$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer (raw, json) Hash identifier: AnwdD1hCh6kim5oKM2bhGrohfWtbyqpFQA8mtt1N0o8= Subject key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 377A6C3294F5C73260EB43C56E1EBFE40987D14E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Oct 2024 16:38:12 +0000 Certificate not after: Tue 14 Oct 2025 16:43:12 +0000 Subordinate resources: IP: 103.39.70.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7a:6c:32:94:f5:c7:32:60:eb:43:c5:6e:1e:bf:e4:09:87:d1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 15 16:38:12 2024 GMT Not After : Oct 14 16:43:12 2025 GMT Subject: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:2b:fa:99:90:0a:d3:79:92:92:64:68:3e: cc:d9:0d:2e:82:54:45:d7:f9:1c:70:87:6a:9f:4b: 34:d7:81:e6:36:ba:6a:8e:74:6e:7a:9b:ad:4f:b8: 06:72:db:6a:9f:43:dd:e2:6c:03:42:6e:69:b6:cd: f1:c5:6d:7f:9b:1b:80:39:da:28:2f:a2:6d:a2:4b: 6b:8d:1f:80:42:c4:5d:82:e8:14:9d:34:58:2c:61: 7c:6a:6e:99:b1:a1:53:1c:9d:17:26:d2:0b:65:55: bd:ea:79:b0:de:0c:67:c3:b4:91:82:8a:fd:7b:6c: f7:cd:70:11:34:21:bd:38:aa:ae:99:47:ca:f9:7b: 04:9d:fd:40:fa:ef:b5:5d:7f:f3:b4:b6:92:46:91: dd:0e:8f:b6:11:3b:e6:0a:7c:88:85:0f:0f:e6:6f: 83:e0:f9:56:b7:89:75:ff:b0:86:62:b9:c0:5b:d2: 8e:1a:d5:5b:57:ad:38:2e:d3:74:3f:ee:28:fd:17: 83:e3:75:d6:33:23:5e:12:83:b4:38:cd:aa:d3:8e: 47:eb:6a:7b:2e:e7:e3:83:4a:e9:2d:36:13:aa:28: 30:30:c1:1b:01:b8:72:64:e2:0a:d1:02:d6:24:72: 3c:88:3c:3a:8c:f4:53:0a:af:38:01:2f:0f:11:0e: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.70.0/23 Signature Algorithm: sha256WithRSAEncryption 15:df:be:b3:13:bd:79:a8:27:34:88:2c:4d:95:3c:e4:7f:8d: 10:54:61:f6:01:9e:16:49:a0:88:5c:39:2d:fa:06:d0:7b:f1: 60:7f:b9:8c:28:b9:2a:71:eb:89:d6:5f:6f:88:8c:38:0f:88: 5b:82:44:50:21:9d:40:7a:0c:61:95:7f:a2:60:c7:3c:6a:59: 51:03:63:a9:23:4c:4b:5f:9a:ca:a2:11:93:c5:a9:89:59:e4: 47:ac:45:88:9d:28:00:00:72:c1:e6:5f:7f:cf:55:0f:fb:2c: 40:dd:41:c0:3c:aa:20:fb:ef:fa:54:4f:b3:58:92:9d:d2:27: a3:f6:1d:ca:51:05:34:47:ab:f9:d4:d1:f6:0d:4e:75:cd:18: 3b:ec:24:b5:be:a6:48:81:23:b2:d9:85:c5:d9:8a:f2:da:e5: 03:61:f0:f6:27:95:b6:7f:01:a4:31:99:80:b1:cc:ac:b8:ae: a2:bc:a2:47:96:32:86:0a:88:63:8c:23:44:b7:08:52:2d:d6: 66:c3:eb:2d:9c:b3:54:88:33:91:29:87:70:57:55:f3:59:6c: d4:71:80:b8:b1:9d:ed:95:6d:55:c3:72:70:0b:a4:97:63:29: 48:64:9d:13:77:58:22:d8:5c:0a:2e:52:e8:6a:d4:8f:f3:35: f3:9d:56:8b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN3psMpT1xzJg60PFbh6/5AmH0U4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNTE2MzgxMloX DTI1MTAxNDE2NDMxMlowMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJE RDYwREY3REU5MkU5NEY1QUI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlCK/qZkArTeZKSZGg+zNkNLoJURdf5HHCHap9LNNeB5ja6ao50bnqbrU+4 BnLbap9D3eJsA0JuabbN8cVtf5sbgDnaKC+ibaJLa40fgELEXYLoFJ00WCxhfGpu mbGhUxydFybSC2VVvep5sN4MZ8O0kYKK/Xts981wETQhvTiqrplHyvl7BJ39QPrv tV1/87S2kkaR3Q6PthE75gp8iIUPD+Zvg+D5VreJdf+whmK5wFvSjhrVW1etOC7T dD/uKP0Xg+N11jMjXhKDtDjNqtOOR+tqey7n44NK6S02E6ooMDDBGwG4cmTiCtEC 1iRyPIg8Ooz0UwqvOAEvDxEOiFECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/8Rrqj8ZUir1vdYN996S6U9at7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTdkNTQz LWJhZjAtNDM0OC04ODU3LTNkMjYwMWMzYTgwMy8wLzlGRkM0NkJBQTNGMTk1MjJB RjVCREQ2MERGN0RFOTJFOTRGNUFCN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0YwDQYJKoZIhvcNAQELBQADggEBABXfvrMTvXmoJzSILE2VPOR/jRBUYfYB nhZJoIhcOS36BtB78WB/uYwouSpx64nWX2+IjDgPiFuCRFAhnUB6DGGVf6Jgxzxq WVEDY6kjTEtfmsqiEZPFqYlZ5EesRYidKAAAcsHmX3/PVQ/7LEDdQcA8qiD77/pU T7NYkp3SJ6P2HcpRBTRHq/nU0fYNTnXNGDvsJLW+pkiBI7LZhcXZivLa5QNh8PYn lbZ/AaQxmYCxzKy4rqK8okeWMoYKiGOMI0S3CFIt1mbD6y2cs1SIM5Eph3BXVfNZ bNRxgLixne2VbVXDcnALpJdjKUhknRN3WCLYXAouUuhq1I/zNfOdVos= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:09 2025 by rpki-client