$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer (raw, json) Hash identifier: BfqDHG1n5Rog5aI5DMdf5PBJlfL388A0YVyJKuYZ+XA= Subject key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A7AD0C9E7FC8E1314188CB236699851CC4F66F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft caRepository: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:36:36 +0000 Certificate not after: Mon 30 Jun 2025 14:41:36 +0000 Subordinate resources: IP: 103.98.104.0/23 IP: 2001:df2:2100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7a:d0:c9:e7:fc:8e:13:14:18:8c:b2:36:69:98:51:cc:4f:66:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:36:36 2024 GMT Not After : Jun 30 14:41:36 2025 GMT Subject: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:00:18:79:40:d4:c5:0c:e4:05:b5:31:be: 1f:93:b7:85:ed:d0:3e:4b:52:39:0b:ef:5c:f8:06: 54:13:a8:5c:0a:b0:5b:3c:34:85:00:a5:d5:0d:a8: 0a:ba:80:db:b9:40:41:a9:ff:2e:60:a9:22:cc:d4: f6:0c:58:c7:13:5d:fb:4e:73:f0:92:2e:b1:d6:bc: 50:c3:e8:7b:ac:4a:d3:17:da:8e:ae:43:35:ce:42: 38:12:5a:f5:8c:5d:1c:28:4b:6d:02:d9:28:a6:a8: 33:1c:6f:11:04:43:7f:38:f8:de:f6:e7:b3:80:f4: 03:e2:59:e1:7a:70:00:40:4f:53:3a:05:56:a7:0b: 6e:e5:ef:4c:2e:27:c7:27:7c:f8:1f:31:5b:60:3d: 67:22:5d:ed:44:5a:6f:2c:91:ce:9a:30:51:5a:93: d9:d9:6b:e7:4d:98:ff:f8:3b:c5:8e:44:3c:15:33: 8a:37:f6:99:ce:af:4e:39:af:7b:b3:7d:c6:7f:5a: 9a:00:ab:b0:c8:0a:b0:3d:7b:3b:52:09:63:d7:07: c4:3b:17:7e:e7:22:23:a7:59:14:8d:34:93:15:47: 54:e9:44:eb:10:c1:75:1f:42:14:34:e5:42:bc:03: 05:ca:07:e6:c4:0f:fb:4b:d2:b6:a5:3a:61:8a:e6: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.104.0/23 IPv6: 2001:df2:2100::/48 Signature Algorithm: sha256WithRSAEncryption 3c:43:f0:f2:88:d2:94:f2:c5:a5:e0:cd:b2:ab:c8:ea:c9:19: e6:e0:54:f7:3b:18:08:09:72:e2:bf:f6:22:92:a6:a7:39:c7: 7f:49:75:f9:5c:d9:5f:71:9e:86:2f:23:59:70:f9:d8:ee:d7: d6:3f:98:f6:d0:aa:99:f7:d7:5f:bd:a9:31:e5:1e:74:b6:c1: e3:65:7d:fc:7c:0d:14:ef:52:0f:ef:07:86:b8:b2:75:11:a4: 0f:a7:dc:dc:e7:91:7d:76:81:e5:65:93:e6:53:14:6c:55:19: 5f:58:31:d5:73:48:18:25:23:cf:cd:0f:bd:fc:37:f2:05:9e: 81:43:db:39:1e:49:50:ea:06:62:eb:0d:c2:3b:fd:c8:c3:88: 3f:08:0c:cd:0e:72:0d:42:10:b7:06:25:4e:ab:bf:86:73:9b: 89:03:fc:e7:05:69:bf:e5:42:b5:3d:3c:fa:35:d1:4d:5a:c5: 83:74:35:76:f0:90:03:b0:5d:a4:78:fe:ac:09:8e:71:62:dd: 47:18:0e:af:50:56:1b:b9:7e:ac:b2:f0:f2:99:09:82:fd:9b: 54:02:66:0c:0d:21:fe:83:5e:63:d7:18:4c:25:9b:6e:e7:89: d4:6c:87:fb:b9:18:9f:29:f8:69:b4:73:36:dd:d3:23:de:8a: 37:af:2e:ab -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUCnrQyef8jhMUGIyyNmmYUcxPZvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MzYzNloX DTI1MDYzMDE0NDEzNlowMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMz NzhGOTkzMTRBOTkyRDQ4MkU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGaABh5QNTFDOQFtTG+H5O3he3QPktSOQvvXPgGVBOoXAqwWzw0hQCl1Q2o CrqA27lAQan/LmCpIszU9gxYxxNd+05z8JIusda8UMPoe6xK0xfajq5DNc5COBJa 9YxdHChLbQLZKKaoMxxvEQRDfzj43vbns4D0A+JZ4XpwAEBPUzoFVqcLbuXvTC4n xyd8+B8xW2A9ZyJd7URabyyRzpowUVqT2dlr502Y//g7xY5EPBUzijf2mc6vTjmv e7N9xn9amgCrsMgKsD17O1IJY9cHxDsXfuciI6dZFI00kxVHVOlE6xDBdR9CFDTl QrwDBcoH5sQP+0vStqU6YYrm1YECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ9tXVZJ0AHSt6M3j5kxSpktSC5KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmZDNmYzI0 LTc1YTItNDdmNi05MjhlLTRlOTgwMmI5NzA4NS8wLzlGNkQ1RDU2NDlEMDAxRDJC N0EzMzc4Rjk5MzE0QTk5MkQ0ODJFNEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnYmgwDwQCAAIwCQMHACABDfIhADANBgkqhkiG9w0BAQsFAAOCAQEAPEPw8ojS lPLFpeDNsqvI6skZ5uBU9zsYCAly4r/2IpKmpznHf0l1+VzZX3Gehi8jWXD52O7X 1j+Y9tCqmffXX72pMeUedLbB42V9/HwNFO9SD+8HhriydRGkD6fc3OeRfXaB5WWT 5lMUbFUZX1gx1XNIGCUjz80Pvfw38gWegUPbOR5JUOoGYusNwjv9yMOIPwgMzQ5y DUIQtwYlTqu/hnObiQP85wVpv+VCtT08+jXRTVrFg3Q1dvCQA7BdpHj+rAmOcWLd RxgOr1BWG7l+rLLw8pkJgv2bVAJmDA0h/oNeY9cYTCWbbueJ1GyH+7kYnyn4abRz Nt3TI96KN68uqw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:45 2024 by rpki-client on console-ams.rpki-client.org