$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer File: FF96D30557BDACE26C511E1F48A3514643130EA8.cer (raw, json) Hash identifier: 0IbA4OfyWJmkjHS5pLprCF4Y1v8aXrm/7WTbT+OwoP0= Subject key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D628BB7700031BF9A97E6E45B9F1D5969D8BD82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 03:38:53 +0000 Certificate not after: Fri 08 Aug 2025 03:43:53 +0000 Subordinate resources: IP: 103.229.131.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:62:8b:b7:70:00:31:bf:9a:97:e6:e4:5b:9f:1d:59:69:d8:bd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 03:38:53 2024 GMT Not After : Aug 8 03:43:53 2025 GMT Subject: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:8c:71:27:ad:3f:31:09:6d:bd:4a:e8:5f: ed:66:c0:bd:6f:e1:94:b8:c4:ca:35:80:e3:a5:0b: 5b:d4:7a:7a:3d:c1:5f:a8:9c:4f:65:02:8b:4c:6a: 34:c4:e7:71:19:14:dc:41:39:99:58:75:d9:15:94: 44:ad:b8:f9:5f:66:60:c1:88:7d:bf:15:73:84:dd: c1:39:a5:19:34:cb:e4:51:80:65:70:46:10:30:2c: d1:7a:e7:9e:f2:7d:f1:2b:45:01:31:ca:7e:e7:a5: 83:07:0c:c7:a1:05:d8:1c:64:ae:9f:23:01:03:6b: 5f:70:89:57:80:99:b5:4f:1f:01:53:99:b1:6b:30: 72:51:df:89:7a:22:3a:20:8d:3f:77:96:ad:33:64: ac:c7:9a:a3:c1:32:9a:8c:ec:51:d4:b9:98:47:0c: 47:7e:f4:ab:e3:f3:cf:37:7f:de:fc:41:7d:3d:0f: 63:5e:cb:1f:5a:76:a4:be:bf:77:d8:23:01:ca:44: 5d:ce:99:c5:07:e3:11:db:80:9f:2b:cb:de:14:ad: f7:13:14:9f:58:8e:b6:86:a0:83:53:8a:6a:ab:aa: 0d:de:52:76:7e:d1:bb:bc:4e:82:13:5e:d3:4d:0f: cd:f6:6b:2e:9f:08:7e:a7:fe:16:b0:36:de:2e:07: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.131.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7c:bd:f0:de:ee:23:a2:e7:0d:c3:a6:fa:f0:ca:21:bf:ff: d2:d4:f2:0a:7a:69:57:f5:50:0f:4f:cc:a7:ca:9e:fe:8c:bb: da:95:a2:44:3e:d2:db:3e:5d:33:b7:b1:32:b3:b3:df:90:ce: 09:e3:16:84:92:b8:f0:64:c4:94:3f:1e:97:b4:ee:38:e4:4f: 06:53:c6:86:5a:e3:e8:4d:df:a3:14:44:fa:8b:37:ea:f5:1d: 8a:4d:02:c0:74:43:9b:7d:64:50:61:1e:24:44:85:b3:52:9a: 61:46:e2:cb:cf:a3:45:f9:a6:45:29:1f:3e:9d:61:ac:4f:87: ee:01:3b:31:b6:9a:87:b5:5d:05:fa:2d:a6:26:3b:be:09:22: 03:87:9e:d1:88:d5:a2:ef:b9:ff:33:d2:80:35:2a:85:c6:17: ea:fa:8b:ec:cb:a7:58:52:76:80:cd:7b:05:10:93:2f:25:b5: 23:7e:f1:72:03:d7:75:95:98:cb:50:e2:2d:12:57:11:06:b9: 3a:ca:69:85:59:a3:5d:ee:9e:89:0e:02:7e:bc:06:92:3b:75: 95:3f:71:c4:bd:95:a7:e4:c8:51:26:f5:c1:7f:b9:49:47:43: 60:23:d8:a9:fa:08:10:21:64:d9:e7:7b:c3:28:34:3a:74:ae: 4a:6d:ca:48 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbWKLt3AAMb+al+bkW58dWWnYvYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwOTAzMzg1M1oX DTI1MDgwODAzNDM1M1owMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTEx RTFGNDhBMzUxNDY0MzEzMEVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCrjHEnrT8xCW29Suhf7WbAvW/hlLjEyjWA46ULW9R6ej3BX6icT2UCi0xq NMTncRkU3EE5mVh12RWURK24+V9mYMGIfb8Vc4TdwTmlGTTL5FGAZXBGEDAs0Xrn nvJ98StFATHKfuelgwcMx6EF2Bxkrp8jAQNrX3CJV4CZtU8fAVOZsWswclHfiXoi OiCNP3eWrTNkrMeao8EymozsUdS5mEcMR370q+Pzzzd/3vxBfT0PY17LH1p2pL6/ d9gjAcpEXc6ZxQfjEduAnyvL3hSt9xMUn1iOtoagg1OKaquqDd5Sdn7Ru7xOghNe 000PzfZrLp8Ifqf+FrA23i4HI7sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP+W0wVXvazibFEeH0ijUUZDEw6oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0MmMxZjMy LTgxYWMtNDExOC1iZTJmLTU3NGNhNWI1NDFlYS8wL0ZGOTZEMzA1NTdCREFDRTI2 QzUxMUUxRjQ4QTM1MTQ2NDMxMzBFQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn5YMwDQYJKoZIhvcNAQELBQADggEBAIl8vfDe7iOi5w3DpvrwyiG//9LU8gp6 aVf1UA9PzKfKnv6Mu9qVokQ+0ts+XTO3sTKzs9+QzgnjFoSSuPBkxJQ/Hpe07jjk TwZTxoZa4+hN36MURPqLN+r1HYpNAsB0Q5t9ZFBhHiREhbNSmmFG4svPo0X5pkUp Hz6dYaxPh+4BOzG2moe1XQX6LaYmO74JIgOHntGI1aLvuf8z0oA1KoXGF+r6i+zL p1hSdoDNewUQky8ltSN+8XID13WVmMtQ4i0SVxEGuTrKaYVZo13unokOAn68BpI7 dZU/ccS9lafkyFEm9cF/uUlHQ2Aj2Kn6CBAhZNnne8MoNDp0rkptykg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org