$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer (raw, json) Hash identifier: SyFWX6PVa4supY1R89L5ljKvylxJzX3Ly8ASnGPWxDs= Subject key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15A95C31B2BDAB29776E79F808E27E9F68693E9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft caRepository: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Jul 2024 22:06:38 +0000 Certificate not after: Wed 09 Jul 2025 22:11:38 +0000 Subordinate resources: IP: 103.198.120.0/22 IP: 202.52.48.0/23 IP: 2403:1880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a9:5c:31:b2:bd:ab:29:77:6e:79:f8:08:e2:7e:9f:68:69:3e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 10 22:06:38 2024 GMT Not After : Jul 9 22:11:38 2025 GMT Subject: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:8c:a9:c4:03:7a:dc:29:79:54:c5:81:e9: 23:9a:4a:19:fb:f6:7a:1d:f4:2f:38:fc:85:c5:9f: 4b:e9:b6:c3:67:d4:23:ed:c8:4f:85:ab:ec:8b:6e: 51:1f:5c:00:e1:de:2d:03:1b:2a:92:4d:19:6c:f7: 7d:33:52:95:be:5b:05:d6:49:ce:6c:ba:ec:56:58: d2:56:bd:51:d2:47:07:30:6d:8e:0d:26:4c:21:34: 31:a8:4d:76:86:04:5b:ee:02:af:b5:2d:3f:3c:27: e9:81:03:49:9c:fd:5d:d4:9c:f3:e5:36:d5:85:8d: a9:b3:ca:d8:da:2c:77:a5:03:dc:f2:fe:fb:78:11: df:0a:e7:5e:da:7f:89:2b:0b:1b:9b:b1:93:00:83: c2:d4:dd:91:99:0b:a4:90:b1:7b:92:27:e7:8c:3e: f8:66:3d:94:35:89:c7:91:9b:8d:26:4d:a8:10:ba: 9c:db:e7:46:ec:44:81:2f:84:aa:83:34:5d:22:d0: 3e:19:5f:16:64:44:86:44:54:f5:4c:a2:f5:c4:a4: 56:ff:52:19:a0:5d:ac:ed:60:7b:65:4e:94:48:75: 9b:72:55:ba:74:36:1e:c6:34:6a:38:98:9b:ee:55: c6:33:48:76:f2:c9:01:2d:d5:db:e5:5c:2c:14:dd: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.120.0/22 202.52.48.0/23 IPv6: 2403:1880::/32 Signature Algorithm: sha256WithRSAEncryption 4c:9d:9e:13:09:f9:6a:19:58:cc:64:31:4e:5c:8e:50:4b:e4: c0:6f:7a:8a:ec:e4:ee:cd:42:de:56:1b:64:b8:88:27:f5:a0: 05:f7:b1:c8:17:ca:8e:28:25:58:2a:11:8a:42:2f:0f:4e:13: 85:87:df:e0:0b:28:dd:15:a0:53:35:e1:f0:3e:c4:4d:5e:31: 47:76:7a:73:df:7a:a1:fe:0d:9c:3f:4f:8a:13:21:c1:92:e9: dd:5b:85:6e:a6:e2:98:d9:96:76:f0:32:29:a9:e8:df:fc:a5: 09:ff:8a:96:ae:db:04:62:5b:b5:d0:b5:cc:a5:06:b0:8f:96: 99:10:45:c6:3f:5e:5e:bd:86:30:1c:75:5f:68:9a:2a:a9:ec: 3c:02:6a:9f:2a:fe:47:f0:89:a6:fa:13:1f:ef:f5:81:3e:c8: 1e:28:07:2d:6d:96:2d:d4:83:6e:98:68:2a:e6:1b:27:26:34: d0:7c:e3:be:da:eb:c0:6f:44:be:53:44:6e:d1:c9:9f:af:bd: 7a:ec:b3:f0:a6:de:17:14:e8:1b:9a:20:52:04:6a:f2:20:d9: 74:c6:22:e7:4c:51:f9:dd:11:0a:42:22:3f:f3:68:c7:ce:00: 4e:ac:01:34:e0:d6:80:2f:ad:2a:41:29:94:a6:6d:6f:16:87: e0:94:3c:55 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUFalcMbK9qyl3bnn4COJ+n2hpPpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMDIyMDYzOFoX DTI1MDcwOTIyMTEzOFowMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1 MUM0RTQ0QjBDQkMxM0ZGREE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpajKnEA3rcKXlUxYHpI5pKGfv2eh30Lzj8hcWfS+m2w2fUI+3IT4Wr7Itu UR9cAOHeLQMbKpJNGWz3fTNSlb5bBdZJzmy67FZY0la9UdJHBzBtjg0mTCE0MahN doYEW+4Cr7UtPzwn6YEDSZz9XdSc8+U21YWNqbPK2Nosd6UD3PL++3gR3wrnXtp/ iSsLG5uxkwCDwtTdkZkLpJCxe5In54w++GY9lDWJx5GbjSZNqBC6nNvnRuxEgS+E qoM0XSLQPhlfFmREhkRU9Uyi9cSkVv9SGaBdrO1ge2VOlEh1m3JVunQ2HsY0ajiY m+5VxjNIdvLJAS3V2+VcLBTd5/kCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPvTsoyQdVKd7oFRxORLDLwT/9qRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0 LThjMmQtNGViMS1iNGNkLTM1YjQ5MjE2ZTA3My8wL0ZCRDNCMjhDOTA3NTUyOURF RTgxNTFDNEU0NEIwQ0JDMTNGRkRBOTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnxngDBAHKNDAwDQQCAAIwBwMFACQDGIAwDQYJKoZIhvcNAQELBQADggEBAEyd nhMJ+WoZWMxkMU5cjlBL5MBveors5O7NQt5WG2S4iCf1oAX3scgXyo4oJVgqEYpC Lw9OE4WH3+ALKN0VoFM14fA+xE1eMUd2enPfeqH+DZw/T4oTIcGS6d1bhW6m4pjZ lnbwMimp6N/8pQn/ipau2wRiW7XQtcylBrCPlpkQRcY/Xl69hjAcdV9omiqp7DwC ap8q/kfwiab6Ex/v9YE+yB4oBy1tli3Ug26YaCrmGycmNNB8477a68BvRL5TRG7R yZ+vvXrss/Cm3hcU6BuaIFIEavIg2XTGIudMUfndEQpCIj/zaMfOAE6sATTg1oAv rSpBKZSmbW8Wh+CUPFU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org