$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer (raw, json) Hash identifier: 7H86/rw+JI4Y31TqmfXXWu1cLc1SD8wFw67qtRGy2mI= Subject key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 25D82EE7DE2C77F26D961A4AB16ECBFB91F0FE57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft caRepository: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Jan 2024 12:27:54 +0000 Certificate not after: Thu 16 Jan 2025 12:32:54 +0000 Subordinate resources: IP: 103.134.16.0/24 IP: 2001:df7:af00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d8:2e:e7:de:2c:77:f2:6d:96:1a:4a:b1:6e:cb:fb:91:f0:fe:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 18 12:27:54 2024 GMT Not After : Jan 16 12:32:54 2025 GMT Subject: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:3e:6d:65:1c:68:e4:82:e8:3c:ec:13:5b: 5a:9c:e7:62:c8:d3:1d:e0:0d:2b:9c:55:b1:71:e9: 24:b3:7d:81:fd:57:fc:b6:63:d2:51:e6:eb:e6:95: 77:17:c6:46:57:79:e3:62:75:b7:72:21:75:76:3f: 6e:a6:d2:b2:4f:3f:5e:f2:09:6a:cc:69:1d:a0:eb: 5f:85:18:a3:fb:62:ec:56:6f:4f:be:36:34:f1:6c: bc:df:90:4c:6a:ca:a8:6c:7c:88:49:e4:64:3e:27: 02:6f:0a:86:44:0e:0b:2e:7d:a8:aa:d6:ca:aa:9e: e9:c5:5d:39:3a:a2:41:fb:b7:64:39:ff:2b:54:6f: 5a:b9:9f:52:02:e7:86:26:69:13:62:dc:00:f5:d3: 5d:b2:83:6e:92:9b:a0:31:b7:a3:f4:c5:15:04:7f: 3b:a7:7b:ac:df:1f:c8:ad:63:49:0c:22:70:dd:90: aa:20:01:30:65:1e:e7:86:be:79:75:ae:ac:85:5e: 66:7e:4a:cc:13:59:d7:f4:2a:75:6b:1f:e9:b4:18: 50:c7:52:1c:b1:f3:c3:7f:dc:97:ff:28:cd:3b:9d: 0a:e9:64:55:ff:c3:9f:9f:21:1f:e0:d3:0c:aa:fd: 4c:97:72:66:1c:15:5c:2f:ca:5e:c9:e1:cf:87:3e: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.16.0/24 IPv6: 2001:df7:af00::/48 Signature Algorithm: sha256WithRSAEncryption 3f:2a:57:f4:f7:35:33:d0:71:c2:39:da:3f:5c:7e:89:30:15: bb:72:d5:d7:fb:7c:2c:7d:d3:4c:86:9c:74:dd:50:af:73:aa: e4:ae:6f:80:0e:d9:9e:ca:ab:c0:75:b4:c3:c4:9c:a8:f1:85: a1:83:38:b6:f0:0d:0a:8b:65:2a:c8:73:bc:54:43:d4:d5:7a: 77:a3:21:c5:73:00:d1:b0:c0:2f:9d:c0:75:d3:85:e0:2d:3f: db:fe:2a:4a:6f:b6:da:19:07:65:7c:16:af:ae:aa:f4:48:29: 9e:15:3f:c5:6b:78:4d:0a:01:5d:0a:09:23:52:db:e8:4c:7d: 35:51:3c:86:27:4e:47:84:7a:41:66:8e:1c:f4:78:ce:66:f6: 45:2d:d2:56:fc:07:68:08:c8:8f:e8:77:4c:4c:f9:ff:3e:ba: 69:dc:a0:35:6a:3f:99:4e:eb:13:18:36:11:ee:b9:08:40:6e: 7f:53:03:8d:4a:3f:ea:d1:25:52:eb:75:6f:04:fc:1c:f0:e0: 40:48:a6:9e:4f:fb:5d:13:f2:d5:65:74:4e:32:51:a2:98:50: 9a:ba:f6:cb:d7:21:57:14:a2:92:f8:fd:71:4d:9b:c3:1c:f9: 17:78:8d:63:9e:34:ca:ae:10:f2:dc:49:23:c4:f5:f9:ff:b1: 9c:35:0e:98 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJdgu594sd/JtlhpKsW7L+5Hw/lcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExODEyMjc1NFoX DTI1MDExNjEyMzI1NFowMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2 RTVGNTc5Q0NCMzBDMzdFRUY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGZPm1lHGjkgug87BNbWpznYsjTHeANK5xVsXHpJLN9gf1X/LZj0lHm6+aV dxfGRld542J1t3IhdXY/bqbSsk8/XvIJasxpHaDrX4UYo/ti7FZvT742NPFsvN+Q TGrKqGx8iEnkZD4nAm8KhkQOCy59qKrWyqqe6cVdOTqiQfu3ZDn/K1RvWrmfUgLn hiZpE2LcAPXTXbKDbpKboDG3o/TFFQR/O6d7rN8fyK1jSQwicN2QqiABMGUe54a+ eXWurIVeZn5KzBNZ1/QqdWsf6bQYUMdSHLHzw3/cl/8ozTudCulkVf/Dn58hH+DT DKr9TJdyZhwVXC/KXsnhz4c+BJECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxPh2JSTD6/mBJuX1ecyzDDfu9jMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNWFhOTNk LTc4N2ItNGExNy04N2QwLTdlZjQxYjBmMmRlZi8wL0ZDNEY4NzYyNTI0QzNFQkY5 ODEyNkU1RjU3OUNDQjMwQzM3RUVGNjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnhhAwDwQCAAIwCQMHACABDfevADANBgkqhkiG9w0BAQsFAAOCAQEAPypX9Pc1 M9BxwjnaP1x+iTAVu3LV1/t8LH3TTIacdN1Qr3Oq5K5vgA7ZnsqrwHW0w8ScqPGF oYM4tvANCotlKshzvFRD1NV6d6MhxXMA0bDAL53AddOF4C0/2/4qSm+22hkHZXwW r66q9EgpnhU/xWt4TQoBXQoJI1Lb6Ex9NVE8hidOR4R6QWaOHPR4zmb2RS3SVvwH aAjIj+h3TEz5/z66adygNWo/mU7rExg2Ee65CEBuf1MDjUo/6tElUut1bwT8HPDg QEimnk/7XRPy1WV0TjJRophQmrr2y9chVxSikvj9cU2bwxz5F3iNY540yq4Q8txJ I8T1+f+xnDUOmA== -----END CERTIFICATE-----Generated at Wed May 8 04:38:03 2024 by rpki-client on console-fra.rpki-client.org