$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer File: FED855DD505D24B6FE25BD8656297329F7EF4785.cer (raw, json) Hash identifier: sMBQgToaqtIk6jkJ31mewm+l1gIo5NTmgi6QKxiNAb4= Subject key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76745187CC2CF2E3BAB4CE438B88E0521BE488B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft caRepository: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 09 Oct 2024 19:07:41 +0000 Certificate not after: Wed 08 Oct 2025 19:12:41 +0000 Subordinate resources: IP: 103.105.128.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:74:51:87:cc:2c:f2:e3:ba:b4:ce:43:8b:88:e0:52:1b:e4:88:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 9 19:07:41 2024 GMT Not After : Oct 8 19:12:41 2025 GMT Subject: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:2c:d8:31:c6:3a:da:ad:d8:5e:22:3b:fd: cc:a7:13:e1:4c:84:58:f6:27:4b:09:fa:7e:3c:bd: 58:77:70:8e:66:6f:03:67:73:e3:48:cf:04:f9:ae: 06:9c:01:35:b5:05:f2:9c:b4:7a:39:f1:65:d4:37: c6:90:73:a6:12:f9:34:51:1f:cc:b8:79:fa:ef:0e: 22:fa:e9:24:73:06:2b:17:0b:6f:f4:67:66:f1:dc: 6d:03:f5:52:5b:4c:c8:b1:77:f1:71:69:90:5b:95: 14:8d:30:39:76:38:d7:a5:d5:3c:c4:a0:00:35:1e: 2b:6f:58:a1:10:17:05:6a:c8:92:48:38:bd:fb:68: fc:32:d3:4e:fe:c5:d0:5d:a2:b3:47:33:fe:d6:f8: a5:28:77:5f:ec:15:1d:ad:a7:5e:70:b9:3c:8d:9f: 1d:aa:9d:91:98:c5:14:c1:6f:81:49:6c:7f:42:ee: a9:e7:2b:d3:6e:26:0f:b2:82:be:6e:6b:f4:a2:64: 87:39:0a:42:63:2d:a6:ab:02:64:8f:19:18:e2:82: 37:20:98:60:ac:09:45:ec:8e:12:5a:3e:59:d7:bd: e3:44:82:2e:6d:5c:7f:fa:37:cf:1d:5d:a6:cf:f0: 5f:95:06:cc:d2:57:dd:ec:f5:18:4e:7f:aa:70:97: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.128.0/22 Signature Algorithm: sha256WithRSAEncryption 14:87:7a:c0:bb:26:31:27:e2:06:02:4f:e5:a0:5b:6d:55:f2: 30:bb:3a:ff:36:b5:1c:e0:3b:e6:ca:cc:84:94:82:ab:c1:92: d6:21:1d:b8:9a:90:5d:d3:3c:8a:0c:72:a1:40:b8:45:51:9d: 40:91:6b:8c:39:a9:04:25:84:53:8e:b4:89:77:d7:be:ce:e6: 4b:1e:8c:b6:bb:f4:d6:60:a7:b9:e5:37:33:83:d6:b9:04:59: cf:e1:c4:66:f1:fb:de:4b:98:55:29:bb:53:56:06:e6:43:49: dc:9d:c9:9b:30:4d:2e:ac:d9:8f:b9:bf:63:14:b5:88:ed:b9: f5:33:65:8c:ca:fc:a7:8d:ec:01:96:26:f8:60:a7:c6:12:54: df:e2:d0:6d:69:ab:96:31:f1:11:15:03:3e:7c:2d:b9:78:40: 74:06:aa:f0:c1:39:5c:51:d2:8e:09:1f:42:3a:bf:33:12:aa: 4e:62:f0:4f:0d:f7:da:aa:7b:a2:57:cc:9f:03:86:89:5f:fa: 83:05:aa:65:b0:65:43:49:17:97:8f:e3:bf:d2:91:c3:62:af: 49:be:aa:49:63:7b:18:1d:58:80:d9:68:1d:c2:fb:e2:fe:2f: 7f:ca:8d:44:d6:e2:ed:d2:36:a3:45:e2:0f:56:33:a6:44:d9: f8:23:9b:6b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdnRRh8ws8uO6tM5Di4jgUhvkiLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwOTE5MDc0MVoX DTI1MTAwODE5MTI0MVowMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVC RDg2NTYyOTczMjlGN0VGNDc4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkQLNgxxjrardheIjv9zKcT4UyEWPYnSwn6fjy9WHdwjmZvA2dz40jPBPmu BpwBNbUF8py0ejnxZdQ3xpBzphL5NFEfzLh5+u8OIvrpJHMGKxcLb/RnZvHcbQP1 UltMyLF38XFpkFuVFI0wOXY416XVPMSgADUeK29YoRAXBWrIkkg4vfto/DLTTv7F 0F2is0cz/tb4pSh3X+wVHa2nXnC5PI2fHaqdkZjFFMFvgUlsf0Luqecr024mD7KC vm5r9KJkhzkKQmMtpqsCZI8ZGOKCNyCYYKwJReyOElo+Wde940SCLm1cf/o3zx1d ps/wX5UGzNJX3ez1GE5/qnCXMT0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP7YVd1QXSS2/iW9hlYpcyn370eFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjFkN2E3 LWExMWUtNDAwYi05MTcwLWM3OTdlZDg4ZDcwMi8wL0ZFRDg1NURENTA1RDI0QjZG RTI1QkQ4NjU2Mjk3MzI5RjdFRjQ3ODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnaYAwDQYJKoZIhvcNAQELBQADggEBABSHesC7JjEn4gYCT+WgW21V8jC7Ov82 tRzgO+bKzISUgqvBktYhHbiakF3TPIoMcqFAuEVRnUCRa4w5qQQlhFOOtIl3177O 5ksejLa79NZgp7nlNzOD1rkEWc/hxGbx+95LmFUpu1NWBuZDSdydyZswTS6s2Y+5 v2MUtYjtufUzZYzK/KeN7AGWJvhgp8YSVN/i0G1pq5Yx8REVAz58Lbl4QHQGqvDB OVxR0o4JH0I6vzMSqk5i8E8N99qqe6JXzJ8Dholf+oMFqmWwZUNJF5eP47/SkcNi r0m+qkljexgdWIDZaB3C++L+L3/KjUTW4u3SNqNF4g9WM6ZE2fgjm2s= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org