$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer (raw, json) Hash identifier: NjzP48i4gWG67rJL00tgPh2ZddY61Hhvo9Y44njYWFw= Subject key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 257F0CFFA41E90C243206514B0C85C865A660BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft caRepository: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 13:00:09 +0000 Certificate not after: Mon 30 Jun 2025 13:05:09 +0000 Subordinate resources: IP: 202.87.240.0/21 IP: 2406:2140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7f:0c:ff:a4:1e:90:c2:43:20:65:14:b0:c8:5c:86:5a:66:0b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 13:00:09 2024 GMT Not After : Jun 30 13:05:09 2025 GMT Subject: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:e7:0a:19:11:9a:c3:fb:32:13:09:89:2d: aa:fb:54:5f:db:a7:7b:73:45:c8:dc:85:13:00:09: 4d:52:6f:5d:aa:f9:63:40:b0:52:36:7b:fe:c7:70: 6f:6b:6a:cc:a5:9d:81:6a:bd:03:ed:00:1b:d4:85: 71:03:71:61:44:e6:ff:0c:7c:21:c3:1d:f5:96:88: d3:57:24:7e:68:57:2d:ec:49:e1:44:84:79:81:ca: 37:2a:87:e9:ac:04:c2:29:34:cf:9a:32:6a:e3:6a: 95:29:b2:6c:de:bc:9f:df:aa:16:74:11:d2:52:99: 12:b9:06:6c:8f:11:4d:5a:37:ad:ef:5e:2b:18:9a: c9:68:3d:bf:5f:01:5c:73:18:79:b0:a8:bb:f6:df: 09:23:59:61:95:35:58:11:7e:93:12:b4:d1:8b:d7: d5:fb:dc:f0:d8:ee:bd:cb:85:20:19:c6:d8:8f:b1: 2d:bd:49:5f:78:45:d4:eb:fc:c3:8c:ea:7a:55:7f: f8:25:c4:e1:8e:11:cf:8d:c1:4f:78:d8:cd:a3:5e: 78:23:42:85:02:0f:8b:b6:5b:84:a2:57:0c:6b:2b: 7a:dd:46:c7:d8:30:e0:01:cc:10:c6:cd:f2:ca:ba: be:72:19:8f:2e:37:96:00:bc:55:4e:94:ca:b4:0c: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 01:a0:34:a4:e2:fc:0e:ce:a7:d2:69:cf:21:a6:6a:9a:de:54: 23:a6:56:ef:9a:0b:fa:77:e2:2d:62:93:72:d7:5e:ee:32:8c: b9:1f:57:db:b9:06:3e:49:01:6d:e4:b5:2a:48:a4:86:1d:71: 60:f3:dc:25:4b:be:88:e3:ff:4a:1e:2f:30:c2:f4:8d:f9:1e: 05:7c:ec:bb:cf:e4:2f:55:36:27:f1:a3:3a:ab:2d:bd:26:34: 92:c4:9b:5a:89:30:95:4e:67:a5:79:48:5b:73:2a:3d:14:54: 91:bb:85:e3:a3:6e:8b:cc:4a:04:fe:b5:3c:75:2b:09:f4:15: 16:0a:4d:43:d6:33:34:4c:0d:86:d9:e2:a5:5c:fb:62:88:fb: c1:2e:20:ac:96:cc:fa:a9:08:f5:68:32:57:b9:3b:83:57:ed: b6:78:11:10:62:bb:f9:9f:19:23:60:8a:b1:7d:10:28:df:16: d1:8d:47:7b:b9:48:7c:88:8f:b3:1f:ca:53:c1:f0:75:41:7c: 8f:c3:44:10:f2:b7:4d:3a:eb:38:54:b7:24:6e:dd:c0:37:a0: 35:fc:1f:91:28:2b:cf:f8:c7:c1:21:7e:8b:a2:c6:43:07:99: c1:e8:d6:b9:77:7a:33:05:3c:03:ff:c7:ad:b4:58:52:77:fc: 9c:6d:7b:ae -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJX8M/6QekMJDIGUUsMhchlpmC8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTEzMDAwOVoX DTI1MDYzMDEzMDUwOVowMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5 OEMwNEVFNkI2RjY5NTNGMDc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKm5woZEZrD+zITCYktqvtUX9une3NFyNyFEwAJTVJvXar5Y0CwUjZ7/sdw b2tqzKWdgWq9A+0AG9SFcQNxYUTm/wx8IcMd9ZaI01ckfmhXLexJ4USEeYHKNyqH 6awEwik0z5oyauNqlSmybN68n9+qFnQR0lKZErkGbI8RTVo3re9eKxiayWg9v18B XHMYebCou/bfCSNZYZU1WBF+kxK00YvX1fvc8NjuvcuFIBnG2I+xLb1JX3hF1Ov8 w4zqelV/+CXE4Y4Rz43BT3jYzaNeeCNChQIPi7ZbhKJXDGsret1Gx9gw4AHMEMbN 8sq6vnIZjy43lgC8VU6UyrQMgSUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPlZ2IMUSwv76A6YwE7mtvaVPwdMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5 LTdlZTgtNGE4My04MDA0LTIzNGQ5MTRhMGZkNC8wL0Y5NTlEODgzMTQ0QjBCRkJF ODBFOThDMDRFRTZCNkY2OTUzRjA3NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPKV/AwDQQCAAIwBwMFACQGIUAwDQYJKoZIhvcNAQELBQADggEBAAGgNKTi/A7O p9JpzyGmapreVCOmVu+aC/p34i1ik3LXXu4yjLkfV9u5Bj5JAW3ktSpIpIYdcWDz 3CVLvojj/0oeLzDC9I35HgV87LvP5C9VNifxozqrLb0mNJLEm1qJMJVOZ6V5SFtz Kj0UVJG7heOjbovMSgT+tTx1Kwn0FRYKTUPWMzRMDYbZ4qVc+2KI+8EuIKyWzPqp CPVoMle5O4NX7bZ4ERBiu/mfGSNgirF9ECjfFtGNR3u5SHyIj7MfylPB8HVBfI/D RBDyt0066zhUtyRu3cA3oDX8H5EoK8/4x8EhfouixkMHmcHo1rl3ejMFPAP/x620 WFJ3/Jxte64= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org