$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer (raw, json) Hash identifier: j0AIPts6gv8w8/2RiMyLR42gAeSgXZxZlz7/iowmUfM= Subject key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D826421986F8540CE464A9FFA6184FB7A7BE651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft caRepository: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 19:47:04 +0000 Certificate not after: Mon 30 Jun 2025 19:52:04 +0000 Subordinate resources: IP: 103.219.248.0/22 IP: 103.235.72.0/22 IP: 2001:df2:5a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:64:21:98:6f:85:40:ce:46:4a:9f:fa:61:84:fb:7a:7b:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 19:47:04 2024 GMT Not After : Jun 30 19:52:04 2025 GMT Subject: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:8d:fc:2b:74:d6:cf:97:de:42:c3:da:99: 10:c3:9f:ba:54:a8:18:54:93:68:e9:1f:62:79:68: 1e:62:88:22:99:b9:22:6d:5c:a9:75:de:53:9e:a8: 41:57:68:ac:cf:40:90:23:21:db:30:a4:3f:2f:66: d1:fa:87:6d:40:00:68:99:7b:b9:60:7e:82:ed:25: f7:ce:ec:56:ad:3e:db:6c:26:93:cb:39:35:4c:80: 2b:5e:35:34:0c:d1:a3:31:93:6c:29:93:b3:17:00: ed:03:1e:5e:e7:d2:72:6f:f7:3b:8a:2e:b3:0e:28: 4e:89:e2:58:66:94:62:3a:05:08:6c:af:70:44:36: 34:b0:3e:48:0d:6e:39:7b:17:77:6d:c5:22:ca:45: 68:fe:01:7a:dc:46:36:c5:a7:eb:7e:24:6f:e8:de: 06:15:6c:24:04:64:7f:50:8f:1c:09:5c:dd:5d:f3: 4a:70:b7:c7:32:6f:ed:8e:bb:85:e7:16:d4:1b:87: 16:2e:5d:69:b3:4b:ea:88:e2:3d:46:68:fb:a9:52: f5:dd:e3:68:33:29:2f:af:f3:15:c6:ff:46:68:f6: b6:64:9e:f0:b3:a9:8c:cb:84:2b:6b:14:48:df:3e: 50:66:07:64:30:ef:3a:47:7e:78:96:16:53:3f:25: 88:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.248.0/22 103.235.72.0/22 IPv6: 2001:df2:5a00::/48 Signature Algorithm: sha256WithRSAEncryption 7c:32:2a:04:68:57:09:0f:c6:ac:ac:4f:30:b2:74:30:d4:38: 70:7d:34:cb:37:fb:f0:5a:91:6a:1d:dd:60:14:b2:c0:4b:d1: 38:75:15:97:25:d3:b2:1f:75:33:b9:12:ca:60:73:af:19:9b: ff:1a:a7:1d:bd:cc:44:12:c4:b6:fe:3c:18:96:43:a8:86:18: b3:93:e6:72:b8:03:e3:d2:ca:c0:b0:75:73:18:4f:0b:4e:a3: f5:7a:79:da:ee:51:6c:20:68:8c:63:fa:e3:70:a9:dd:5f:c1: 74:fc:c9:10:9e:cb:4d:a2:6d:9a:79:32:f7:c6:71:78:01:6a: 26:b2:b7:09:2f:c3:74:c2:2e:3b:71:73:97:c3:b7:16:72:2d: 99:64:e1:8c:1d:2d:f0:a2:a7:d2:18:4c:cb:ac:58:98:ba:78: d4:06:69:67:03:9d:a5:85:50:d3:3e:01:b0:94:b6:15:e2:ab: 1c:a5:4f:56:ce:7e:ef:3b:8d:01:82:4b:e0:94:de:f1:19:a1: c9:17:48:48:75:49:0b:c0:97:ae:53:b8:53:1b:fe:a3:cf:c1: 57:28:30:5f:e6:0f:0f:ff:f1:c4:2e:df:cc:4c:44:41:6a:1b: 50:ef:ee:02:67:a7:d6:c2:9d:e2:eb:38:2d:b8:b9:5e:66:df: 52:c0:d4:1b -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUDYJkIZhvhUDORkqf+mGE+3p75lEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE5NDcwNFoX DTI1MDYzMDE5NTIwNFowMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2 Q0VEQkFGMEI2QTE4NkNGNTgyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsbjfwrdNbPl95Cw9qZEMOfulSoGFSTaOkfYnloHmKIIpm5Im1cqXXeU56o QVdorM9AkCMh2zCkPy9m0fqHbUAAaJl7uWB+gu0l987sVq0+22wmk8s5NUyAK141 NAzRozGTbCmTsxcA7QMeXufScm/3O4ousw4oToniWGaUYjoFCGyvcEQ2NLA+SA1u OXsXd23FIspFaP4BetxGNsWn634kb+jeBhVsJARkf1CPHAlc3V3zSnC3xzJv7Y67 hecW1BuHFi5dabNL6ojiPUZo+6lS9d3jaDMpL6/zFcb/Rmj2tmSe8LOpjMuEK2sU SN8+UGYHZDDvOkd+eJYWUz8liA8CAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnNQEdL3QwHB3Zs7brwtqGGz1gvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRk LWE0OWEtNGM4Zi1hNzM1LWVmOTZjMzNhYjI5Zi8wL0Q5Q0Q0MDQ3NEJERDBDMDcw Nzc2NkNFREJBRjBCNkExODZDRjU4MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJn2/gDBAJn60gwDwQCAAIwCQMHACABDfJaADANBgkqhkiG9w0BAQsFAAOCAQEA fDIqBGhXCQ/GrKxPMLJ0MNQ4cH00yzf78FqRah3dYBSywEvROHUVlyXTsh91M7kS ymBzrxmb/xqnHb3MRBLEtv48GJZDqIYYs5PmcrgD49LKwLB1cxhPC06j9Xp52u5R bCBojGP643Cp3V/BdPzJEJ7LTaJtmnky98ZxeAFqJrK3CS/DdMIuO3Fzl8O3FnIt mWThjB0t8KKn0hhMy6xYmLp41AZpZwOdpYVQ0z4BsJS2FeKrHKVPVs5+7zuNAYJL 4JTe8RmhyRdISHVJC8CXrlO4Uxv+o8/BVygwX+YPD//xxC7fzExEQWobUO/uAmen 1sKd4us4Lbi5XmbfUsDUGw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:34 2024 by rpki-client on console-ams.rpki-client.org