$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer (raw, json) Hash identifier: 1shKRsnpJArA9fsXOpgkBEr+hbEKR48E9nqCvywk82Y= Subject key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 474583A223BC0F14D5D5F5736EB5EB299934CDDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft caRepository: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Sep 2024 08:08:24 +0000 Certificate not after: Fri 12 Sep 2025 08:13:24 +0000 Subordinate resources: IP: 2001:df4:3a40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:45:83:a2:23:bc:0f:14:d5:d5:f5:73:6e:b5:eb:29:99:34:cd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 08:08:24 2024 GMT Not After : Sep 12 08:13:24 2025 GMT Subject: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:5e:99:f7:64:a2:a2:21:db:cf:9f:9e:3a: 95:68:26:73:14:d3:01:48:f7:2e:49:cd:0f:a8:d2: 99:48:04:ec:88:ee:66:b2:f7:63:79:7f:7c:4f:32: bc:3c:ab:99:43:7a:bb:f7:69:bf:e5:1a:c9:e9:d6: 1e:24:80:d5:ad:84:2c:09:0a:bd:a1:08:bf:8c:d3: 30:29:a7:a6:36:7c:92:7a:c8:f3:29:a7:37:14:85: 72:06:6d:c0:71:fd:fb:d3:38:a4:c3:2c:72:30:09: 3f:ae:7b:91:5c:1c:ef:6e:c8:bf:32:93:e4:1d:9e: bb:a5:5e:a5:c7:cd:a5:5d:69:b0:61:76:c2:32:8a: 37:1c:ce:f8:b4:d9:d1:5c:b5:5a:ed:0c:b8:09:a4: 59:5e:31:c5:24:48:a2:c8:7d:79:29:e6:f8:09:9e: f0:3a:51:aa:8e:50:fd:d8:1a:fb:91:79:c7:01:1c: ab:75:13:9f:d4:52:a6:e7:1d:ed:67:7b:24:b0:6c: 31:bc:db:c1:a2:c1:9f:8b:f8:e3:e2:c1:6e:41:63: 32:dc:7a:c7:2e:bb:1f:db:73:31:96:bf:37:a0:9b: 83:d1:6c:8c:c8:72:98:6c:c1:f3:6d:0c:84:54:a4: 38:bb:8f:d6:ef:09:d0:01:c9:ea:c0:d5:c1:33:9b: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:3a40::/48 Signature Algorithm: sha256WithRSAEncryption 57:9d:55:db:ac:23:96:31:b0:4a:e0:a0:52:3a:d2:60:f9:30: 4a:8e:38:01:04:c2:c6:13:49:9f:a3:be:3b:d2:64:b1:f1:47: 96:84:a6:79:c9:d1:7b:da:61:06:b0:ea:dd:b5:29:ac:7d:b3: a4:e7:f4:f3:95:68:d8:ae:f5:a6:dc:39:c9:21:cd:80:c2:71: 23:8d:e9:02:74:a9:a4:fc:38:8d:86:35:a6:f5:28:ff:e2:62: 4e:dc:52:dd:04:03:37:62:73:be:35:61:c8:f6:bc:e4:e9:7c: b5:3c:01:b8:d3:9e:4b:eb:da:f5:5d:14:3e:c6:7a:18:7d:34: 07:79:af:4d:1e:a2:de:f0:29:d9:80:2a:2b:5e:14:5a:9c:c2: 09:1c:87:46:77:62:05:79:0a:0f:a2:bf:fd:4c:d7:bd:30:8c: 37:9f:e4:e0:05:f1:29:83:b3:8e:bc:4d:b7:d2:04:74:f4:eb: 0e:23:ac:28:5d:52:f0:b8:30:b0:ad:5a:32:c0:59:60:80:3a: 0f:10:27:ac:19:c4:59:db:77:07:0c:5e:9b:ca:85:8f:66:70: 2f:b4:0c:69:bc:e9:ef:d1:b5:03:c4:b4:1f:2a:50:b4:71:07: e7:d5:7c:ae:61:0f:46:8f:87:20:d5:da:cb:79:4d:7c:50:4c: d1:53:af:4f -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUR0WDoiO8DxTV1fVzbrXrKZk0zdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMzA4MDgyNFoX DTI1MDkxMjA4MTMyNFowMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdF NUIwRjg4N0U4OEY5OUE2MzA2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrIXpn3ZKKiIdvPn546lWgmcxTTAUj3LknND6jSmUgE7IjuZrL3Y3l/fE8y vDyrmUN6u/dpv+UayenWHiSA1a2ELAkKvaEIv4zTMCmnpjZ8knrI8ymnNxSFcgZt wHH9+9M4pMMscjAJP657kVwc727IvzKT5B2eu6VepcfNpV1psGF2wjKKNxzO+LTZ 0Vy1Wu0MuAmkWV4xxSRIosh9eSnm+Ame8DpRqo5Q/dga+5F5xwEcq3UTn9RSpucd 7Wd7JLBsMbzbwaLBn4v44+LBbkFjMtx6xy67H9tzMZa/N6Cbg9FsjMhymGzB820M hFSkOLuP1u8J0AHJ6sDVwTObGzcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM+km45dmgi3oBflsPiH6I+ZpjBsMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTY1MTll LWFiNjEtNDk0My1iM2U4LTEwYmRkNjA4MGZkYS8xL0NGQTQ5QjhFNUQ5QTA4QjdB MDE3RTVCMEY4ODdFODhGOTlBNjMwNkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30OkAwDQYJKoZIhvcNAQELBQADggEBAFedVdusI5YxsErgoFI60mD5MEqO OAEEwsYTSZ+jvjvSZLHxR5aEpnnJ0XvaYQaw6t21Kax9s6Tn9POVaNiu9abcOckh zYDCcSON6QJ0qaT8OI2GNab1KP/iYk7cUt0EAzdic741Ycj2vOTpfLU8AbjTnkvr 2vVdFD7Gehh9NAd5r00eot7wKdmAKiteFFqcwgkch0Z3YgV5Cg+iv/1M170wjDef 5OAF8SmDs468TbfSBHT06w4jrChdUvC4MLCtWjLAWWCAOg8QJ6wZxFnbdwcMXpvK hY9mcC+0DGm86e/RtQPEtB8qULRxB+fVfK5hD0aPhyDV2st5TXxQTNFTr08= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org