$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer (raw, json) Hash identifier: DAdOqKgteUZ5nKckB1ino5mluUaRK/0ES4tW0hIpH/E= Subject key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D88D380890BD84A71F54608180EEFF777546DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 09:51:13 +0000 Certificate not after: Thu 31 Jul 2025 09:56:13 +0000 Subordinate resources: IP: 203.123.60.0/22 IP: 2001:df5:3e00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:88:d3:80:89:0b:d8:4a:71:f5:46:08:18:0e:ef:f7:77:54:6d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 09:51:13 2024 GMT Not After : Jul 31 09:56:13 2025 GMT Subject: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:39:9a:d4:09:34:27:b1:74:d4:b3:de:1d: d3:b7:42:f6:80:d2:75:40:54:ab:7d:32:a0:b2:76: e5:4f:76:a4:5d:ec:2a:10:72:8f:b4:af:72:a2:d3: 81:3c:29:8e:df:0e:c1:10:de:18:9c:2c:fe:c0:23: 6b:4d:c3:d9:4f:c7:3e:43:fb:aa:2c:37:7b:1b:7d: 53:a8:c6:db:90:ad:7e:43:96:84:16:fd:49:0d:ea: d5:4b:90:b5:b9:b1:73:ba:9e:fd:61:00:56:70:a8: 23:c3:ec:a0:53:1c:f7:04:be:05:75:06:4e:2d:73: f8:71:98:ff:ae:c5:a3:fd:16:94:dc:5c:a6:29:9d: 6e:19:90:82:ff:f5:14:21:27:b8:cf:30:1d:b1:f9: 5b:7c:9f:98:b2:59:df:a2:b3:f4:9b:4a:14:12:ff: 75:c0:ec:24:ba:69:89:dd:3d:4b:30:91:8d:6e:e9: bc:3e:16:dc:b9:c1:ad:6a:cd:eb:ea:18:4f:32:69: 5f:0a:10:60:86:22:4c:cf:97:9e:17:83:5a:50:f7: 5f:78:13:fa:da:ba:9a:df:e0:47:20:a2:dc:c9:57: 17:3e:8c:f8:03:82:98:a4:f3:e2:67:a0:4f:3f:e8: c6:da:8e:fb:6d:58:80:81:d2:46:96:88:8a:d6:9c: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.123.60.0/22 IPv6: 2001:df5:3e00::/48 Signature Algorithm: sha256WithRSAEncryption 24:8a:f1:c7:ab:8f:1d:e3:a5:8c:5b:6a:00:e4:7d:45:bc:56: a0:bc:55:65:ea:01:95:eb:a9:de:d6:56:34:ad:95:28:d1:46: ae:65:66:c0:d5:4c:33:8c:95:07:eb:35:24:ee:91:18:5d:86: 3f:56:f0:8a:44:e2:63:f2:95:2b:00:ad:b5:c0:a6:a5:52:b0: 4c:34:21:dc:11:d7:d4:4f:71:1c:1f:5f:59:93:07:ea:1a:e4: 39:e4:50:bb:4f:46:29:52:78:e0:90:ee:ee:aa:c0:8d:47:6a: 38:e1:9c:61:2e:56:50:b3:a9:69:1e:bb:fc:0f:13:46:90:66: a9:c8:36:8c:9f:cf:90:cb:b1:19:70:4f:ae:e0:e4:52:43:3a: f1:d1:9a:b1:c6:f3:f4:d0:57:98:14:e9:83:34:bb:73:c4:25: e5:95:a6:ca:3e:1e:8e:86:cb:eb:4d:d2:df:2c:75:83:d8:0d: db:af:10:51:36:d0:e5:61:a2:7f:6e:9c:25:8e:c7:db:ce:b6: 93:40:0c:75:ab:f4:27:29:a4:37:29:a1:ec:91:5b:b2:18:38: 80:5d:36:f5:a9:a4:c9:0c:14:86:1f:57:5f:67:fe:ce:dd:87: c1:ae:f2:08:4c:1a:e6:6c:b4:14:a6:12:c4:0a:86:9e:e3:35: 92:67:8f:ac -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULYjTgIkL2Epx9UYIGA7v93dUbeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwMTA5NTExM1oX DTI1MDczMTA5NTYxM1owMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZF NjJFOTYxNkMzQTlEMDFCMTVDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiuOZrUCTQnsXTUs94d07dC9oDSdUBUq30yoLJ25U92pF3sKhByj7SvcqLT gTwpjt8OwRDeGJws/sAja03D2U/HPkP7qiw3ext9U6jG25CtfkOWhBb9SQ3q1UuQ tbmxc7qe/WEAVnCoI8PsoFMc9wS+BXUGTi1z+HGY/67Fo/0WlNxcpimdbhmQgv/1 FCEnuM8wHbH5W3yfmLJZ36Kz9JtKFBL/dcDsJLppid09SzCRjW7pvD4W3LnBrWrN 6+oYTzJpXwoQYIYiTM+XnheDWlD3X3gT+tq6mt/gRyCi3MlXFz6M+AOCmKTz4meg Tz/oxtqO+21YgIHSRpaIitac/usCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ9hmQGDuNEEjN/mLpYWw6nQGxXHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhYjM5MDJi LTc0NTktNDg1NC1hNWY1LTA5ZjE1ZDhjODdkMy8wLzlGNjE5OTAxODNCOEQxMDQ4 Q0RGRTYyRTk2MTZDM0E5RDAxQjE1QzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BALLezwwDwQCAAIwCQMHACABDfU+ADANBgkqhkiG9w0BAQsFAAOCAQEAJIrxx6uP HeOljFtqAOR9RbxWoLxVZeoBleup3tZWNK2VKNFGrmVmwNVMM4yVB+s1JO6RGF2G P1bwikTiY/KVKwCttcCmpVKwTDQh3BHX1E9xHB9fWZMH6hrkOeRQu09GKVJ44JDu 7qrAjUdqOOGcYS5WULOpaR67/A8TRpBmqcg2jJ/PkMuxGXBPruDkUkM68dGascbz 9NBXmBTpgzS7c8Ql5ZWmyj4ejobL603S3yx1g9gN268QUTbQ5WGif26cJY7H2862 k0AMdav0JymkNymh7JFbshg4gF029amkyQwUhh9XX2f+zt2Hwa7yCEwa5my0FKYS xAqGnuM1kmePrA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org