$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer File: DBF597EA29EF8A70656446AF75CF33F0618E8282.cer (raw, json) Hash identifier: iuoO913QsfgFDNRLBD6xhakKGlBqnI1aIi7lhWpgwi8= Subject key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FA92019DCCF57B3C10B31EDE70FBCDEED418169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 03:43:26 +0000 Certificate not after: Tue 01 Jul 2025 03:48:26 +0000 Subordinate resources: IP: 103.242.204.0/22 IP: 117.102.224.0/19 IP: 150.107.132.0/22 IP: 202.6.224.0/20 IP: 2406:6200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a9:20:19:dc:cf:57:b3:c1:0b:31:ed:e7:0f:bc:de:ed:41:81:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 03:43:26 2024 GMT Not After : Jul 1 03:48:26 2025 GMT Subject: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:35:f0:3b:46:56:d1:8f:0d:f2:9a:47:29: 63:6c:19:92:64:cf:45:12:91:ce:2f:f3:67:40:27: 56:56:f3:a3:74:1a:ec:da:d0:da:6a:8f:a0:f6:3e: e9:47:99:9b:fb:ae:f1:36:4b:cd:e5:b2:fd:c5:ef: 61:d8:ac:77:21:6f:ac:7f:4c:31:99:43:2e:49:f2: 71:69:8b:9d:98:5d:24:86:3d:01:f5:a7:13:44:79: 1d:12:d2:8b:10:c9:ad:1d:f0:4b:b6:ea:f6:3c:61: b5:4c:94:88:a2:b8:c9:7f:6b:37:53:f5:57:60:0e: 66:2a:41:f4:76:31:b7:b3:e9:95:47:01:5c:8f:7c: 03:9a:2d:d4:e3:82:75:b9:2b:d4:f2:c5:84:80:ef: 95:38:cb:67:ba:84:99:36:58:94:f9:70:54:3b:c5: 72:c8:61:aa:a8:42:22:ef:c1:25:71:4b:01:5d:4d: c8:0f:36:a1:6c:43:38:01:7d:21:36:c5:c2:b4:94: 76:e2:d9:3c:81:f3:94:31:ae:11:7b:ca:51:6f:8b: 75:c5:f3:10:41:d3:66:6d:77:0a:40:6c:52:12:4c: ea:56:78:89:aa:34:20:a5:9d:15:17:0e:48:93:c6: a2:69:03:86:fa:6a:28:eb:5a:e9:3a:97:7c:d6:cd: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.204.0/22 117.102.224.0/19 150.107.132.0/22 202.6.224.0/20 IPv6: 2406:6200::/32 Signature Algorithm: sha256WithRSAEncryption 0d:bb:38:c6:a1:4a:28:83:65:a5:3a:d0:1e:f6:6a:be:ba:e8: f3:4b:d2:cf:61:67:80:73:b8:26:b9:a7:10:15:9b:5d:73:a7: 44:8a:07:f9:eb:0a:74:9f:a9:15:90:24:1e:9c:42:15:13:cc: 1d:f7:fd:9a:57:1e:20:bc:99:9c:0b:18:4b:1e:94:e3:d3:98: 85:51:9e:77:1a:49:1a:ff:b9:8c:d6:73:7e:15:2f:e1:56:34: 91:78:01:aa:71:71:a4:80:67:e8:61:56:20:41:bb:ae:8d:6b: 2a:d9:35:d0:37:91:21:4a:ff:f0:9e:db:a9:a2:45:b6:62:70: ef:79:6a:5d:d0:79:5f:1a:36:51:ee:7f:db:eb:5f:0f:ac:60: a8:79:9b:0d:3a:af:01:a3:de:17:99:36:c6:48:bc:6b:ad:5c: 0e:d7:27:16:77:4b:78:13:b0:36:14:87:2a:0d:ac:4f:a9:6c: 9c:82:32:71:04:78:97:86:13:bc:a7:76:25:08:ab:b3:26:ee: 42:6e:d3:91:1c:bc:b5:9d:32:d6:cc:fa:a2:2b:7e:02:c1:34: e2:a0:10:aa:55:e7:78:54:df:c4:4d:28:e5:64:2d:bb:6c:a2: 75:51:db:f0:83:99:83:82:42:c4:4d:83:d4:b8:39:71:b1:93: 1f:ae:c1:82 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUL6kgGdzPV7PBCzHt5w+83u1BgWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAzNDMyNloX DTI1MDcwMTAzNDgyNlowMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0 NkFGNzVDRjMzRjA2MThFODI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALISNfA7RlbRjw3ymkcpY2wZkmTPRRKRzi/zZ0AnVlbzo3Qa7NrQ2mqPoPY+ 6UeZm/uu8TZLzeWy/cXvYdisdyFvrH9MMZlDLknycWmLnZhdJIY9AfWnE0R5HRLS ixDJrR3wS7bq9jxhtUyUiKK4yX9rN1P1V2AOZipB9HYxt7PplUcBXI98A5ot1OOC dbkr1PLFhIDvlTjLZ7qEmTZYlPlwVDvFcshhqqhCIu/BJXFLAV1NyA82oWxDOAF9 ITbFwrSUduLZPIHzlDGuEXvKUW+LdcXzEEHTZm13CkBsUhJM6lZ4iao0IKWdFRcO SJPGomkDhvpqKOta6TqXfNbNxosCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNv1l+op74pwZWRGr3XPM/BhjoKCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkMGYxYTZl LTgzYjYtNDUzNC05NjdkLWY4ZGIzYzM3MTFmNC8wL0RCRjU5N0VBMjlFRjhBNzA2 NTY0NDZBRjc1Q0YzM0YwNjE4RTgyODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJn8swDBAV1ZuADBAKWa4QDBATKBuAwDQQCAAIwBwMFACQGYgAwDQYJKoZIhvcN AQELBQADggEBAA27OMahSiiDZaU60B72ar666PNL0s9hZ4BzuCa5pxAVm11zp0SK B/nrCnSfqRWQJB6cQhUTzB33/ZpXHiC8mZwLGEselOPTmIVRnncaSRr/uYzWc34V L+FWNJF4AapxcaSAZ+hhViBBu66NayrZNdA3kSFK//Ce26miRbZicO95al3QeV8a NlHuf9vrXw+sYKh5mw06rwGj3heZNsZIvGutXA7XJxZ3S3gTsDYUhyoNrE+pbJyC MnEEeJeGE7yndiUIq7Mm7kJu05EcvLWdMtbM+qIrfgLBNOKgEKpV53hU38RNKOVk LbtsonVR2/CDmYOCQsRNg9S4OXGxkx+uwYI= -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:01 2024 by rpki-client on console-fra.rpki-client.org