$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer File: FA479894B4849679EBB9029580F04B8BD74CE048.cer (raw, json) Hash identifier: fVem0+vUOSBUuiJp3jyUNGvEPnnHO4HmNxxPjKn2qVY= Subject key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C95D68D463C55C24C0D383C7A81D72C1A0D2205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft caRepository: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Sep 2024 04:22:18 +0000 Certificate not after: Wed 24 Sep 2025 04:27:18 +0000 Subordinate resources: IP: 2001:df4:44c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:95:d6:8d:46:3c:55:c2:4c:0d:38:3c:7a:81:d7:2c:1a:0d:22:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 25 04:22:18 2024 GMT Not After : Sep 24 04:27:18 2025 GMT Subject: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:19:62:52:83:ce:11:07:b9:4d:0b:e7:25: 0a:33:a6:e5:9f:e1:71:8e:db:69:29:f1:d0:3e:31: 2f:6e:16:be:e1:08:94:40:2f:ab:37:80:e6:96:81: 1d:c1:1c:9a:9a:1a:6a:76:6c:72:78:58:89:27:e5: ae:3b:94:5d:5a:80:cf:c0:bd:a3:81:a5:6d:4f:94: ba:14:52:94:3b:8b:ff:d5:88:77:59:a2:36:2f:f9: 7f:c0:00:d2:43:6f:eb:1b:ad:9e:67:96:93:54:13: 34:9e:03:3a:0e:92:0e:57:39:27:26:57:0f:97:29: e0:c3:dd:fd:a6:09:2d:9a:3e:52:61:f3:e3:10:37: 7f:47:62:73:48:5d:64:17:be:70:dc:de:75:d3:1c: 3d:79:85:35:77:a7:7a:ca:20:66:a1:41:29:29:00: e4:72:26:b9:15:16:99:eb:84:52:c6:6c:95:0b:06: 68:05:d0:f9:02:a5:53:dc:79:06:11:ed:0d:00:00: 6f:b8:08:a3:81:97:a6:86:e9:33:01:2f:1e:da:bc: 87:d3:5d:4b:71:37:08:e7:ed:a6:5b:cd:de:22:3d: 83:95:85:f4:4d:21:89:a8:f7:2a:cb:6d:9e:50:f3: e6:9a:a6:8e:c6:5c:71:be:27:1d:93:a9:3d:83:c6: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:44c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:2b:55:31:a6:ae:1d:fa:86:83:12:f7:bd:c8:01:d8:9c:f4: c2:90:39:63:d4:e1:cf:2f:0f:25:01:96:6a:85:7d:3f:4c:78: c9:47:21:c5:58:fa:95:5d:6c:d8:d7:36:fc:dd:0f:1e:d3:4a: 25:b6:39:80:80:88:07:2f:85:62:98:3d:91:71:9c:2b:9c:b0: 50:e0:c8:83:2e:b5:80:3e:b7:5b:ff:66:76:51:11:2e:11:9b: 61:b0:17:b6:18:f9:df:de:eb:69:44:8d:55:ec:13:ad:40:05: e3:4d:ca:30:fc:14:13:1d:0b:b3:dc:32:ce:cc:e3:d9:d3:b4: 23:00:27:5b:84:23:2e:5b:cc:4d:58:56:98:02:d0:85:ee:b7: 8c:4d:0f:bf:7f:57:26:21:44:05:e7:bc:11:da:38:df:ba:fc: 23:ac:4f:1b:e5:f7:bd:f4:97:3f:01:02:02:d5:f6:32:a2:3e: 9d:ea:a4:45:db:32:0e:e6:77:39:4e:83:ae:6a:78:51:49:f0: 94:f3:da:09:9e:d4:4a:b0:bc:d7:5d:8b:c9:bf:c6:75:f2:92: 13:0b:98:e9:44:63:9b:df:e3:0f:7f:ca:28:c0:a2:db:55:d2: 9a:39:82:45:c5:27:45:42:02:c5:f1:46:f9:f2:a4:83:ca:d8: b2:60:82:c3 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUTJXWjUY8VcJMDTg8eoHXLBoNIgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyNTA0MjIxOFoX DTI1MDkyNDA0MjcxOFowMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkw Mjk1ODBGMDRCOEJENzRDRTA0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJndGWJSg84RB7lNC+clCjOm5Z/hcY7baSnx0D4xL24WvuEIlEAvqzeA5paB HcEcmpoaanZscnhYiSflrjuUXVqAz8C9o4GlbU+UuhRSlDuL/9WId1miNi/5f8AA 0kNv6xutnmeWk1QTNJ4DOg6SDlc5JyZXD5cp4MPd/aYJLZo+UmHz4xA3f0dic0hd ZBe+cNzeddMcPXmFNXenesogZqFBKSkA5HImuRUWmeuEUsZslQsGaAXQ+QKlU9x5 BhHtDQAAb7gIo4GXpobpMwEvHtq8h9NdS3E3COftplvN3iI9g5WF9E0hiaj3Kstt nlDz5pqmjsZccb4nHZOpPYPGTUECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpHmJS0hJZ567kClYDwS4vXTOBIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YjA3YTll LTYyZGYtNDgwOC05ZDJhLWE2ZTY4ODRiY2JiYi8xL0ZBNDc5ODk0QjQ4NDk2NzlF QkI5MDI5NTgwRjA0QjhCRDc0Q0UwNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30RMAwDQYJKoZIhvcNAQELBQADggEBADQrVTGmrh36hoMS973IAdic9MKQ OWPU4c8vDyUBlmqFfT9MeMlHIcVY+pVdbNjXNvzdDx7TSiW2OYCAiAcvhWKYPZFx nCucsFDgyIMutYA+t1v/ZnZRES4Rm2GwF7YY+d/e62lEjVXsE61ABeNNyjD8FBMd C7PcMs7M49nTtCMAJ1uEIy5bzE1YVpgC0IXut4xND79/VyYhRAXnvBHaON+6/COs Txvl9730lz8BAgLV9jKiPp3qpEXbMg7mdzlOg65qeFFJ8JTz2gme1EqwvNddi8m/ xnXykhMLmOlEY5vf4w9/yijAottV0po5gkXFJ0VCAsXxRvnypIPK2LJggsM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org