$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer File: F33127B2252454B491C5DC9FE3937C56F28F8066.cer (raw, json) Hash identifier: mZ2g1jZwbxhirdgXO6qYAzV+sC4pKFDbllAp0CI4v4s= Subject key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B561751CA5C24EB0232AD1C83EBE5A5142D7EC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft caRepository: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 21 Nov 2024 19:14:57 +0000 Certificate not after: Thu 20 Nov 2025 19:19:57 +0000 Subordinate resources: IP: 103.71.224.0/22 IP: 103.93.224.0/21 IP: 103.94.96.0/22 IP: 202.95.128.0/19 IP: 202.182.160.0/19 IP: 203.83.26.0 -- 203.83.29.255 IP: 2001:f20::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:56:17:51:ca:5c:24:eb:02:32:ad:1c:83:eb:e5:a5:14:2d:7e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 19:14:57 2024 GMT Not After : Nov 20 19:19:57 2025 GMT Subject: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:ea:d5:1c:36:d6:8d:51:21:28:43:10:70: ca:0b:c4:35:97:63:2c:2b:8d:d5:ac:e5:53:86:ab: 08:77:1b:79:17:13:08:4f:ed:d4:15:fc:66:45:9b: 02:a6:a9:5b:74:63:96:f7:26:e3:59:5d:3d:59:60: 16:ec:27:20:06:99:7a:f2:7b:89:3d:e0:b8:f9:f4: 7e:49:8d:67:a1:a0:d7:82:d2:75:62:9a:b5:6c:61: 39:47:b4:f2:16:9e:a3:0f:54:b9:fd:e8:09:95:74: 81:a6:27:ad:51:73:a3:ee:e5:c8:81:25:3b:14:2d: 12:0e:7d:4b:5f:23:51:af:69:dc:c4:a8:01:ad:24: 1f:56:86:44:51:cd:a5:d0:6f:a7:29:3d:b1:0e:43: 74:83:90:d5:10:9b:21:04:9f:a1:d0:ba:60:93:3b: e1:dc:6e:01:9c:26:9a:93:e4:12:84:a8:05:cb:33: 3a:2d:0e:31:ab:97:5d:f1:53:db:69:94:7d:f1:69: 13:f6:d8:e2:e0:90:7f:50:f8:c1:e2:7a:41:10:59: 00:0e:4a:a8:f7:c1:2b:4e:a7:b8:d9:e7:87:76:5f: 02:a7:5c:fd:1a:fc:66:c6:11:23:db:73:c0:ca:3f: bf:1a:03:88:12:5b:5c:1e:7d:83:43:3b:8d:35:70: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.224.0/22 103.93.224.0/21 103.94.96.0/22 202.95.128.0/19 202.182.160.0/19 203.83.26.0-203.83.29.255 IPv6: 2001:f20::/32 Signature Algorithm: sha256WithRSAEncryption 02:c1:00:90:e2:c3:2f:d0:1a:86:9e:5d:0c:3e:95:b6:80:75: 3d:7d:bc:f3:5f:f2:b4:eb:44:13:ab:70:c3:a9:6b:e8:a2:ba: 54:d9:90:d8:ac:24:7e:f2:db:fb:4e:ed:7a:4c:2c:35:b1:34: a2:ff:2f:16:79:a7:4e:69:68:f4:1b:5a:07:27:25:ab:46:07: 39:88:74:20:07:e6:1f:13:19:b9:22:a6:15:32:b0:20:da:1e: f8:8e:21:28:1d:66:5d:31:9c:58:6f:b1:ba:13:18:37:72:66: 5c:ed:5d:5d:9c:7e:01:41:20:96:c3:b4:47:05:02:e4:c2:78: e1:0a:4d:7b:d5:76:7d:33:30:60:c0:31:b9:88:51:dd:2d:87: bf:90:fe:75:4f:84:6a:8d:8f:fa:7f:f3:27:98:85:52:a4:e2: 2b:59:06:ca:fe:39:08:e5:28:5a:c2:ca:69:70:97:d2:d4:aa: a9:c0:8d:92:cd:30:7f:08:ae:36:b9:a4:9e:95:f8:eb:41:e7: 53:01:30:e8:e3:61:e9:fc:63:8e:d9:64:45:8d:7a:5b:a6:e4: 86:86:64:38:9e:8d:6e:48:43:c8:43:cc:5c:4e:97:bc:c1:0c: 47:2d:8c:ec:4c:f4:8a:0d:25:6f:9d:a6:da:cb:4a:9f:e1:d5: f4:42:52:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK1YXUcpcJOsCMq0cg+vlpRQtfsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMTE5MTQ1N1oX DTI1MTEyMDE5MTk1N1owMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVE QzlGRTM5MzdDNTZGMjhGODA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF56tUcNtaNUSEoQxBwygvENZdjLCuN1azlU4arCHcbeRcTCE/t1BX8ZkWb AqapW3Rjlvcm41ldPVlgFuwnIAaZevJ7iT3guPn0fkmNZ6Gg14LSdWKatWxhOUe0 8haeow9Uuf3oCZV0gaYnrVFzo+7lyIElOxQtEg59S18jUa9p3MSoAa0kH1aGRFHN pdBvpyk9sQ5DdIOQ1RCbIQSfodC6YJM74dxuAZwmmpPkEoSoBcszOi0OMauXXfFT 22mUffFpE/bY4uCQf1D4weJ6QRBZAA5KqPfBK06nuNnnh3ZfAqdc/Rr8ZsYRI9tz wMo/vxoDiBJbXB59g0M7jTVwyGkCAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMxJ7IlJFS0kcXcn+OTfFbyj4BmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2 LTAwYTMtNDc3Ni1iZjNmLTUyMTE5NDYxMDFjMy8wL0YzMzEyN0IyMjUyNDU0QjQ5 MUM1REM5RkUzOTM3QzU2RjI4RjgwNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUHAQcBAf8ERTBDMDIEAgABMCwD BAJnR+ADBANnXeADBAJnXmADBAXKX4ADBAXKtqAwDAMEActTGgMEActTHDANBAIA AjAHAwUAIAEPIDANBgkqhkiG9w0BAQsFAAOCAQEAAsEAkOLDL9Aahp5dDD6VtoB1 PX2881/ytOtEE6tww6lr6KK6VNmQ2KwkfvLb+07tekwsNbE0ov8vFnmnTmlo9Bta Byclq0YHOYh0IAfmHxMZuSKmFTKwINoe+I4hKB1mXTGcWG+xuhMYN3JmXO1dXZx+ AUEglsO0RwUC5MJ44QpNe9V2fTMwYMAxuYhR3S2Hv5D+dU+Eao2P+n/zJ5iFUqTi K1kGyv45COUoWsLKaXCX0tSqqcCNks0wfwiuNrmknpX460HnUwEw6ONh6fxjjtlk RY16W6bkhoZkOJ6NbkhDyEPMXE6XvMEMRy2M7Ez0ig0lb52m2stKn+HV9EJSsw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org