$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer (raw, json) Hash identifier: BYWdQ/unhfyAtc4EUyNEg8WLeJaL2TLkQCKHch8HpKQ= Subject key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 607FAA2FBFAD917C7E90A3C743BD564179FCC52E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft caRepository: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Jun 2024 11:11:57 +0000 Certificate not after: Tue 17 Jun 2025 11:16:57 +0000 Subordinate resources: IP: 103.105.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7f:aa:2f:bf:ad:91:7c:7e:90:a3:c7:43:bd:56:41:79:fc:c5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 18 11:11:57 2024 GMT Not After : Jun 17 11:16:57 2025 GMT Subject: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:eb:db:ae:84:e0:8d:d9:8d:52:80:89:e8: 94:22:91:ad:6e:79:f9:23:42:48:ec:f9:08:0f:98: 69:c9:f2:6d:af:00:a6:dc:d7:fb:cd:b7:42:c9:ef: 21:fa:92:c3:b4:09:2a:d6:04:6a:69:27:a4:56:f3: f8:de:80:3d:4a:46:1e:23:5e:0a:48:9c:f9:3f:7c: a2:74:13:c7:fb:2c:73:ca:37:1c:2f:ad:83:b6:55: 47:01:88:9a:26:07:3f:74:00:e1:b3:bd:db:bd:d0: 8b:74:d6:8c:c6:fb:49:e6:27:61:98:22:f8:35:70: 2a:ed:f2:80:62:2e:7e:39:37:33:09:93:af:94:bb: dd:c6:a8:11:44:4f:d6:b5:47:3c:13:f4:85:a6:0e: 12:b5:9c:be:7c:cd:b6:b4:17:a5:7d:d0:d4:5d:6b: 5a:cc:65:20:1c:6d:2a:44:e2:08:67:a6:dc:45:2c: d4:62:1e:2f:65:82:54:8f:99:6a:0e:87:cd:b8:36: 94:5f:db:47:06:5a:02:0b:d1:86:a3:a0:45:91:2a: 34:e7:90:28:72:0b:37:20:06:83:93:ab:c4:58:cc: b9:2c:75:ee:f2:2f:3e:1e:8c:24:2e:fc:e1:08:ff: 81:fc:e5:e3:29:f1:57:fc:03:68:50:4f:b2:57:0e: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.8.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:4e:8e:16:34:cb:cc:d3:96:ec:b3:f6:1e:d8:5d:eb:5e:d8: a4:f9:d5:76:54:df:07:36:e7:95:a4:91:04:46:be:2e:ac:19: 03:af:48:b2:bc:85:55:ef:6d:03:e0:85:11:d2:eb:7c:80:d0: 6b:50:55:a3:b8:b2:78:fb:d4:9b:b8:d7:c0:bf:35:58:47:0b: 27:e6:13:70:5f:ba:c0:75:f0:f3:8b:52:3f:eb:48:f6:3d:c7: 12:f8:a0:3e:07:11:be:81:a2:4c:ad:9f:f2:59:64:0c:ba:9b: 1d:3e:41:ab:47:f3:f7:7f:95:f7:0f:4f:de:bb:f6:00:b2:f4: 0f:4e:39:6e:80:4a:06:02:ea:4e:fc:e7:62:1e:ed:fd:fe:74: 35:23:3f:9c:be:73:9f:de:ff:88:60:c8:5f:25:90:9f:d2:65: 54:05:27:bd:fa:ee:27:61:3a:ed:0a:b5:fb:62:d3:2d:5c:01: 2e:c1:62:79:a6:79:e9:d1:21:bd:bc:67:39:f7:c4:b1:7a:9e: 01:73:07:f4:a4:03:b1:71:b2:fc:c2:a7:98:0e:2e:a7:8f:cd: a2:2d:ea:c4:06:0a:7d:b1:81:67:38:58:74:31:40:b2:b5:ed: 45:a9:3e:6a:1e:bb:84:ae:e8:b8:e8:9e:24:f1:c5:13:78:44: ae:5a:20:0e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYH+qL7+tkXx+kKPHQ71WQXn8xS4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxODExMTE1N1oX DTI1MDYxNzExMTY1N1owMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0Ey NzI4MDZFMTVCRjQwQ0M4OUI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAn69uuhOCN2Y1SgInolCKRrW55+SNCSOz5CA+Yacnyba8AptzX+823Qsnv IfqSw7QJKtYEamknpFbz+N6APUpGHiNeCkic+T98onQTx/ssc8o3HC+tg7ZVRwGI miYHP3QA4bO9273Qi3TWjMb7SeYnYZgi+DVwKu3ygGIufjk3MwmTr5S73caoEURP 1rVHPBP0haYOErWcvnzNtrQXpX3Q1F1rWsxlIBxtKkTiCGem3EUs1GIeL2WCVI+Z ag6Hzbg2lF/bRwZaAgvRhqOgRZEqNOeQKHILNyAGg5OrxFjMuSx17vIvPh6MJC78 4Qj/gfzl4ynxV/wDaFBPslcOzukCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPn0Wu4lNaoTnsonKAbhW/QMyJuYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2N2E3ZjBl LThkMDctNDVkZS04MjUyLTNiZmZjMDVlNTY0OS8wL0Y5RjQ1QUVFMjUzNUFBMTM5 RUNBMjcyODA2RTE1QkY0MENDODlCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnaQgwDQYJKoZIhvcNAQELBQADggEBABpOjhY0y8zTluyz9h7YXete2KT51XZU 3wc255WkkQRGvi6sGQOvSLK8hVXvbQPghRHS63yA0GtQVaO4snj71Ju418C/NVhH CyfmE3BfusB18POLUj/rSPY9xxL4oD4HEb6Bokytn/JZZAy6mx0+QatH8/d/lfcP T9679gCy9A9OOW6ASgYC6k7852Ie7f3+dDUjP5y+c5/e/4hgyF8lkJ/SZVQFJ736 7idhOu0Ktfti0y1cAS7BYnmmeenRIb28Zzn3xLF6ngFzB/SkA7FxsvzCp5gOLqeP zaIt6sQGCn2xgWc4WHQxQLK17UWpPmoeu4Su6LjoniTxxRN4RK5aIA4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:35 2024 by rpki-client on console-ams.rpki-client.org