$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer (raw, json) Hash identifier: a9iZBnSYg6Xq4lW8jfuMzVfDs8GCjtSHJV5Ba1GTjGg= Subject key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 200DCC368A70ADF44572F4B2F8BEF81E8D9B5549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft caRepository: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 20:51:49 +0000 Certificate not after: Thu 18 Dec 2025 20:56:49 +0000 Subordinate resources: IP: 103.134.16.0/24 IP: 2001:df7:af00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0d:cc:36:8a:70:ad:f4:45:72:f4:b2:f8:be:f8:1e:8d:9b:55:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 19 20:51:49 2024 GMT Not After : Dec 18 20:56:49 2025 GMT Subject: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:3e:6d:65:1c:68:e4:82:e8:3c:ec:13:5b: 5a:9c:e7:62:c8:d3:1d:e0:0d:2b:9c:55:b1:71:e9: 24:b3:7d:81:fd:57:fc:b6:63:d2:51:e6:eb:e6:95: 77:17:c6:46:57:79:e3:62:75:b7:72:21:75:76:3f: 6e:a6:d2:b2:4f:3f:5e:f2:09:6a:cc:69:1d:a0:eb: 5f:85:18:a3:fb:62:ec:56:6f:4f:be:36:34:f1:6c: bc:df:90:4c:6a:ca:a8:6c:7c:88:49:e4:64:3e:27: 02:6f:0a:86:44:0e:0b:2e:7d:a8:aa:d6:ca:aa:9e: e9:c5:5d:39:3a:a2:41:fb:b7:64:39:ff:2b:54:6f: 5a:b9:9f:52:02:e7:86:26:69:13:62:dc:00:f5:d3: 5d:b2:83:6e:92:9b:a0:31:b7:a3:f4:c5:15:04:7f: 3b:a7:7b:ac:df:1f:c8:ad:63:49:0c:22:70:dd:90: aa:20:01:30:65:1e:e7:86:be:79:75:ae:ac:85:5e: 66:7e:4a:cc:13:59:d7:f4:2a:75:6b:1f:e9:b4:18: 50:c7:52:1c:b1:f3:c3:7f:dc:97:ff:28:cd:3b:9d: 0a:e9:64:55:ff:c3:9f:9f:21:1f:e0:d3:0c:aa:fd: 4c:97:72:66:1c:15:5c:2f:ca:5e:c9:e1:cf:87:3e: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.16.0/24 IPv6: 2001:df7:af00::/48 Signature Algorithm: sha256WithRSAEncryption 54:bd:eb:e2:53:52:28:39:d1:6b:85:ba:5e:ae:04:97:b7:c3: b3:70:30:fd:66:e8:69:1c:8e:c9:a5:f3:68:c6:33:7d:56:ce: b6:ca:dd:d3:e1:d2:83:9f:ac:20:50:41:c0:a1:0a:ee:17:48: 24:7a:c1:b4:6f:11:9a:e7:7d:1b:8d:9e:c7:97:b1:81:c0:31: ad:b5:0e:83:71:6a:86:af:f0:bc:87:30:cd:9f:4f:46:24:3e: c9:9e:6f:78:2d:66:35:9a:64:c9:1b:e4:61:08:20:22:99:25: b5:d5:67:a7:ef:ae:ba:46:80:f1:49:f3:1c:9e:c8:2f:74:df: 8e:cd:01:c5:98:60:b9:8d:e6:dd:90:1e:b7:1c:7f:17:cd:56: 36:ff:c6:64:45:d9:f9:3f:72:f6:71:9c:64:fe:00:e5:00:70: ef:b7:5f:07:38:9e:48:72:c1:37:a5:cd:fe:dd:9d:26:7d:5d: 35:d9:2b:61:b9:d8:b1:8f:8e:cf:db:cd:5f:c9:98:53:00:49: d2:80:c7:8b:e9:a3:d1:71:dd:38:c2:14:f8:9c:41:c1:6a:30: 43:a9:6f:27:77:fa:59:50:3d:ab:61:f0:9b:2d:40:b8:32:68: ef:25:26:89:f8:f5:09:30:18:e9:f1:2b:9c:04:ef:52:90:f1: b3:f0:7b:c1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUIA3MNopwrfRFcvSy+L74Ho2bVUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxOTIwNTE0OVoX DTI1MTIxODIwNTY0OVowMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2 RTVGNTc5Q0NCMzBDMzdFRUY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGZPm1lHGjkgug87BNbWpznYsjTHeANK5xVsXHpJLN9gf1X/LZj0lHm6+aV dxfGRld542J1t3IhdXY/bqbSsk8/XvIJasxpHaDrX4UYo/ti7FZvT742NPFsvN+Q TGrKqGx8iEnkZD4nAm8KhkQOCy59qKrWyqqe6cVdOTqiQfu3ZDn/K1RvWrmfUgLn hiZpE2LcAPXTXbKDbpKboDG3o/TFFQR/O6d7rN8fyK1jSQwicN2QqiABMGUe54a+ eXWurIVeZn5KzBNZ1/QqdWsf6bQYUMdSHLHzw3/cl/8ozTudCulkVf/Dn58hH+DT DKr9TJdyZhwVXC/KXsnhz4c+BJECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxPh2JSTD6/mBJuX1ecyzDDfu9jMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNWFhOTNk LTc4N2ItNGExNy04N2QwLTdlZjQxYjBmMmRlZi8wL0ZDNEY4NzYyNTI0QzNFQkY5 ODEyNkU1RjU3OUNDQjMwQzM3RUVGNjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnhhAwDwQCAAIwCQMHACABDfevADANBgkqhkiG9w0BAQsFAAOCAQEAVL3r4lNS KDnRa4W6Xq4El7fDs3Aw/WboaRyOyaXzaMYzfVbOtsrd0+HSg5+sIFBBwKEK7hdI JHrBtG8Rmud9G42ex5exgcAxrbUOg3Fqhq/wvIcwzZ9PRiQ+yZ5veC1mNZpkyRvk YQggIpkltdVnp++uukaA8UnzHJ7IL3Tfjs0BxZhguY3m3ZAetxx/F81WNv/GZEXZ +T9y9nGcZP4A5QBw77dfBzieSHLBN6XN/t2dJn1dNdkrYbnYsY+Oz9vNX8mYUwBJ 0oDHi+mj0XHdOMIU+JxBwWowQ6lvJ3f6WVA9q2Hwmy1AuDJo7yUmifj1CTAY6fEr nATvUpDxs/B7wQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:54:07 2025 by rpki-client