$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer File: FE47963FB6E13EFC318606E3CA31013421827343.cer (raw, json) Hash identifier: 5UnUgihb7OYxUc76wdMPyQkn6Ia0wiVY5wJ5/7HVDb4= Subject key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44C79D2EBE7A8D61BB4F354FC2E2B42596AAC229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft caRepository: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Nov 2024 12:18:17 +0000 Certificate not after: Wed 26 Nov 2025 12:23:17 +0000 Subordinate resources: IP: 103.67.49.0/24 IP: 103.162.252.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c7:9d:2e:be:7a:8d:61:bb:4f:35:4f:c2:e2:b4:25:96:aa:c2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 27 12:18:17 2024 GMT Not After : Nov 26 12:23:17 2025 GMT Subject: CN=FE47963FB6E13EFC318606E3CA31013421827343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:af:aa:68:55:87:de:96:2f:29:60:d6:03: 5b:99:23:8f:50:5a:60:42:2b:3f:8a:50:65:a5:00: 8a:9e:cf:0d:70:ef:17:51:ad:3b:b9:35:8d:36:8f: b4:42:10:20:99:2c:ef:fe:f2:1b:40:a7:1d:6c:1b: 21:99:ca:2f:cf:fa:20:b1:b2:34:c8:ec:a9:9a:e9: 29:38:df:cb:aa:ac:d9:69:27:12:b9:17:da:c0:22: 5f:08:00:24:e7:ae:b3:df:f3:b3:df:88:0f:26:1c: 96:b6:e2:e2:6b:45:b4:36:02:ab:88:92:51:b5:03: 52:bf:3d:8e:6b:e3:66:c7:28:12:57:1f:38:54:6f: b3:cc:8d:f3:18:73:88:e7:05:f3:b9:d1:9e:2d:10: 70:08:38:fc:d9:bd:2b:2a:68:03:0f:c9:9e:2b:87: f4:a8:17:1e:50:25:8a:c0:d4:f7:06:89:25:29:8b: db:3e:fa:41:53:5f:a2:f1:0e:1f:10:47:31:2a:54: 6b:d8:a8:17:34:bc:fa:03:4f:bf:18:d2:3f:35:5e: 3a:ca:0f:cc:1d:fa:17:46:0d:96:a6:3d:07:99:41: 90:19:c8:33:ae:f3:68:57:b5:7d:ba:75:08:a1:5e: b6:c1:0f:87:36:c8:74:89:2b:b5:94:76:7a:f0:a1: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.49.0/24 103.162.252.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:32:fb:4a:d4:25:d0:b9:ab:77:79:ac:01:ef:e2:fb:92:81: 75:86:32:0b:31:5b:a5:5c:de:7b:09:b5:05:a2:fc:b7:75:9f: 1b:bb:ec:01:18:11:30:a4:c1:f4:91:f7:9e:4f:7e:44:ff:21: 5b:70:68:dd:30:8d:d5:24:6d:c6:89:b4:a4:2d:ac:99:fe:43: 6c:e6:cd:c7:94:e0:f4:f2:a9:39:06:5b:a3:b9:27:80:f0:e4: f4:47:1e:1b:df:e9:df:10:ab:62:f0:cf:51:c3:0c:08:ce:6f: 0c:bf:14:23:76:fd:52:06:2e:f5:77:61:c8:6c:64:77:47:38: 61:2a:bf:9d:04:df:fc:ea:b6:02:79:07:d9:a7:9a:f5:c3:03: 53:65:be:32:c8:b3:21:2d:69:24:72:c6:f4:f6:d8:67:41:51: 2e:02:c9:ec:1c:3b:21:5c:a1:be:6b:aa:18:39:6c:1e:28:42: 7a:1c:3f:67:3e:ac:e4:ba:3f:fc:1d:55:86:3e:39:63:ab:0b: b5:08:ed:b2:b5:f5:06:bd:96:15:f7:36:3f:50:88:29:0b:a3: 77:61:9e:e3:4d:02:d2:3a:56:c8:f9:df:f7:07:1e:49:45:15: 29:d0:b9:ce:57:a4:6a:c6:10:e1:5d:a3:8a:02:0b:8f:00:55: 8b:21:41:5b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIURMedLr56jWG7TzVPwuK0JZaqwikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyNzEyMTgxN1oX DTI1MTEyNjEyMjMxN1owMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYw NkUzQ0EzMTAxMzQyMTgyNzM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxr6poVYfeli8pYNYDW5kjj1BaYEIrP4pQZaUAip7PDXDvF1GtO7k1jTaP tEIQIJks7/7yG0CnHWwbIZnKL8/6ILGyNMjsqZrpKTjfy6qs2WknErkX2sAiXwgA JOeus9/zs9+IDyYclrbi4mtFtDYCq4iSUbUDUr89jmvjZscoElcfOFRvs8yN8xhz iOcF87nRni0QcAg4/Nm9KypoAw/JniuH9KgXHlAlisDU9waJJSmL2z76QVNfovEO HxBHMSpUa9ioFzS8+gNPvxjSPzVeOsoPzB36F0YNlqY9B5lBkBnIM67zaFe1fbp1 CKFetsEPhzbIdIkrtZR2evChDaMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP5Hlj+24T78MYYG48oxATQhgnNDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY4NDY2ODg5 LWMxZWYtNDQxMC1hZDljLTMwNmMwOWUxYmUwNi8wL0ZFNDc5NjNGQjZFMTNFRkMz MTg2MDZFM0NBMzEwMTM0MjE4MjczNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnQzEDBABnovwwDQYJKoZIhvcNAQELBQADggEBAC0y+0rUJdC5q3d5rAHv4vuS gXWGMgsxW6Vc3nsJtQWi/Ld1nxu77AEYETCkwfSR955PfkT/IVtwaN0wjdUkbcaJ tKQtrJn+Q2zmzceU4PTyqTkGW6O5J4Dw5PRHHhvf6d8Qq2Lwz1HDDAjObwy/FCN2 /VIGLvV3YchsZHdHOGEqv50E3/zqtgJ5B9mnmvXDA1NlvjLIsyEtaSRyxvT22GdB US4CyewcOyFcob5rqhg5bB4oQnocP2c+rOS6P/wdVYY+OWOrC7UI7bK19Qa9lhX3 Nj9QiCkLo3dhnuNNAtI6Vsj53/cHHklFFSnQuc5XpGrGEOFdo4oCC48AVYshQVs= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:40 2025 by rpki-client