$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer File: ADCB9F9DF56E90B39B5344118194104F46A83702.cer (raw, json) Hash identifier: kvlsbsmvjUBQQATbZ9F9fP90bQPNGUhKe95Dw5ivgok= Subject key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 231B1E9E9EE6990A61CE3AFD83420F6C60C5BEE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 May 2024 12:10:02 +0000 Certificate not after: Tue 20 May 2025 12:15:02 +0000 Subordinate resources: IP: 114.199.96.0/19 IP: 203.153.24.0/21 IP: 2401:9e80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1b:1e:9e:9e:e6:99:0a:61:ce:3a:fd:83:42:0f:6c:60:c5:be:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 12:10:02 2024 GMT Not After : May 20 12:15:02 2025 GMT Subject: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:22:4c:79:3b:60:56:0f:1c:51:c2:39:13: 8b:c7:65:17:77:d1:e8:e1:75:68:70:3c:a1:4f:04: 58:70:c1:0e:5d:26:74:65:39:0d:c5:c5:7a:ff:f9: 64:2e:c3:69:23:73:58:e7:52:5e:58:16:9a:9d:6e: cf:04:83:6e:26:90:37:d1:82:5e:18:90:ba:5b:24: 31:32:e0:57:43:76:f2:35:c5:be:d1:fa:35:db:41: 56:fb:57:0e:09:20:59:f8:4a:3b:ae:9b:9a:45:2b: 13:d4:7e:99:ca:76:84:62:df:7b:76:e2:4d:e4:ea: f5:87:82:56:8b:b3:aa:75:44:38:7a:4d:db:5c:2f: 8d:dd:c1:5d:a1:b0:f0:57:0e:63:d3:93:79:1f:1f: c1:a7:56:5f:0b:2a:29:4b:bd:95:0d:db:23:4f:30: 4d:5b:ea:34:7d:01:29:41:31:33:55:3d:ac:b2:e3: 31:f4:cf:d8:45:75:5c:af:fc:93:e9:8e:58:e9:e6: d2:23:e0:c9:2c:59:7e:5a:d3:85:0e:ed:79:11:2a: 58:4e:3d:d3:81:f9:8f:fc:32:39:44:ab:00:81:7d: d5:25:b7:73:1d:b4:84:63:0f:58:e9:0c:57:5b:fd: d6:96:15:23:3a:6e:ff:01:ef:9a:8f:20:e1:56:59: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/19 203.153.24.0/21 IPv6: 2401:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 8b:33:62:20:aa:70:26:5a:fb:8a:49:81:39:fb:43:98:42:08: 01:ba:a6:c7:71:51:db:dd:e6:0f:18:b8:49:53:b8:d0:5d:b7: ba:56:36:60:e1:29:3b:d4:ef:53:df:f8:36:93:14:72:ef:91: 8a:ba:cf:81:c3:c5:ec:1f:a1:ad:c1:9b:c6:ab:2d:f4:ec:4e: 16:16:c8:03:32:f1:98:a8:18:bc:37:e1:2b:3b:0d:a3:71:c9: e5:90:43:cf:e6:6b:33:56:39:24:bb:ac:69:93:44:6d:fb:d8: 78:40:f9:43:2f:5e:d4:7f:77:4f:ad:42:d9:b3:e5:30:96:b4: 4f:59:23:3e:22:a5:01:d1:4a:ca:ac:d1:59:b6:18:e6:e5:e6: b2:6d:1c:b8:8f:03:4a:d3:b1:f3:12:91:da:95:a2:4b:8f:07: 69:19:8b:10:0b:cc:fc:40:e2:93:a7:2a:57:45:83:b3:16:11: cb:5f:0a:50:5e:3a:62:c8:c9:0c:9a:21:76:6a:3b:99:80:10: 70:05:f7:87:eb:8c:82:b5:bc:9c:a3:bc:ad:3e:c3:bd:20:12: 6d:14:6e:ad:1f:5c:fc:ed:6c:18:69:4a:62:40:00:06:7b:cf: 92:de:59:bd:a7:20:24:ea:47:8f:db:d0:1e:fa:5e:a4:37:b8: 56:c9:bd:2a -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUIxsenp7mmQphzjr9g0IPbGDFvuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTEyMTAwMloX DTI1MDUyMDEyMTUwMlowMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0 NDExODE5NDEwNEY0NkE4MzcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwaIkx5O2BWDxxRwjkTi8dlF3fR6OF1aHA8oU8EWHDBDl0mdGU5DcXFev/5 ZC7DaSNzWOdSXlgWmp1uzwSDbiaQN9GCXhiQulskMTLgV0N28jXFvtH6NdtBVvtX DgkgWfhKO66bmkUrE9R+mcp2hGLfe3biTeTq9YeCVouzqnVEOHpN21wvjd3BXaGw 8FcOY9OTeR8fwadWXwsqKUu9lQ3bI08wTVvqNH0BKUExM1U9rLLjMfTP2EV1XK/8 k+mOWOnm0iPgySxZflrThQ7teREqWE4904H5j/wyOUSrAIF91SW3cx20hGMPWOkM V1v91pYVIzpu/wHvmo8g4VZZPXcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK3Ln531bpCzm1NEEYGUEE9GqDcCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4 LTc4MjYtNDIwMS05ZjliLTFkN2M3NmFhMjRkZC8wL0FEQ0I5RjlERjU2RTkwQjM5 QjUzNDQxMTgxOTQxMDRGNDZBODM3MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAVyx2ADBAPLmRgwDQQCAAIwBwMFACQBnoAwDQYJKoZIhvcNAQELBQADggEBAIsz YiCqcCZa+4pJgTn7Q5hCCAG6psdxUdvd5g8YuElTuNBdt7pWNmDhKTvU71Pf+DaT FHLvkYq6z4HDxewfoa3Bm8arLfTsThYWyAMy8ZioGLw34Ss7DaNxyeWQQ8/mazNW OSS7rGmTRG372HhA+UMvXtR/d0+tQtmz5TCWtE9ZIz4ipQHRSsqs0Vm2GObl5rJt HLiPA0rTsfMSkdqVokuPB2kZixALzPxA4pOnKldFg7MWEctfClBeOmLIyQyaIXZq O5mAEHAF94frjIK1vJyjvK0+w70gEm0Ubq0fXPztbBhpSmJAAAZ7z5LeWb2nICTq R4/b0B76XqQ3uFbJvSo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:53 2024 by rpki-client on console-fra.rpki-client.org