$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer (raw, json) Hash identifier: QaVoBdR0C02nymvf3pvLBGyc7mTQta++yS5HWojakwQ= Subject key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2609290832227D0613D336A6A9597D3303C8CF7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft caRepository: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:32:14 +0000 Certificate not after: Mon 30 Jun 2025 14:37:14 +0000 Subordinate resources: IP: 103.151.92.0/23 IP: 113.212.160.0/21 IP: 2407:4600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:29:08:32:22:7d:06:13:d3:36:a6:a9:59:7d:33:03:c8:cf:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:32:14 2024 GMT Not After : Jun 30 14:37:14 2025 GMT Subject: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:96:ab:a6:85:85:8f:fb:8a:a3:a8:8b:50: 32:79:76:6e:76:d2:3b:93:ea:4e:57:34:c4:6c:d2: 8e:8e:46:dd:d5:a6:5d:eb:d4:ae:eb:df:85:f3:01: 54:44:b3:8d:11:86:52:c9:4b:4f:88:e1:f3:81:25: 99:10:45:fa:4f:98:a9:8f:ac:fb:a1:e1:f8:08:82: 6d:ab:a5:e6:74:0b:3d:4a:61:45:ea:c1:8f:19:01: 85:ff:19:ac:4b:5d:f6:b7:6c:f3:c5:cb:8f:da:ea: 3c:6a:03:cc:3a:ec:38:07:21:16:e0:5d:08:1d:fc: ff:6f:a0:3d:61:e0:08:d5:e7:1c:e7:f5:27:db:f6: 3c:4a:f4:7f:38:df:ca:b7:be:c0:e3:ad:78:00:e2: c1:79:50:03:de:f8:a1:6c:cd:0f:cb:ea:88:20:e5: 3c:76:c0:97:75:db:bb:4a:6b:db:b3:7a:34:e4:67: ed:53:ae:68:6e:7e:b1:3e:c5:7c:17:92:19:61:88: b2:7e:bb:c1:9c:ff:24:72:14:db:33:98:d8:df:f4: c2:d1:76:c6:4e:2a:50:7e:7b:d0:48:ec:ed:a7:90: a2:ad:d6:87:4e:0f:77:73:1e:20:e6:ac:ec:42:9d: 85:b9:71:61:94:7d:33:90:5b:2d:f8:8f:f2:92:23: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.92.0/23 113.212.160.0/21 IPv6: 2407:4600::/32 Signature Algorithm: sha256WithRSAEncryption 4c:34:40:64:10:77:f3:68:b5:ae:81:43:d0:7b:0f:3b:86:00: bf:24:e0:30:7e:6c:a7:9d:90:ea:ca:fd:0b:f5:7b:3c:54:79: fb:57:be:0d:8e:da:d8:62:fc:9a:cd:86:08:d4:3a:34:a8:62: ed:15:99:ae:23:49:e4:b7:ea:c7:93:31:3a:b1:fd:c0:56:58: bf:e5:7f:50:35:dd:88:28:43:3f:5b:03:8b:47:b7:e4:3d:e2: aa:34:3b:e4:66:fe:f7:4d:db:54:30:45:0c:9e:6c:69:9d:81: 7f:23:67:2d:35:fa:75:a9:78:c3:13:98:a1:c0:5d:e4:9e:dc: 23:8a:6a:d3:93:6d:3f:30:51:29:2e:a5:bb:00:f7:90:85:6b: df:00:66:62:c7:0b:77:3f:97:13:a2:ac:ce:7a:e4:f8:20:e5: 6c:6f:a3:fc:71:23:a2:54:0e:46:cd:cb:0e:15:87:9f:91:e7: 31:ba:1f:63:76:6e:8c:a1:97:dc:77:81:b7:a7:a4:15:91:b1: d5:dc:3e:59:88:e8:06:ac:12:d9:b8:48:60:ad:5e:32:9e:60: 40:a5:b7:0f:b2:57:6e:da:3e:d1:1c:98:f7:d8:a1:8b:cc:27: ee:1e:9e:55:85:42:2c:eb:f8:b5:62:0e:70:09:63:02:5a:96: 9d:55:e2:4c -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUJgkpCDIifQYT0zamqVl9MwPIz3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MzIxNFoX DTI1MDYzMDE0MzcxNFowMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3 MEIwNzI5MzU4QUVCRkE5NzczMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXnlqumhYWP+4qjqItQMnl2bnbSO5PqTlc0xGzSjo5G3dWmXevUruvfhfMB VESzjRGGUslLT4jh84ElmRBF+k+YqY+s+6Hh+AiCbaul5nQLPUphRerBjxkBhf8Z rEtd9rds88XLj9rqPGoDzDrsOAchFuBdCB38/2+gPWHgCNXnHOf1J9v2PEr0fzjf yre+wOOteADiwXlQA974oWzND8vqiCDlPHbAl3Xbu0pr27N6NORn7VOuaG5+sT7F fBeSGWGIsn67wZz/JHIU2zOY2N/0wtF2xk4qUH570Ejs7aeQoq3Wh04Pd3MeIOas 7EKdhblxYZR9M5BbLfiP8pIjfe0CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMPFPSutmMP9OJwsHKTWK6/qXczMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjQ4YTg5 LTkwYzUtNGY1YS04MDE1LTM2ZjExOTZhNzFjOC8wL0YzMEYxNEY0QUVCNjYzMEZG NEUyNzBCMDcyOTM1OEFFQkZBOTc3MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAFnl1wDBANx1KAwDQQCAAIwBwMFACQHRgAwDQYJKoZIhvcNAQELBQADggEBAEw0 QGQQd/Nota6BQ9B7DzuGAL8k4DB+bKedkOrK/Qv1ezxUeftXvg2O2thi/JrNhgjU OjSoYu0Vma4jSeS36seTMTqx/cBWWL/lf1A13YgoQz9bA4tHt+Q94qo0O+Rm/vdN 21QwRQyebGmdgX8jZy01+nWpeMMTmKHAXeSe3COKatOTbT8wUSkupbsA95CFa98A ZmLHC3c/lxOirM565Pgg5Wxvo/xxI6JUDkbNyw4Vh5+R5zG6H2N2boyhl9x3gben pBWRsdXcPlmI6AasEtm4SGCtXjKeYECltw+yV27aPtEcmPfYoYvMJ+4enlWFQizr +LViDnAJYwJalp1V4kw= -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org