$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer File: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer (raw, json) Hash identifier: RMqOZL3VbH5ys1PJjz0izbkjvbXevTSDahYEc5Htz6E= Subject key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DEFAE50CA057E044B6B32D5522AAEFEBB1F92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft caRepository: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 05:03:07 +0000 Certificate not after: Mon 29 Jul 2024 05:08:07 +0000 Subordinate resources: IP: 43.248.212.0/22 IP: 103.28.56.0/22 IP: 2404:fb00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 18:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ef:ae:50:ca:05:7e:04:4b:6b:32:d5:52:2a:ae:fe:bb:1f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 05:03:07 2023 GMT Not After : Jul 29 05:08:07 2024 GMT Subject: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:cb:45:08:93:0a:28:39:4f:b2:10:bb:6a: 66:78:1f:05:1e:e4:9d:83:2c:2e:7c:17:c8:65:14: 27:f3:ab:c9:f0:f9:37:d1:29:fb:79:22:fe:4b:fb: 04:8f:f2:08:2e:96:cc:de:11:97:f0:3a:d1:f1:84: 01:f2:6d:e0:57:e6:57:7d:84:26:58:6b:82:d1:21: ab:4b:21:20:93:e7:ac:c6:66:60:2f:93:4c:42:e5: cf:95:0d:09:e2:54:1b:1f:78:b5:39:92:d3:ea:b0: 2d:ee:b3:3c:54:6b:7f:30:38:05:55:e5:8d:92:60: 77:2f:67:18:32:17:76:dc:cd:c4:92:6d:bc:57:90: fa:b9:d8:71:42:a8:1d:a3:b1:43:22:1f:48:63:a1: d3:15:71:0f:af:89:1e:5e:a0:6c:cc:cc:dc:6a:44: 45:a2:3b:a4:6c:74:13:10:5f:fe:56:13:4c:8a:ee: ba:a4:f3:94:dc:d3:c6:01:9f:51:9f:72:46:75:89: 1f:cb:41:cb:7b:ad:98:40:a4:42:a5:c3:11:0c:2b: 6a:e0:c4:42:ba:d5:62:33:6a:4f:cd:10:2a:c5:c5: 67:26:e6:d6:22:a8:40:f5:5f:d6:f5:15:98:66:48: 19:42:89:e5:f3:da:0c:82:63:41:47:79:42:86:5f: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.212.0/22 103.28.56.0/22 IPv6: 2404:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 2d:63:f9:92:94:86:89:50:9e:be:0d:55:99:ad:86:85:49:ac: 1c:fa:a9:4e:f8:ab:a1:ff:f9:06:8a:55:04:5a:db:ae:9a:08: a5:55:89:83:68:03:1e:b7:65:f1:be:8c:d0:45:13:62:9c:03: ae:a8:2d:e9:d5:40:83:55:51:d1:7a:d8:11:f3:02:e9:53:a7: 53:9e:76:59:5a:f6:f3:a1:d2:2f:38:89:2f:69:bc:65:50:56: 2a:03:e2:39:eb:f2:77:b5:8d:b9:7e:f2:72:6c:bf:ec:a7:de: 46:08:e2:31:b1:a4:f5:b9:b6:84:46:be:5e:19:be:d8:bb:18: 94:16:30:93:5a:41:17:17:41:48:26:c2:b1:a4:92:ed:46:4e: 2e:8d:d5:ba:6f:ef:9d:6b:9f:8e:d5:2e:a6:57:f4:6e:84:04: 87:85:5a:79:13:c2:6f:27:b0:e4:9c:63:9b:b3:85:73:0d:56: 42:0c:85:5c:94:01:f8:c1:64:7b:8e:cf:4f:5f:a8:55:77:cf: 05:3f:2d:7c:6b:2f:a5:8d:f0:56:8e:28:0f:45:b8:69:31:b2: 40:fd:35:79:32:06:a8:42:6b:70:62:d0:bf:ad:f0:16:aa:8e: d6:03:c2:da:08:b9:e2:57:a4:1e:cc:bf:87:41:ed:f8:dd:bb: be:0a:22:88 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgITXe+uUMoFfgRLazLVUiqu/rsfkjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjMwNzMxMDUwMzA3WhcN MjQwNzI5MDUwODA3WjAzMTEwLwYDVQQDEyg5NUZDNjA3MkE0QTY5MEE2MUEwQjVG MTRCMzY4ODJCNDNEQTJGMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+3LRQiTCig5T7IQu2pmeB8FHuSdgywufBfIZRQn86vJ8Pk30Sn7eSL+S/sE j/IILpbM3hGX8DrR8YQB8m3gV+ZXfYQmWGuC0SGrSyEgk+esxmZgL5NMQuXPlQ0J 4lQbH3i1OZLT6rAt7rM8VGt/MDgFVeWNkmB3L2cYMhd23M3Ekm28V5D6udhxQqgd o7FDIh9IY6HTFXEPr4keXqBszMzcakRFojukbHQTEF/+VhNMiu66pPOU3NPGAZ9R n3JGdYkfy0HLe62YQKRCpcMRDCtq4MRCutViM2pPzRAqxcVnJubWIqhA9V/W9RWY ZkgZQonl89oMgmNBR3lChl+GZQIDAQABo4ICzTCCAskwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUlfxgcqSmkKYaC18Us2iCtD2i8JgwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzMzMDUxNzdhLWE1MDAtNDk5Ni1iM2ZmLTcwYzE0NGVkZmVjZS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMwNTE3N2Et YTUwMC00OTk2LWIzZmYtNzBjMTQ0ZWRmZWNlLzAvOTVGQzYwNzJBNEE2OTBBNjFB MEI1RjE0QjM2ODgyQjQzREEyRjA5OC5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME Aiv41AMEAmccODANBAIAAjAHAwUAJAT7ADANBgkqhkiG9w0BAQsFAAOCAQEALWP5 kpSGiVCevg1Vma2GhUmsHPqpTvirof/5BopVBFrbrpoIpVWJg2gDHrdl8b6M0EUT YpwDrqgt6dVAg1VR0XrYEfMC6VOnU552WVr286HSLziJL2m8ZVBWKgPiOevyd7WN uX7ycmy/7KfeRgjiMbGk9bm2hEa+Xhm+2LsYlBYwk1pBFxdBSCbCsaSS7UZOLo3V um/vnWufjtUuplf0boQEh4VaeRPCbyew5Jxjm7OFcw1WQgyFXJQB+MFke47PT1+o VXfPBT8tfGsvpY3wVo4oD0W4aTGyQP01eTIGqEJrcGLQv63wFqqO1gPC2gi54lek Hsy/h0Ht+N27vgoiiA== -----END CERTIFICATE-----Generated at Fri Apr 26 10:57:47 2024 by rpki-client on console-ams.rpki-client.org