$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer (raw, json) Hash identifier: dktWYHTVT0pSrOtcZ1M9qsxdJWH7rSVgEB9V7uZ6X3Q= Subject key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 147B2D8DCA88A30979E89340C451E691DEA4480B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft caRepository: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 15:29:16 +0000 Certificate not after: Mon 30 Jun 2025 15:34:16 +0000 Subordinate resources: IP: 103.112.189.0/24 IP: 2001:df4:b300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7b:2d:8d:ca:88:a3:09:79:e8:93:40:c4:51:e6:91:de:a4:48:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 15:29:16 2024 GMT Not After : Jun 30 15:34:16 2025 GMT Subject: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:bc:f8:6d:f7:62:87:99:c5:3b:fe:8e:a7: fb:64:33:d0:ea:19:a5:12:be:a5:11:4e:f9:33:ab: 13:5b:87:10:99:ea:35:6e:e3:4c:40:da:62:91:35: 6b:30:2c:27:61:4e:37:54:66:05:e9:d4:14:65:18: 05:d3:50:1f:ac:34:d8:50:c7:4e:15:4c:bf:e6:e9: 62:64:1c:2a:27:b7:e0:d8:ca:52:fb:00:99:3c:7d: 03:88:f6:89:71:e8:5f:39:a1:c2:37:b3:0b:d1:80: c4:69:45:26:df:96:3e:b6:8c:6e:b8:17:a8:23:2e: ec:56:08:84:f2:c0:cd:d5:14:97:90:9b:f3:94:89: 5e:c2:20:ad:cd:93:f7:b7:48:e1:73:86:9e:16:fb: 72:f5:9e:88:dc:74:08:09:6e:4f:85:1b:30:51:c3: 4b:3d:78:8e:0d:84:5c:68:64:96:84:30:1f:1e:ca: 39:e4:47:db:44:9c:67:b6:1a:24:92:38:b5:7c:49: 27:4f:03:92:ef:85:a8:7f:c4:2c:17:e3:fb:3b:e0: 35:14:4f:49:36:8b:5c:a8:66:4b:a2:c7:00:3d:cf: 58:aa:95:01:84:4b:9f:7f:0d:4c:c4:5d:2f:f8:6a: 36:70:41:6c:a2:71:8d:7a:11:8c:d5:66:9d:08:28: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.189.0/24 IPv6: 2001:df4:b300::/48 Signature Algorithm: sha256WithRSAEncryption 3f:d4:d4:8e:c3:0b:e3:11:96:cd:7a:c5:24:80:d6:93:5f:04: 1a:e7:00:58:7f:eb:b2:fd:d6:f6:e1:27:d8:a7:bf:ef:13:a0: a5:f7:a5:97:e3:65:86:b5:1f:c7:2c:27:af:aa:f6:b2:c6:e5: c8:e8:58:4d:62:0b:94:8f:7a:d1:d7:39:2e:d6:3a:26:d8:8a: 19:ed:cc:f3:04:78:6d:8e:bc:3b:d7:3b:64:6e:35:2d:af:57: 06:9e:ad:f2:dd:ff:b4:50:b3:fe:c0:b7:1f:83:e0:24:d0:79: c8:0c:7e:13:78:4e:2a:3c:e0:d2:65:4a:9d:34:23:23:e4:f4: 24:c3:ef:56:9b:c9:47:61:61:fa:a7:9e:e1:a1:2a:53:e7:4b: 1f:40:93:99:a9:2f:3f:a0:bf:51:bc:3c:74:1b:56:51:a7:07: a7:89:b3:dd:96:55:9b:ac:66:1d:96:30:24:f1:a7:27:4b:a3: e2:13:f5:3c:4b:1d:8e:b4:7a:60:3b:64:b5:e7:cd:b5:da:8c: ff:cc:9b:06:b9:ec:c1:24:d9:c7:2b:4e:e8:0a:4c:a9:b6:e5: ad:97:1e:59:62:8b:8d:96:97:83:78:90:3b:1e:82:84:98:2b: d7:f3:95:cd:a6:d2:35:3d:cc:6e:f6:6a:d0:6f:f6:06:14:6f: 2a:e7:d2:8c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUFHstjcqIowl56JNAxFHmkd6kSAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1MjkxNloX DTI1MDYzMDE1MzQxNlowMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5 MkE0ODlENTA2MDlGOTI0MTg3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0JvPht92KHmcU7/o6n+2Qz0OoZpRK+pRFO+TOrE1uHEJnqNW7jTEDaYpE1 azAsJ2FON1RmBenUFGUYBdNQH6w02FDHThVMv+bpYmQcKie34NjKUvsAmTx9A4j2 iXHoXzmhwjezC9GAxGlFJt+WPraMbrgXqCMu7FYIhPLAzdUUl5Cb85SJXsIgrc2T 97dI4XOGnhb7cvWeiNx0CAluT4UbMFHDSz14jg2EXGhkloQwHx7KOeRH20ScZ7Ya JJI4tXxJJ08Dku+FqH/ELBfj+zvgNRRPSTaLXKhmS6LHAD3PWKqVAYRLn38NTMRd L/hqNnBBbKJxjXoRjNVmnQgooHUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPwuhb6awKa+U7eSpInVBgn5JBh/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNWNmYmEz LWUwMTctNGU4YS05YWM1LWYyZDMwNDMxNzM2NS8wL0ZDMkU4NUJFOUFDMEE2QkU1 M0I3OTJBNDg5RDUwNjA5RjkyNDE4N0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABncL0wDwQCAAIwCQMHACABDfSzADANBgkqhkiG9w0BAQsFAAOCAQEAP9TUjsML 4xGWzXrFJIDWk18EGucAWH/rsv3W9uEn2Ke/7xOgpfell+NlhrUfxywnr6r2ssbl yOhYTWILlI960dc5LtY6JtiKGe3M8wR4bY68O9c7ZG41La9XBp6t8t3/tFCz/sC3 H4PgJNB5yAx+E3hOKjzg0mVKnTQjI+T0JMPvVpvJR2Fh+qee4aEqU+dLH0CTmakv P6C/Ubw8dBtWUacHp4mz3ZZVm6xmHZYwJPGnJ0uj4hP1PEsdjrR6YDtktefNtdqM /8ybBrnswSTZxytO6ApMqbblrZceWWKLjZaXg3iQOx6ChJgr1/OVzabSNT3MbvZq 0G/2BhRvKufSjA== -----END CERTIFICATE-----Generated at Sun Feb 16 21:09:15 2025 by rpki-client