$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer (raw, json) Hash identifier: aKmOEXydAmct1a4QvYk/dzpLTufZqgLC6YWKllhCMJo= Subject key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20ACAC3FAB56CF7D95AE2FF278CB79370E502E9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Oct 2024 12:50:04 +0000 Certificate not after: Wed 01 Oct 2025 12:55:04 +0000 Subordinate resources: IP: 103.140.74.0/23 IP: 2404:f9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ac:ac:3f:ab:56:cf:7d:95:ae:2f:f2:78:cb:79:37:0e:50:2e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 2 12:50:04 2024 GMT Not After : Oct 1 12:55:04 2025 GMT Subject: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:e5:77:aa:d0:a8:84:a9:d0:37:bf:12:5f: ee:ee:fe:9b:15:16:f0:a9:c7:81:2a:79:69:35:ea: cb:d1:26:ed:9f:f5:ff:af:ee:66:b2:53:42:6a:b7: 50:c1:43:e5:09:dd:90:8e:44:53:fc:86:10:c9:b3: 94:7c:7b:14:f0:ae:d3:6a:94:69:1a:04:de:dd:58: 88:fb:ab:6d:05:a2:30:7c:e1:3c:cb:3f:fc:74:5c: bf:35:f3:90:d2:05:bc:65:4c:b3:f8:7d:d4:6a:2c: 7b:1a:5e:c8:21:1a:5e:6f:42:18:2f:33:cf:54:28: 77:04:bb:1c:fc:02:7e:44:56:c4:de:43:55:e4:6e: 74:ce:be:92:bd:3a:b8:d3:a1:54:a1:d4:16:40:85: 9d:84:2a:a9:c6:48:66:83:fd:eb:15:2c:66:7d:3d: 91:b9:e0:48:d5:ec:78:9f:46:b2:30:16:4f:4c:ff: dc:dc:82:30:f1:27:09:f9:76:c2:7d:95:9c:ca:3b: 68:37:06:92:60:c4:9a:ef:7f:1f:3f:8b:8f:fe:98: 13:62:31:9c:70:dc:17:67:33:94:06:6c:74:47:82: 48:95:55:d6:e8:77:23:f1:e5:c3:6a:bc:7c:ff:ad: 3b:b5:07:0a:31:fe:93:54:42:c7:39:f7:42:9a:1b: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.74.0/23 IPv6: 2404:f9c0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:e1:80:4e:b9:e1:f6:b0:a7:64:26:a0:58:86:4c:e0:02:3e: 49:67:df:e0:1b:37:56:42:ab:87:f9:be:0a:a7:5e:2e:b1:97: e5:b2:ce:0c:a9:f4:7f:dd:a2:52:00:e9:4c:54:ae:e6:16:60: 11:42:fb:8b:44:79:7b:97:07:67:d7:1e:0a:75:dc:b9:80:7a: f4:72:f1:b8:90:91:e8:ef:f8:a1:31:f8:e0:2d:8d:cc:8c:b0: 2f:77:44:3c:ea:04:e3:33:69:13:0f:dc:24:22:3b:3a:89:e6: 20:86:52:ce:f7:62:fe:9d:b0:9c:0b:7b:ec:89:49:e5:e2:de: 96:35:7c:00:0b:30:d8:ba:64:85:77:74:be:23:58:b7:f5:97: 1a:73:8f:15:e2:c5:03:79:d1:ee:94:6c:31:49:cb:25:83:ce: c7:f5:be:b7:f7:be:37:6f:42:51:5d:96:57:09:4a:6e:58:59: c3:fc:14:bd:00:73:d2:b8:25:70:56:cf:6e:23:9a:6e:e4:89: c9:a1:1c:0a:87:9b:45:60:83:a6:0c:3a:75:eb:42:18:c7:b2: 8a:23:c3:be:50:f4:54:49:e9:c0:47:30:ef:3f:c9:a4:e2:05: fc:9b:a6:92:6c:38:80:da:40:d3:4a:13:ef:c3:b1:5c:2e:d8: 2a:3e:4c:e4 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUIKysP6tWz32Vri/yeMt5Nw5QLpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMjEyNTAwNFoX DTI1MTAwMTEyNTUwNFowMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMx MUEzQkI2MjRBNUMzMEIzNDVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMES5Xeq0KiEqdA3vxJf7u7+mxUW8KnHgSp5aTXqy9Em7Z/1/6/uZrJTQmq3 UMFD5QndkI5EU/yGEMmzlHx7FPCu02qUaRoE3t1YiPurbQWiMHzhPMs//HRcvzXz kNIFvGVMs/h91GosexpeyCEaXm9CGC8zz1QodwS7HPwCfkRWxN5DVeRudM6+kr06 uNOhVKHUFkCFnYQqqcZIZoP96xUsZn09kbngSNXseJ9GsjAWT0z/3NyCMPEnCfl2 wn2VnMo7aDcGkmDEmu9/Hz+Lj/6YE2IxnHDcF2czlAZsdEeCSJVV1uh3I/Hlw2q8 fP+tO7UHCjH+k1RCxzn3QpobFd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMz8SWx7F18ZyfMRo7tiSlwws0X0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzODdlODVk LWIxODUtNDMzNC04MDFiLTQ5YzhjOGI5MTg0NC8wL0NDRkM0OTZDN0IxNzVGMTlD OUYzMTFBM0JCNjI0QTVDMzBCMzQ1RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjEowDQQCAAIwBwMFACQE+cAwDQYJKoZIhvcNAQELBQADggEBAE3hgE654faw p2QmoFiGTOACPkln3+AbN1ZCq4f5vgqnXi6xl+Wyzgyp9H/dolIA6UxUruYWYBFC +4tEeXuXB2fXHgp13LmAevRy8biQkejv+KEx+OAtjcyMsC93RDzqBOMzaRMP3CQi OzqJ5iCGUs73Yv6dsJwLe+yJSeXi3pY1fAALMNi6ZIV3dL4jWLf1lxpzjxXixQN5 0e6UbDFJyyWDzsf1vrf3vjdvQlFdllcJSm5YWcP8FL0Ac9K4JXBWz24jmm7kicmh HAqHm0Vgg6YMOnXrQhjHsoojw75Q9FRJ6cBHMO8/yaTiBfybppJsOIDaQNNKE+/D sVwu2Co+TOQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org