$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer (raw, json) Hash identifier: nZDlJ9FOZSFG5nyMc2xcIUcZOP5vvxGbb9LrzJMQtac= Subject key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FE6F5B13D0942897DD1D8A60379125393890BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft caRepository: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:54:58 +0000 Certificate not after: Mon 29 Jul 2024 00:59:58 +0000 Subordinate resources: IP: 103.151.92.0/23 IP: 113.212.160.0/21 IP: 2407:4600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e6:f5:b1:3d:09:42:89:7d:d1:d8:a6:03:79:12:53:93:89:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:54:58 2023 GMT Not After : Jul 29 00:59:58 2024 GMT Subject: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:96:ab:a6:85:85:8f:fb:8a:a3:a8:8b:50: 32:79:76:6e:76:d2:3b:93:ea:4e:57:34:c4:6c:d2: 8e:8e:46:dd:d5:a6:5d:eb:d4:ae:eb:df:85:f3:01: 54:44:b3:8d:11:86:52:c9:4b:4f:88:e1:f3:81:25: 99:10:45:fa:4f:98:a9:8f:ac:fb:a1:e1:f8:08:82: 6d:ab:a5:e6:74:0b:3d:4a:61:45:ea:c1:8f:19:01: 85:ff:19:ac:4b:5d:f6:b7:6c:f3:c5:cb:8f:da:ea: 3c:6a:03:cc:3a:ec:38:07:21:16:e0:5d:08:1d:fc: ff:6f:a0:3d:61:e0:08:d5:e7:1c:e7:f5:27:db:f6: 3c:4a:f4:7f:38:df:ca:b7:be:c0:e3:ad:78:00:e2: c1:79:50:03:de:f8:a1:6c:cd:0f:cb:ea:88:20:e5: 3c:76:c0:97:75:db:bb:4a:6b:db:b3:7a:34:e4:67: ed:53:ae:68:6e:7e:b1:3e:c5:7c:17:92:19:61:88: b2:7e:bb:c1:9c:ff:24:72:14:db:33:98:d8:df:f4: c2:d1:76:c6:4e:2a:50:7e:7b:d0:48:ec:ed:a7:90: a2:ad:d6:87:4e:0f:77:73:1e:20:e6:ac:ec:42:9d: 85:b9:71:61:94:7d:33:90:5b:2d:f8:8f:f2:92:23: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.92.0/23 113.212.160.0/21 IPv6: 2407:4600::/32 Signature Algorithm: sha256WithRSAEncryption 1e:73:5c:fc:12:65:4b:ad:6c:86:51:6a:e4:96:49:cb:45:45: 96:ce:83:cd:fd:8f:36:0a:f7:f9:f3:5c:78:69:41:c7:84:17: 38:59:33:24:6a:21:ab:3b:e2:03:1f:4c:a3:39:a2:eb:b8:ce: e4:59:0b:bb:15:a3:1f:01:c5:4b:6d:ab:06:ac:2c:31:b6:4f: c6:19:c9:ec:e7:67:06:a0:78:4a:17:75:6b:1b:4e:15:f5:29: bb:4f:ec:1f:c4:5c:04:ce:20:11:e1:aa:3a:f3:fd:18:df:dd: 8d:d2:cb:0c:f4:b7:8f:c7:70:ce:10:ec:ea:3c:1e:a7:43:79: e1:c6:63:d1:18:c3:34:4c:96:c0:d8:e4:d8:04:c2:71:7d:76: b3:89:7a:d8:9b:2f:96:3a:cc:e7:dd:c6:a7:0a:8b:78:a8:91: 02:2a:a5:a2:43:24:7c:56:ca:73:b3:6c:1f:ce:9a:cf:f6:48: d4:d2:5c:3a:ee:d7:c3:85:ed:21:ac:5f:ba:16:46:e6:5c:eb: a0:84:2c:4b:f2:f7:58:ae:37:7d:cd:e8:bc:91:0b:13:05:fc: d9:e0:a4:35:48:15:86:e7:ff:e8:ca:0d:35:94:2a:45:68:92: 7e:25:fc:96:39:1d:ad:d0:fa:7f:b1:28:ea:a1:ad:53:eb:2b: 14:5d:ec:b8 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUX+b1sT0JQol90dimA3kSU5OJC6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwNTQ1OFoX DTI0MDcyOTAwNTk1OFowMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3 MEIwNzI5MzU4QUVCRkE5NzczMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXnlqumhYWP+4qjqItQMnl2bnbSO5PqTlc0xGzSjo5G3dWmXevUruvfhfMB VESzjRGGUslLT4jh84ElmRBF+k+YqY+s+6Hh+AiCbaul5nQLPUphRerBjxkBhf8Z rEtd9rds88XLj9rqPGoDzDrsOAchFuBdCB38/2+gPWHgCNXnHOf1J9v2PEr0fzjf yre+wOOteADiwXlQA974oWzND8vqiCDlPHbAl3Xbu0pr27N6NORn7VOuaG5+sT7F fBeSGWGIsn67wZz/JHIU2zOY2N/0wtF2xk4qUH570Ejs7aeQoq3Wh04Pd3MeIOas 7EKdhblxYZR9M5BbLfiP8pIjfe0CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMPFPSutmMP9OJwsHKTWK6/qXczMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjQ4YTg5 LTkwYzUtNGY1YS04MDE1LTM2ZjExOTZhNzFjOC8wL0YzMEYxNEY0QUVCNjYzMEZG NEUyNzBCMDcyOTM1OEFFQkZBOTc3MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAFnl1wDBANx1KAwDQQCAAIwBwMFACQHRgAwDQYJKoZIhvcNAQELBQADggEBAB5z XPwSZUutbIZRauSWSctFRZbOg839jzYK9/nzXHhpQceEFzhZMyRqIas74gMfTKM5 ouu4zuRZC7sVox8BxUttqwasLDG2T8YZyeznZwageEoXdWsbThX1KbtP7B/EXATO IBHhqjrz/Rjf3Y3Sywz0t4/HcM4Q7Oo8HqdDeeHGY9EYwzRMlsDY5NgEwnF9drOJ etibL5Y6zOfdxqcKi3iokQIqpaJDJHxWynOzbB/Oms/2SNTSXDru18OF7SGsX7oW RuZc66CELEvy91iuN33N6LyRCxMF/NngpDVIFYbn/+jKDTWUKkVokn4l/JY5Ha3Q +n+xKOqhrVPrKxRd7Lg= -----END CERTIFICATE-----Generated at Wed May 8 17:45:31 2024 by rpki-client on console-ams.rpki-client.org