$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer (raw, json) Hash identifier: VYU3Qg4Oc6ZKbs58696BGw9osloECDOGqjmQM5/eF+U= Subject key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 454226599342448D7823E7744900058ACF6D8D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft caRepository: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 00:21:29 +0000 Certificate not after: Mon 29 Jul 2024 00:26:29 +0000 Subordinate resources: IP: 202.87.240.0/21 IP: 2406:2140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:26:59:93:42:44:8d:78:23:e7:74:49:00:05:8a:cf:6d:8d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 00:21:29 2023 GMT Not After : Jul 29 00:26:29 2024 GMT Subject: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:e7:0a:19:11:9a:c3:fb:32:13:09:89:2d: aa:fb:54:5f:db:a7:7b:73:45:c8:dc:85:13:00:09: 4d:52:6f:5d:aa:f9:63:40:b0:52:36:7b:fe:c7:70: 6f:6b:6a:cc:a5:9d:81:6a:bd:03:ed:00:1b:d4:85: 71:03:71:61:44:e6:ff:0c:7c:21:c3:1d:f5:96:88: d3:57:24:7e:68:57:2d:ec:49:e1:44:84:79:81:ca: 37:2a:87:e9:ac:04:c2:29:34:cf:9a:32:6a:e3:6a: 95:29:b2:6c:de:bc:9f:df:aa:16:74:11:d2:52:99: 12:b9:06:6c:8f:11:4d:5a:37:ad:ef:5e:2b:18:9a: c9:68:3d:bf:5f:01:5c:73:18:79:b0:a8:bb:f6:df: 09:23:59:61:95:35:58:11:7e:93:12:b4:d1:8b:d7: d5:fb:dc:f0:d8:ee:bd:cb:85:20:19:c6:d8:8f:b1: 2d:bd:49:5f:78:45:d4:eb:fc:c3:8c:ea:7a:55:7f: f8:25:c4:e1:8e:11:cf:8d:c1:4f:78:d8:cd:a3:5e: 78:23:42:85:02:0f:8b:b6:5b:84:a2:57:0c:6b:2b: 7a:dd:46:c7:d8:30:e0:01:cc:10:c6:cd:f2:ca:ba: be:72:19:8f:2e:37:96:00:bc:55:4e:94:ca:b4:0c: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 32:ba:e1:95:b3:07:a6:ed:12:c8:d4:cc:0f:5e:98:f1:38:05: bc:c1:0a:1b:87:1e:56:0b:b5:fa:dd:cb:9a:38:a1:4a:1e:70: 2d:e1:6f:ac:dc:b0:46:ff:4b:60:c4:77:3e:b0:27:3c:72:87: 5b:64:b3:df:ac:d9:72:51:f2:d0:27:6b:07:47:4d:92:70:ff: 9e:27:56:99:19:12:8f:78:84:a3:cd:07:c1:b3:e5:91:36:02: a2:0e:79:31:55:80:7b:6f:fa:c3:85:6f:cf:19:34:04:6a:69: 0b:b9:30:91:0d:8a:ef:45:39:5f:f3:76:75:b7:e8:e5:80:62: 9d:a1:60:e5:cf:b5:97:93:e5:01:c4:e6:23:c1:e1:b0:70:da: 83:1e:55:67:ed:79:ec:7a:86:93:77:ec:14:88:88:99:cc:25: 48:ee:00:d4:df:35:c7:e1:5e:b2:f8:9d:59:7c:81:27:8f:e6: 65:18:2c:7f:28:21:0f:7f:54:4d:cb:f0:d4:60:1e:28:c0:e4: 34:1e:6c:b6:70:07:ac:76:0d:72:c8:c3:9d:ff:ee:fe:63:44: a6:e8:7c:63:54:af:ed:d0:15:99:ab:ee:56:e3:f9:d5:d5:2b: ba:ee:de:da:f4:1c:82:cf:e2:9d:f0:69:4e:7a:77:c0:9a:bd: f3:4b:79:90 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIURUImWZNCRI14I+d0SQAFis9tjUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAwMjEyOVoX DTI0MDcyOTAwMjYyOVowMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5 OEMwNEVFNkI2RjY5NTNGMDc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKm5woZEZrD+zITCYktqvtUX9une3NFyNyFEwAJTVJvXar5Y0CwUjZ7/sdw b2tqzKWdgWq9A+0AG9SFcQNxYUTm/wx8IcMd9ZaI01ckfmhXLexJ4USEeYHKNyqH 6awEwik0z5oyauNqlSmybN68n9+qFnQR0lKZErkGbI8RTVo3re9eKxiayWg9v18B XHMYebCou/bfCSNZYZU1WBF+kxK00YvX1fvc8NjuvcuFIBnG2I+xLb1JX3hF1Ov8 w4zqelV/+CXE4Y4Rz43BT3jYzaNeeCNChQIPi7ZbhKJXDGsret1Gx9gw4AHMEMbN 8sq6vnIZjy43lgC8VU6UyrQMgSUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPlZ2IMUSwv76A6YwE7mtvaVPwdMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5 LTdlZTgtNGE4My04MDA0LTIzNGQ5MTRhMGZkNC8wL0Y5NTlEODgzMTQ0QjBCRkJF ODBFOThDMDRFRTZCNkY2OTUzRjA3NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPKV/AwDQQCAAIwBwMFACQGIUAwDQYJKoZIhvcNAQELBQADggEBADK64ZWzB6bt EsjUzA9emPE4BbzBChuHHlYLtfrdy5o4oUoecC3hb6zcsEb/S2DEdz6wJzxyh1tk s9+s2XJR8tAnawdHTZJw/54nVpkZEo94hKPNB8Gz5ZE2AqIOeTFVgHtv+sOFb88Z NARqaQu5MJENiu9FOV/zdnW36OWAYp2hYOXPtZeT5QHE5iPB4bBw2oMeVWfteex6 hpN37BSIiJnMJUjuANTfNcfhXrL4nVl8gSeP5mUYLH8oIQ9/VE3L8NRgHijA5DQe bLZwB6x2DXLIw53/7v5jRKbofGNUr+3QFZmr7lbj+dXVK7ru3tr0HILP4p3waU56 d8CavfNLeZA= -----END CERTIFICATE-----Generated at Wed May 8 09:50:45 2024 by rpki-client on console-fra.rpki-client.org