$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer (raw, json) Hash identifier: Zh1I/jBCi2oRzB9oHOCWGTnEnAxpA7EI5dtS0X5AKKU= Subject key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 052CAFFA0035E270FA9B09A5B3B006D858CA906E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 08:18:35 +0000 Certificate not after: Mon 30 Jun 2025 08:23:35 +0000 Subordinate resources: IP: 43.252.104.0/22 IP: 103.11.186.0/23 IP: 103.28.112.0/22 IP: 124.40.248.0/21 IP: 202.56.164.0/22 IP: 203.217.132.0/23 IP: 2001:df0:a3::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2c:af:fa:00:35:e2:70:fa:9b:09:a5:b3:b0:06:d8:58:ca:90:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 08:18:35 2024 GMT Not After : Jun 30 08:23:35 2025 GMT Subject: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:fb:77:52:f2:bb:96:af:37:2f:71:53:97: 25:1d:2c:70:b2:9a:91:cc:d7:de:45:12:3c:f3:48: 83:c6:77:b3:90:7f:a8:d5:bd:b4:28:cf:6b:76:bf: 24:a7:b5:9e:b8:0f:05:55:b0:42:2f:a2:36:c5:a5: 87:5c:ef:07:4a:77:3c:3f:d6:1e:98:2d:80:10:9c: 1e:24:52:2f:b4:6e:86:89:9b:be:09:a8:29:92:63: 23:a7:f1:51:6c:f7:76:e7:6d:d6:5f:ca:9c:d7:60: 7c:ef:a4:fd:5f:a9:6a:40:02:fb:de:b9:95:df:9e: d2:37:dd:09:94:22:3a:19:dc:12:20:04:4e:39:48: 4d:22:17:7b:d6:8f:10:e3:74:c1:b2:1c:0c:41:d9: 2b:c0:ce:ba:3a:d1:86:e5:c4:61:ba:0d:2a:19:d9: 18:b9:14:54:64:06:91:8b:96:b3:f9:76:a0:17:ce: a2:da:a8:9d:8c:b4:ac:69:3c:fd:f2:96:5a:ed:f3: ff:f2:2c:09:50:9d:29:0a:0b:87:3f:35:3d:fa:08: 92:55:f7:f3:ee:7c:d8:4c:cf:1d:ed:64:02:90:2f: 11:09:ea:a4:41:ff:c2:b0:e2:33:11:d0:a5:b6:25: 18:ac:03:cb:c7:50:7d:93:28:0b:35:43:7e:10:46: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.104.0/22 103.11.186.0/23 103.28.112.0/22 124.40.248.0/21 202.56.164.0/22 203.217.132.0/23 IPv6: 2001:df0:a3::/48 Signature Algorithm: sha256WithRSAEncryption 20:c7:9f:13:c0:43:ea:14:fa:71:44:43:c8:64:d3:8a:79:46: 1c:01:41:16:2c:ae:b3:c5:e0:da:b1:cb:d9:52:96:66:91:7f: 94:c4:e0:2f:bf:6c:bc:52:80:8d:03:3c:2c:81:d0:82:ad:82: e3:03:40:6d:5d:ea:3b:ce:76:fd:79:a2:cc:59:5b:0c:be:12: 53:29:d7:ee:cb:35:dd:d6:db:36:d5:bf:42:ac:27:14:4a:de: b3:fb:19:56:e8:a6:52:01:9c:76:62:9f:5a:6b:b2:8f:c3:9e: 85:a9:f5:c6:c2:69:6a:40:d2:c2:77:6d:c9:fe:60:8b:c5:8a: b2:3d:65:f4:fd:74:e3:fe:1a:ca:20:31:48:c6:ee:8f:4c:d8: 15:ad:90:57:97:00:e0:da:28:7f:75:fc:1c:ed:dd:ad:47:91: b0:e6:5b:34:64:f6:04:18:bc:91:e7:6d:77:99:81:e5:89:16: c3:48:a5:ad:c6:b3:1d:ee:2e:29:66:36:bc:c1:9e:c5:3b:e2: 46:8d:24:75:cd:97:1b:32:5e:16:52:9b:25:20:ef:a0:db:69: 89:59:e5:24:e2:91:7b:a4:9f:35:d1:11:6c:b3:66:13:c1:11: a8:2e:0d:ef:47:12:14:b7:8b:1f:2e:d2:87:30:5e:f9:3e:ce: 1f:4b:bc:63 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIUBSyv+gA14nD6mwmls7AG2FjKkG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA4MTgzNVoX DTI1MDYzMDA4MjMzNVowMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlE OEZCODU3RDIzREM2MTQyRTVGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAW+3dS8ruWrzcvcVOXJR0scLKakczX3kUSPPNIg8Z3s5B/qNW9tCjPa3a/ JKe1nrgPBVWwQi+iNsWlh1zvB0p3PD/WHpgtgBCcHiRSL7RuhombvgmoKZJjI6fx UWz3dudt1l/KnNdgfO+k/V+pakAC+965ld+e0jfdCZQiOhncEiAETjlITSIXe9aP EON0wbIcDEHZK8DOujrRhuXEYboNKhnZGLkUVGQGkYuWs/l2oBfOotqonYy0rGk8 /fKWWu3z//IsCVCdKQoLhz81PfoIklX38+582EzPHe1kApAvEQnqpEH/wrDiMxHQ pbYlGKwDy8dQfZMoCzVDfhBGbbECAwEAAaOCAucwggLjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNJaBKDk5S/0ItnY+4V9I9xhQuX9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOTVjMTlj LTMyNjItNDhjNy1hZjAyLTM3YTgzNWQwYTc3OS8wL0QyNUEwNEEwRTRFNTJGRjQy MkQ5RDhGQjg1N0QyM0RDNjE0MkU1RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUHAQcBAf8EPzA9MCoEAgABMCQD BAIr/GgDBAFnC7oDBAJnHHADBAN8KPgDBALKOKQDBAHL2YQwDwQCAAIwCQMHACAB DfAAozANBgkqhkiG9w0BAQsFAAOCAQEAIMefE8BD6hT6cURDyGTTinlGHAFBFiyu s8Xg2rHL2VKWZpF/lMTgL79svFKAjQM8LIHQgq2C4wNAbV3qO852/XmizFlbDL4S UynX7ss13dbbNtW/QqwnFEres/sZVuimUgGcdmKfWmuyj8Oehan1xsJpakDSwndt yf5gi8WKsj1l9P104/4ayiAxSMbuj0zYFa2QV5cA4Noof3X8HO3drUeRsOZbNGT2 BBi8kedtd5mB5YkWw0ilrcazHe4uKWY2vMGexTviRo0kdc2XGzJeFlKbJSDvoNtp iVnlJOKRe6SfNdERbLNmE8ERqC4N70cSFLeLHy7ShzBe+T7OH0u8Yw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:31 2024 by rpki-client on console-fra.rpki-client.org