$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer (raw, json) Hash identifier: eZtBwU2/4ARo6lzd/m2qxZ/42CKDobl5BqVa8LJKEeA= Subject key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 61B5CAADDF586FF2DA2A9AF685BB58B4190CACBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Nov 2023 10:07:17 +0000 Certificate not after: Tue 12 Nov 2024 10:12:17 +0000 Subordinate resources: IP: 103.39.70.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b5:ca:ad:df:58:6f:f2:da:2a:9a:f6:85:bb:58:b4:19:0c:ac:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 10:07:17 2023 GMT Not After : Nov 12 10:12:17 2024 GMT Subject: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:2b:fa:99:90:0a:d3:79:92:92:64:68:3e: cc:d9:0d:2e:82:54:45:d7:f9:1c:70:87:6a:9f:4b: 34:d7:81:e6:36:ba:6a:8e:74:6e:7a:9b:ad:4f:b8: 06:72:db:6a:9f:43:dd:e2:6c:03:42:6e:69:b6:cd: f1:c5:6d:7f:9b:1b:80:39:da:28:2f:a2:6d:a2:4b: 6b:8d:1f:80:42:c4:5d:82:e8:14:9d:34:58:2c:61: 7c:6a:6e:99:b1:a1:53:1c:9d:17:26:d2:0b:65:55: bd:ea:79:b0:de:0c:67:c3:b4:91:82:8a:fd:7b:6c: f7:cd:70:11:34:21:bd:38:aa:ae:99:47:ca:f9:7b: 04:9d:fd:40:fa:ef:b5:5d:7f:f3:b4:b6:92:46:91: dd:0e:8f:b6:11:3b:e6:0a:7c:88:85:0f:0f:e6:6f: 83:e0:f9:56:b7:89:75:ff:b0:86:62:b9:c0:5b:d2: 8e:1a:d5:5b:57:ad:38:2e:d3:74:3f:ee:28:fd:17: 83:e3:75:d6:33:23:5e:12:83:b4:38:cd:aa:d3:8e: 47:eb:6a:7b:2e:e7:e3:83:4a:e9:2d:36:13:aa:28: 30:30:c1:1b:01:b8:72:64:e2:0a:d1:02:d6:24:72: 3c:88:3c:3a:8c:f4:53:0a:af:38:01:2f:0f:11:0e: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.70.0/23 Signature Algorithm: sha256WithRSAEncryption 11:c3:f0:90:e5:d0:c6:fe:a7:bf:09:a3:98:0c:54:e5:b4:e8: cb:89:c4:5b:90:66:c8:13:2f:ad:60:67:76:91:2a:9f:fb:96: 72:2b:ac:d5:01:a6:25:b7:82:1d:56:7d:de:af:bc:6b:c0:67: 52:09:f5:6d:24:9e:df:55:33:a2:f3:c5:ec:c5:5f:69:b3:36: cf:46:dc:32:ec:ca:68:7e:eb:74:8c:ca:85:40:82:dc:18:37: 92:b2:ae:40:3a:10:73:f1:1f:0d:5e:f8:d0:7a:00:5d:fd:37: d6:95:79:63:91:25:dc:14:eb:12:f2:69:47:08:f4:c4:4f:32: 11:82:21:8a:e0:78:33:03:9c:cb:fc:2d:9e:d5:ac:96:3d:76: 1f:87:9a:e3:ae:b3:c4:b1:17:99:55:c8:93:bd:e2:54:6c:34: d2:1f:ce:d2:57:62:54:a8:66:d6:2b:9c:24:17:87:bf:f7:e1: 08:0c:05:fc:be:8f:8e:4e:b7:7b:09:cd:aa:ba:7f:c1:2c:30: 8b:5a:09:f4:cb:89:12:02:fb:21:e2:eb:3a:35:5f:50:6d:ee: 99:8d:79:c5:6d:d5:7a:22:65:e6:74:34:a2:46:03:72:25:76: 4b:80:ac:63:d3:0c:cf:b2:f1:13:9d:f8:44:be:ac:74:43:d8: 51:81:07:02 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYbXKrd9Yb/LaKpr2hbtYtBkMrL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNDEwMDcxN1oX DTI0MTExMjEwMTIxN1owMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJE RDYwREY3REU5MkU5NEY1QUI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlCK/qZkArTeZKSZGg+zNkNLoJURdf5HHCHap9LNNeB5ja6ao50bnqbrU+4 BnLbap9D3eJsA0JuabbN8cVtf5sbgDnaKC+ibaJLa40fgELEXYLoFJ00WCxhfGpu mbGhUxydFybSC2VVvep5sN4MZ8O0kYKK/Xts981wETQhvTiqrplHyvl7BJ39QPrv tV1/87S2kkaR3Q6PthE75gp8iIUPD+Zvg+D5VreJdf+whmK5wFvSjhrVW1etOC7T dD/uKP0Xg+N11jMjXhKDtDjNqtOOR+tqey7n44NK6S02E6ooMDDBGwG4cmTiCtEC 1iRyPIg8Ooz0UwqvOAEvDxEOiFECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/8Rrqj8ZUir1vdYN996S6U9at7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTdkNTQz LWJhZjAtNDM0OC04ODU3LTNkMjYwMWMzYTgwMy8wLzlGRkM0NkJBQTNGMTk1MjJB RjVCREQ2MERGN0RFOTJFOTRGNUFCN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0YwDQYJKoZIhvcNAQELBQADggEBABHD8JDl0Mb+p78Jo5gMVOW06MuJxFuQ ZsgTL61gZ3aRKp/7lnIrrNUBpiW3gh1Wfd6vvGvAZ1IJ9W0knt9VM6LzxezFX2mz Ns9G3DLsymh+63SMyoVAgtwYN5KyrkA6EHPxHw1e+NB6AF39N9aVeWORJdwU6xLy aUcI9MRPMhGCIYrgeDMDnMv8LZ7VrJY9dh+HmuOus8SxF5lVyJO94lRsNNIfztJX YlSoZtYrnCQXh7/34QgMBfy+j45Ot3sJzaq6f8EsMItaCfTLiRIC+yHi6zo1X1Bt 7pmNecVt1XoiZeZ0NKJGA3IldkuArGPTDM+y8ROd+ES+rHRD2FGBBwI= -----END CERTIFICATE-----Generated at Thu May 9 00:37:03 2024 by rpki-client on console-fra.rpki-client.org