$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer File: ADCB9F9DF56E90B39B5344118194104F46A83702.cer (raw, json) Hash identifier: 8GPnO54PJqI0ftHSQAWEAwNyGKILL7WEH0Zi2+JSfNA= Subject key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BAD042C8EA2BB277370233848190420B5652D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Jun 2023 07:10:49 +0000 Certificate not after: Tue 18 Jun 2024 07:15:49 +0000 Subordinate resources: IP: 114.199.96.0/19 IP: 203.153.24.0/21 IP: 2401:9e80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ad:04:2c:8e:a2:bb:27:73:70:23:38:48:19:04:20:b5:65:2d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 20 07:10:49 2023 GMT Not After : Jun 18 07:15:49 2024 GMT Subject: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:22:4c:79:3b:60:56:0f:1c:51:c2:39:13: 8b:c7:65:17:77:d1:e8:e1:75:68:70:3c:a1:4f:04: 58:70:c1:0e:5d:26:74:65:39:0d:c5:c5:7a:ff:f9: 64:2e:c3:69:23:73:58:e7:52:5e:58:16:9a:9d:6e: cf:04:83:6e:26:90:37:d1:82:5e:18:90:ba:5b:24: 31:32:e0:57:43:76:f2:35:c5:be:d1:fa:35:db:41: 56:fb:57:0e:09:20:59:f8:4a:3b:ae:9b:9a:45:2b: 13:d4:7e:99:ca:76:84:62:df:7b:76:e2:4d:e4:ea: f5:87:82:56:8b:b3:aa:75:44:38:7a:4d:db:5c:2f: 8d:dd:c1:5d:a1:b0:f0:57:0e:63:d3:93:79:1f:1f: c1:a7:56:5f:0b:2a:29:4b:bd:95:0d:db:23:4f:30: 4d:5b:ea:34:7d:01:29:41:31:33:55:3d:ac:b2:e3: 31:f4:cf:d8:45:75:5c:af:fc:93:e9:8e:58:e9:e6: d2:23:e0:c9:2c:59:7e:5a:d3:85:0e:ed:79:11:2a: 58:4e:3d:d3:81:f9:8f:fc:32:39:44:ab:00:81:7d: d5:25:b7:73:1d:b4:84:63:0f:58:e9:0c:57:5b:fd: d6:96:15:23:3a:6e:ff:01:ef:9a:8f:20:e1:56:59: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/19 203.153.24.0/21 IPv6: 2401:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 67:0b:0f:47:52:08:73:a0:15:e3:d5:2c:87:8c:77:78:93:86: c4:39:66:cc:9d:de:f3:21:eb:dd:13:c1:9e:52:b1:11:4b:b8: a5:b0:89:fa:89:82:8b:94:d2:b4:75:40:ec:66:0f:69:a7:77: 9f:7e:87:a9:c3:eb:1c:af:e7:fc:69:5f:8d:d0:1c:8f:9a:a3: 56:ef:a6:6f:24:f8:28:d3:ce:9d:7c:e5:33:0c:df:f1:6e:9c: dc:c4:1b:35:f8:2f:e4:75:0e:45:2e:b7:3d:89:b4:de:ac:b1: 3e:df:91:cb:5c:16:f8:bb:ed:6a:98:39:aa:d0:91:df:05:36: da:39:f3:3a:b5:7a:a1:10:77:c6:b5:49:e1:5e:72:99:f3:be: 1d:b8:d2:fb:4e:25:01:05:89:6d:ae:bb:88:5a:29:a2:39:88: f0:aa:6b:91:8b:93:6a:85:04:a4:3c:3c:de:e4:2c:f5:6a:11: 1c:6e:bb:2a:36:ce:ef:62:f3:6c:ac:78:88:87:f5:e1:cf:ac: ec:c3:d9:7f:54:15:9c:25:e8:e9:94:96:b9:71:18:3c:21:96: 2c:04:bb:33:f6:a9:c8:b6:2a:d6:8f:f3:6a:c2:69:af:56:5c: 98:c6:26:56:1d:03:2e:99:21:31:d7:2e:f1:b2:29:e6:20:97: 74:75:79:d6 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUG60ELI6iuydzcCM4SBkEILVlLYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMDA3MTA0OVoX DTI0MDYxODA3MTU0OVowMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0 NDExODE5NDEwNEY0NkE4MzcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwaIkx5O2BWDxxRwjkTi8dlF3fR6OF1aHA8oU8EWHDBDl0mdGU5DcXFev/5 ZC7DaSNzWOdSXlgWmp1uzwSDbiaQN9GCXhiQulskMTLgV0N28jXFvtH6NdtBVvtX DgkgWfhKO66bmkUrE9R+mcp2hGLfe3biTeTq9YeCVouzqnVEOHpN21wvjd3BXaGw 8FcOY9OTeR8fwadWXwsqKUu9lQ3bI08wTVvqNH0BKUExM1U9rLLjMfTP2EV1XK/8 k+mOWOnm0iPgySxZflrThQ7teREqWE4904H5j/wyOUSrAIF91SW3cx20hGMPWOkM V1v91pYVIzpu/wHvmo8g4VZZPXcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK3Ln531bpCzm1NEEYGUEE9GqDcCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4 LTc4MjYtNDIwMS05ZjliLTFkN2M3NmFhMjRkZC8wL0FEQ0I5RjlERjU2RTkwQjM5 QjUzNDQxMTgxOTQxMDRGNDZBODM3MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAVyx2ADBAPLmRgwDQQCAAIwBwMFACQBnoAwDQYJKoZIhvcNAQELBQADggEBAGcL D0dSCHOgFePVLIeMd3iThsQ5Zsyd3vMh690TwZ5SsRFLuKWwifqJgouU0rR1QOxm D2mnd59+h6nD6xyv5/xpX43QHI+ao1bvpm8k+CjTzp185TMM3/FunNzEGzX4L+R1 DkUutz2JtN6ssT7fkctcFvi77WqYOarQkd8FNto58zq1eqEQd8a1SeFecpnzvh24 0vtOJQEFiW2uu4haKaI5iPCqa5GLk2qFBKQ8PN7kLPVqERxuuyo2zu9i82yseIiH 9eHPrOzD2X9UFZwl6OmUlrlxGDwhliwEuzP2qci2KtaP82rCaa9WXJjGJlYdAy6Z ITHXLvGyKeYgl3R1edY= -----END CERTIFICATE-----Generated at Wed May 8 10:06:51 2024 by rpki-client on console-ams.rpki-client.org