$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer (raw, json) Hash identifier: dDS3xfXet0OXucACelqSPF7bk3RvesuenWdl/6hSCV8= Subject key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2008593A1C44BB3869F8C6C1AEFDE70F7F20349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft caRepository: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 17:21:50 +0000 Certificate not after: Mon 30 Jun 2025 17:26:50 +0000 Subordinate resources: IP: 121.100.0.0/21 IP: 175.158.32.0/19 IP: 2402:9800::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:08:59:3a:1c:44:bb:38:69:f8:c6:c1:ae:fd:e7:0f:7f:20:34:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 17:21:50 2024 GMT Not After : Jun 30 17:26:50 2025 GMT Subject: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:84:7b:0b:c8:f1:1b:30:4a:50:dd:07:cf: 08:6b:85:3d:96:95:28:35:7b:40:24:c0:2e:86:2f: 81:d8:3d:21:dd:d6:7f:13:92:68:f6:d9:66:7f:16: 3c:31:1a:91:d5:30:62:82:5b:75:da:83:85:fa:34: 56:54:9e:3a:64:68:d8:ec:ae:2b:92:34:4b:7f:c0: 18:9c:5c:6f:e6:f4:25:7c:50:5c:54:91:93:bf:3f: a1:97:59:29:62:8a:c0:83:fa:d6:4e:c2:92:b5:9a: 83:67:d4:93:95:ed:02:54:85:e2:19:49:87:52:64: 0b:07:24:8a:65:64:a1:34:b0:4a:03:76:ce:1a:f3: 51:9c:2a:66:9e:87:a1:8b:26:78:1c:bd:24:bd:3f: ab:b0:67:e5:91:7b:d5:99:6e:d6:3a:61:43:b7:8b: 93:25:a7:bd:90:20:32:61:8e:c6:28:75:70:ef:8d: f5:39:f4:6b:13:d7:83:3a:9b:c1:8a:1b:1e:68:92: 39:e9:36:a9:8a:21:63:df:49:63:5b:e2:31:03:d4: 83:2f:63:10:78:92:f7:ea:7e:04:78:5a:6e:55:fa: 8a:19:fd:2c:14:18:8a:6e:01:e1:97:29:6a:fd:fa: 97:eb:c6:83:5d:e9:94:cb:df:7b:8e:5c:9c:8a:4f: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.100.0.0/21 175.158.32.0/19 IPv6: 2402:9800::/32 Signature Algorithm: sha256WithRSAEncryption 34:b3:72:75:98:3f:e8:86:81:e0:13:c3:03:0c:be:5e:7a:22: 49:d0:5e:e3:b5:78:65:18:ba:50:e3:3d:1e:31:dc:67:09:21: 11:34:7c:f1:f7:26:73:57:e9:a8:c9:b6:c3:f1:91:95:e3:45: 31:ea:2a:72:a5:c6:ef:a4:20:34:4b:37:13:91:e4:80:6e:53: 2e:28:a9:fb:d7:52:d4:9d:d4:e3:5c:db:0c:80:04:49:fd:88: b2:3d:44:a4:19:57:87:26:a9:e2:fd:b3:46:13:3c:c9:d4:32: 8c:de:6e:22:e4:46:d2:85:07:e6:84:1f:18:43:89:c5:2a:60: 65:44:1b:6c:2b:3e:8f:3f:c4:ec:52:b8:12:a3:32:2a:03:84: 79:33:d7:1d:39:fd:ad:cb:ee:96:5d:ea:c7:9b:a6:73:5d:df: db:18:b7:0d:ab:eb:2d:b8:3d:e8:15:ff:11:af:af:56:03:3e: e3:5a:fe:1e:d9:8b:6f:49:18:b5:e0:88:af:30:13:9c:3a:8a: b7:7c:3d:18:97:f9:64:bf:8f:57:48:44:9a:e4:d3:9c:73:cf: bd:93:48:d7:b9:49:4e:17:ce:d0:4e:a5:ec:f4:87:8a:4b:7c: ad:cf:ff:5d:81:22:db:74:4f:a0:65:cb:c9:e0:15:f2:fa:83: aa:6a:14:8d -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUIAhZOhxEuzhp+MbBrv3nD38gNJswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE3MjE1MFoX DTI1MDYzMDE3MjY1MFowMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEz MzlFRTE5RDkyNEQ3MkZGQUUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOP3hHsLyPEbMEpQ3QfPCGuFPZaVKDV7QCTALoYvgdg9Id3WfxOSaPbZZn8W PDEakdUwYoJbddqDhfo0VlSeOmRo2OyuK5I0S3/AGJxcb+b0JXxQXFSRk78/oZdZ KWKKwIP61k7CkrWag2fUk5XtAlSF4hlJh1JkCwckimVkoTSwSgN2zhrzUZwqZp6H oYsmeBy9JL0/q7Bn5ZF71Zlu1jphQ7eLkyWnvZAgMmGOxih1cO+N9Tn0axPXgzqb wYobHmiSOek2qYohY99JY1viMQPUgy9jEHiS9+p+BHhablX6ihn9LBQYim4B4Zcp av36l+vGg13plMvfe45cnIpPunUCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPzQU4WQTgDzwQoznuGdkk1y/64OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFm LWZlNjctNDVjOC04MGI3LTA2ZmMxMThkZjhlMi8wL0ZDRDA1Mzg1OTA0RTAwRjND MTBBMzM5RUUxOUQ5MjRENzJGRkFFMEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAN5ZAADBAWvniAwDQQCAAIwBwMFACQCmAAwDQYJKoZIhvcNAQELBQADggEBADSz cnWYP+iGgeATwwMMvl56IknQXuO1eGUYulDjPR4x3GcJIRE0fPH3JnNX6ajJtsPx kZXjRTHqKnKlxu+kIDRLNxOR5IBuUy4oqfvXUtSd1ONc2wyABEn9iLI9RKQZV4cm qeL9s0YTPMnUMozebiLkRtKFB+aEHxhDicUqYGVEG2wrPo8/xOxSuBKjMioDhHkz 1x05/a3L7pZd6sebpnNd39sYtw2r6y24PegV/xGvr1YDPuNa/h7Zi29JGLXgiK8w E5w6ird8PRiX+WS/j1dIRJrk05xzz72TSNe5SU4XztBOpez0h4pLfK3P/12BItt0 T6Bly8ngFfL6g6pqFI0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org