$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer File: F137C794398E5F88909A244EC978EA476CCF76CC.cer (raw, json) Hash identifier: hI9oUCt4QG+HsvGJ/dLfPjQcmB4Pn4dWxGFXIIffyaM= Subject key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68C92143A6E4C54A81CC6B21492CC78D35AF6357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft caRepository: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 12:38:48 +0000 Certificate not after: Fri 24 Oct 2025 12:43:48 +0000 Subordinate resources: IP: 103.55.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c9:21:43:a6:e4:c5:4a:81:cc:6b:21:49:2c:c7:8d:35:af:63:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 25 12:38:48 2024 GMT Not After : Oct 24 12:43:48 2025 GMT Subject: CN=F137C794398E5F88909A244EC978EA476CCF76CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:8b:08:21:09:f4:7c:9d:1e:96:6d:1b:7a: c4:69:3c:63:1f:0c:7e:4e:9e:fe:f4:b6:a0:92:f5: d8:38:98:6c:68:94:41:6e:42:dd:ed:7b:0f:f6:f5: 8e:f8:ad:72:f1:83:15:09:5f:c3:77:f0:d3:05:fd: 28:16:b6:95:65:f1:f4:63:fd:d9:a8:1d:fe:14:8a: c0:32:ae:47:fd:54:ab:38:aa:9d:3b:83:5f:d1:99: 9e:b2:75:38:31:95:10:c9:fd:b7:da:d5:dd:85:3d: 1a:07:9d:93:0f:64:18:72:31:6e:c2:bd:cd:e5:18: 76:df:60:40:86:e7:8e:44:92:82:c1:35:b3:08:e9: 60:95:46:c2:75:80:e7:ae:f4:05:f7:d3:4b:53:cf: 2e:7d:cc:47:d5:cb:87:68:f4:0a:06:1a:c7:8b:86: 36:50:0d:08:b8:dc:99:99:16:5f:60:5c:29:9f:19: 9c:cf:fc:1d:5e:52:b7:1e:2c:eb:68:6e:55:df:91: 4f:d7:e7:dc:57:8f:ba:6e:f9:63:d9:c7:d0:67:77: 45:c6:a3:e4:82:a7:e0:4b:ee:97:e1:2a:ff:5e:d8: 36:c3:f6:3b:e1:1c:68:4a:5e:d8:09:e5:26:29:38: 63:b2:85:da:53:19:9d:36:59:a8:6c:89:85:a0:9f: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.224.0/23 Signature Algorithm: sha256WithRSAEncryption 87:ca:07:9a:34:0f:18:75:ce:13:d5:18:1c:2c:70:3f:e1:ce: ef:c5:90:1a:0b:76:64:ef:e7:92:23:ea:83:9b:40:c2:9e:3a: 35:73:a5:f0:65:69:55:86:09:4f:da:e8:f7:e3:3d:78:87:1b: 37:a8:c7:ac:22:ff:00:cc:ef:f5:30:1e:07:9b:22:6d:46:85: e9:9f:53:6b:34:3d:77:69:52:c2:f6:eb:25:f3:a2:3b:ca:af: 6c:23:75:ba:31:9e:d4:57:3a:e7:39:61:bd:f7:3c:78:7f:c7: 7b:14:6e:4a:24:14:5c:82:70:ca:03:40:ac:51:fa:47:37:fb: 02:48:86:fc:c8:99:6d:7b:ff:df:64:76:2b:81:6b:a0:34:10: 89:67:ce:37:52:71:c7:82:9b:d1:55:f2:ae:37:8f:95:b6:88: 4e:51:1c:fc:bb:8b:5e:d6:37:5c:5c:5d:bc:7c:9b:76:47:0b: 6d:71:bc:6b:3c:9f:0c:82:17:58:cc:be:f1:2e:77:6c:19:cf: 16:aa:a6:04:83:e6:fe:c3:34:bf:88:56:ec:3e:45:26:68:a2: a6:d4:ec:d3:6e:01:23:21:25:2a:75:93:92:98:a6:09:43:67: 95:56:f6:7a:7d:7c:13:cf:c8:5e:b4:82:74:32:87:11:93:8a: ce:b2:66:9d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaMkhQ6bkxUqBzGshSSzHjTWvY1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNTEyMzg0OFoX DTI1MTAyNDEyNDM0OFowMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEy NDRFQzk3OEVBNDc2Q0NGNzZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzuiwghCfR8nR6WbRt6xGk8Yx8Mfk6e/vS2oJL12DiYbGiUQW5C3e17D/b1 jvitcvGDFQlfw3fw0wX9KBa2lWXx9GP92agd/hSKwDKuR/1UqziqnTuDX9GZnrJ1 ODGVEMn9t9rV3YU9Ggedkw9kGHIxbsK9zeUYdt9gQIbnjkSSgsE1swjpYJVGwnWA 5670BffTS1PPLn3MR9XLh2j0CgYax4uGNlANCLjcmZkWX2BcKZ8ZnM/8HV5Stx4s 62huVd+RT9fn3FePum75Y9nH0Gd3Rcaj5IKn4Evul+Eq/17YNsP2O+EcaEpe2Anl Jik4Y7KF2lMZnTZZqGyJhaCfaGsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPE3x5Q5jl+IkJokTsl46kdsz3bMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZjJjNzMz LWQ2N2YtNDgxMy1iOGY3LTA1OGQ5NWEwOTU4Ny8wL0YxMzdDNzk0Mzk4RTVGODg5 MDlBMjQ0RUM5NzhFQTQ3NkNDRjc2Q0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnN+AwDQYJKoZIhvcNAQELBQADggEBAIfKB5o0Dxh1zhPVGBwscD/hzu/FkBoL dmTv55Ij6oObQMKeOjVzpfBlaVWGCU/a6PfjPXiHGzeox6wi/wDM7/UwHgebIm1G hemfU2s0PXdpUsL26yXzojvKr2wjdboxntRXOuc5Yb33PHh/x3sUbkokFFyCcMoD QKxR+kc3+wJIhvzImW17/99kdiuBa6A0EIlnzjdScceCm9FV8q43j5W2iE5RHPy7 i17WN1xcXbx8m3ZHC21xvGs8nwyCF1jMvvEud2wZzxaqpgSD5v7DNL+IVuw+RSZo oqbU7NNuASMhJSp1k5KYpglDZ5VW9np9fBPPyF60gnQyhxGTis6yZp0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:41 2025 by rpki-client