$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer (raw, json) Hash identifier: tCwHA4pQBawvZQDRJ/sxu9eNJ5gEGvbDuQ3Z3K6VTZ0= Subject key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 443D1B2AFC3F764E076EC9210FFD31B7DE1986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft caRepository: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Dec 2024 18:43:45 +0000 Certificate not after: Thu 11 Dec 2025 18:48:45 +0000 Subordinate resources: IP: 180.94.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3d:1b:2a:fc:3f:76:4e:07:6e:c9:21:0f:fd:31:b7:de:19:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 12 18:43:45 2024 GMT Not After : Dec 11 18:48:45 2025 GMT Subject: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:98:7c:62:03:49:c5:5b:6a:b8:8c:76:c9: 9f:b9:a9:2b:e7:a1:bd:3b:0c:af:af:7a:98:2c:b0: d0:b9:51:64:e9:42:b0:39:62:f7:27:21:8a:6d:ad: 70:e0:01:37:39:41:cd:e6:16:9a:65:4f:45:8f:55: 09:47:84:08:84:bc:66:6c:1e:20:2f:a0:e0:87:03: 01:a6:fe:85:e7:2d:ac:2b:6c:8a:61:fa:3c:d0:6a: ab:9b:ea:b5:fc:fa:56:5b:e9:e4:b4:b4:11:21:4d: b8:4d:ec:5a:e1:2a:e4:9d:0e:32:d0:03:6b:38:6f: c3:49:39:00:f4:fb:06:58:30:1c:37:ce:36:81:34: 22:3f:5a:16:4f:ce:4a:2c:ba:b2:35:2c:d9:8d:77: c8:90:00:1a:40:cd:91:09:e6:0c:a9:93:fb:e8:b0: f3:bf:d1:7d:00:cc:c0:b5:ce:dc:7d:bb:47:a6:71: 4d:71:2f:a7:fe:24:64:49:1a:f1:55:3c:ec:57:f7: 1c:ee:09:0c:a0:1d:8c:16:b4:94:c3:e3:6e:b4:ee: 4a:05:e0:fa:da:f7:1f:10:87:00:0f:7c:0a:fb:49: 9b:2c:59:be:37:6b:6f:45:87:24:78:e6:fb:48:b6: e5:da:3b:55:8b:53:0f:3e:2d:7b:bf:1c:c3:87:bb: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.94.8.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c6:40:0d:ca:0f:e1:c3:0b:58:a2:dc:7a:1b:58:cb:ee:24: 4b:1d:f5:ce:89:c0:ec:62:1a:ae:b5:f9:7c:c6:af:4b:70:29: ad:a9:63:e3:0e:46:b4:3b:8e:0b:cd:ad:76:78:62:b3:13:ae: 11:93:cb:ed:3f:52:27:7c:ac:ee:9b:e3:ae:8c:4b:92:49:c0: a5:ba:4a:ec:88:db:ad:cb:ea:f5:74:af:79:19:21:51:93:ca: e7:fb:19:c3:6f:5c:d9:c2:6d:5c:9d:3e:a7:f4:9e:ae:96:96: 14:82:f8:14:cf:92:0b:cb:6b:e8:25:c5:8a:72:68:f1:af:8a: 88:d2:1b:f7:c2:47:5a:e8:14:e2:4d:fa:d5:2c:78:6c:70:03: e4:5b:71:c7:1a:fb:da:82:3b:2e:1d:ea:d3:22:11:08:7e:82: ae:06:d4:f3:64:fc:21:4c:03:60:bb:ab:a7:ac:c1:8f:3e:32: 1d:36:1a:58:fe:d5:5e:b5:e3:55:79:ae:e4:ce:71:5d:d1:a5: 58:ef:de:ab:15:a6:86:70:0b:a9:2c:9e:41:41:8c:4e:79:73: 8d:1d:f9:2c:37:c9:32:91:19:ac:be:9f:f4:8e:00:4a:79:fe: b8:8c:3f:76:1f:c6:82:88:51:f8:e6:1e:12:c9:73:43:03:57: e1:b4:4a:52 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITRD0bKvw/dk4HbskhD/0xt94ZhjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjQxMjEyMTg0MzQ1WhcN MjUxMjExMTg0ODQ1WjAzMTEwLwYDVQQDEyhGQTVGNkNDOTlCQUM4MjlENERFN0JF Q0VFODIzMTk5NjU3RDAxOENEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXqYfGIDScVbariMdsmfuakr56G9Owyvr3qYLLDQuVFk6UKwOWL3JyGKba1w 4AE3OUHN5haaZU9Fj1UJR4QIhLxmbB4gL6DghwMBpv6F5y2sK2yKYfo80Gqrm+q1 /PpWW+nktLQRIU24Texa4SrknQ4y0ANrOG/DSTkA9PsGWDAcN842gTQiP1oWT85K LLqyNSzZjXfIkAAaQM2RCeYMqZP76LDzv9F9AMzAtc7cfbtHpnFNcS+n/iRkSRrx VTzsV/cc7gkMoB2MFrSUw+NutO5KBeD62vcfEIcAD3wK+0mbLFm+N2tvRYckeOb7 SLbl2jtVi1MPPi17vxzDh7u9twIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU+l9syZusgp1N577O6CMZllfQGM0wHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzU2ZjFlYjRiLTQ4ZGMtNGVlYS05MTgxLTEyOGNiMjhiM2RiYS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGIt NDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRE RTdCRUNFRTgyMzE5OTY1N0QwMThDRC5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AbReCDANBgkqhkiG9w0BAQsFAAOCAQEAbsZADcoP4cMLWKLcehtYy+4kSx31zonA 7GIarrX5fMavS3Apralj4w5GtDuOC82tdnhisxOuEZPL7T9SJ3ys7pvjroxLkknA pbpK7Ijbrcvq9XSveRkhUZPK5/sZw29c2cJtXJ0+p/SerpaWFIL4FM+SC8tr6CXF inJo8a+KiNIb98JHWugU4k361Sx4bHAD5Ftxxxr72oI7Lh3q0yIRCH6CrgbU82T8 IUwDYLurp6zBjz4yHTYaWP7VXrXjVXmu5M5xXdGlWO/eqxWmhnALqSyeQUGMTnlz jR35LDfJMpEZrL6f9I4ASnn+uIw/dh/GgohR+OYeEslzQwNX4bRKUg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:52 2025 by rpki-client