:c5:b5:78:59:8a:94:66:61: 3f:34:88:a8:81:49:06:31:2d:8c:f0:11:c1:5f:e2: a8:3e:90:05:d5:33:a9:83:ae:5d:a2:20:5b:c7:12: cb:ab:7b:59:62:26:be:3f:17:01:57:3d:09:22:86: c7:d7:58:dd:9c:c5:75:87:58:74:45:eb:4f:eb:8e: 6a:89:0b:f2:b9:db:a8:4c:83:a7:8b:f5:db:cc:3e: ab:d5:60:4e:0f:41:d8:76:c9:fc:ae:23:2c:fa:cf: 87:8a:21:34:26:e0:10:af:2c:2f:19:a4:25:a8:8d: 00:dd:0b:86:f0:75:32:fe:09:4f:ed:77:5b:de:a1: fe:9e:70:59:84:4e:6a:5d:ac:9d:a5:23:42:1c:70: 10:47:a5:0d:9a:27:30:50:e6:21:20:33:1d:fe:3f: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.198.0/23 IPv6: 2001:df0:c5::/48 Signature Algorithm: sha256WithRSAEncryption 91:7d:bb:1c:3b:c1:c9:d5:38:d2:29:4b:71:4a:1e:4c:ac:e0: 58:24:6c:d5:34:c8:35:d9:fa:a5:37:e0:0c:d2:79:a3:31:26: ff:90:4e:27:85:6d:52:cd:0a:7a:f8:4c:e7:72:14:3e:db:0d: 56:a2:49:8c:cb:ad:91:9c:e5:74:ff:37:99:48:a2:f8:30:d6: d3:ae:d2:af:49:51:fd:98:5c:fa:8e:f5:ff:44:46:b6:5e:45: 0d:92:5d:8a:34:7d:e0:06:e9:d6:81:46:d7:7d:0d:2e:b6:c0: 46:d8:94:d5:a7:2b:93:75:86:87:3a:32:cf:9b:c1:a3:73:8d: 87:ed:ed:8b:37:89:1a:87:8a:e2:d9:8e:b0:f1:0b:2b:87:42: 87:ba:91:86:ee:53:9a:88:ed:0d:21:07:77:42:bc:ca:3f:7b: 45:c1:16:52:09:18:fa:d1:2e:4f:6b:2f:c3:1c:89:e5:cd:61: 19:19:f3:2a:e2:01:ba:96:cd:1f:9d:21:34:52:d0:6c:37:de: 24:d8:22:c5:04:52:72:53:7d:cc:0f:cc:be:3b:45:8c:91:63: 84:0a:c9:b5:09:fc:c1:69:1e:3f:e7:ef:65:3c:30:d8:8e:34: a3:15:7c:88:9b:5f:cc:a7:e0:ce:f6:21:30:5d:91:a8:d8:fa: 9e:84:77:65 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUOX/I4wLThw7zanWWLJ0lIZcLmxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMDAyNDQ1MloX DTI1MDgxOTAyNDk1MlowMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0 NzU5MDZDNkNDQjk3NEMwNEM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOs1/A/XxTJyxeH85hUn069ryPXrtvAP/jSvHTjtZC1XTidKD8MXOmylOdzW iewCJ+x9CuPcqRAe7bmTsQoZymT47WJC4bjEniu4pz7Mp8AZcn16GtHXMYtC6/As mzE0RsW1eFmKlGZhPzSIqIFJBjEtjPARwV/iqD6QBdUzqYOuXaIgW8cSy6t7WWIm vj8XAVc9CSKGx9dY3ZzFdYdYdEXrT+uOaokL8rnbqEyDp4v128w+q9VgTg9B2HbJ /K4jLPrPh4ohNCbgEK8sLxmkJaiNAN0LhvB1Mv4JT+13W96h/p5wWYROal2snaUj QhxwEEelDZonMFDmISAzHf4/EhsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwRoo/s4ntlx+ZHWQbGzLl0wExAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0ZTFmMzcw LWYzMWYtNDdlZC04YTQxLWIyOGJjOGRhZjQzNS8wLzlDMTFBMjhGRUNFMjdCNjVD N0U2NDc1OTA2QzZDQ0I5NzRDMDRDNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHKWsYwDwQCAAIwCQMHACABDfAAxTANBgkqhkiG9w0BAQsFAAOCAQEAkX27HDvB ydU40ilLcUoeTKzgWCRs1TTINdn6pTfgDNJ5ozEm/5BOJ4VtUs0KevhM53IUPtsN VqJJjMutkZzldP83mUii+DDW067Sr0lR/Zhc+o71/0RGtl5FDZJdijR94Abp1oFG 130NLrbARtiU1acrk3WGhzoyz5vBo3ONh+3tizeJGoeK4tmOsPELK4dCh7qRhu5T mojtDSEHd0K8yj97RcEWUgkY+tEuT2svwxyJ5c1hGRnzKuIBupbNH50hNFLQbDfe JNgixQRSclN9zA/MvjtFjJFjhArJtQn8wWkeP+fvZTww2I40oxV8iJtfzKfgzvYh MF2RqNj6noR3ZQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:45 2024 by rpki-client on console-ams.rpki-client.org