$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer File: 09461F85D577EF79DE072EECCA1E12135A3715C0.cer (raw, json) Hash identifier: FhIOzrr/ZN0VVRCEDob5gW/xfW5xzNL4ArFK+IDtX9s= Subject key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C3A1D5AC5CDA8D33FEBA3D5FABD223CD2A02293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft caRepository: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Oct 2023 11:48:58 +0000 Certificate not after: Mon 28 Oct 2024 11:53:58 +0000 Subordinate resources: IP: 103.147.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3a:1d:5a:c5:cd:a8:d3:3f:eb:a3:d5:fa:bd:22:3c:d2:a0:22:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 30 11:48:58 2023 GMT Not After : Oct 28 11:53:58 2024 GMT Subject: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:8e:c1:03:c9:b8:db:7e:88:5d:34:24:ca: 0a:3a:2e:7a:57:38:b2:84:b5:8f:61:bf:99:b3:78: d9:b5:7d:9b:85:fd:2d:0f:94:e2:53:7f:ad:0b:6c: 79:e9:19:18:ef:2c:68:fa:82:b7:0a:0e:2c:33:95: 70:f4:ff:e0:0f:de:51:ea:a4:86:5a:53:09:f8:9f: af:2c:01:5f:70:26:68:ee:b2:ba:f0:e6:41:6a:6d: 7d:0c:84:cc:34:14:a1:c7:a2:a8:20:36:2d:da:fa: e7:f7:09:83:4a:33:55:82:e1:dd:05:b5:9b:6a:e8: fb:5d:25:f7:5d:b1:ad:69:89:01:37:ca:5f:43:12: 46:43:9e:0a:b1:aa:3b:81:31:69:59:2e:a4:d5:40: 44:66:bc:65:04:ae:e4:ce:a3:9a:93:76:85:96:5b: 04:50:36:34:a4:0b:5d:27:c3:ae:8c:6d:7f:1e:6b: 2c:d0:fd:cc:ed:be:5b:fc:1c:cd:76:26:2e:87:11: fa:f0:92:c8:2f:29:1f:a9:0c:d2:8b:ee:54:89:94: fc:a0:f5:20:75:30:40:c0:a9:b1:f4:0a:2c:5b:8f: d6:35:eb:01:07:ea:a9:d6:25:ae:02:e8:5b:74:73: 9d:cc:c3:55:7c:2b:a6:b6:97:0e:60:35:1c:ba:4b: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.146.0/23 Signature Algorithm: sha256WithRSAEncryption 88:48:4d:d7:30:21:43:fd:b3:0c:a8:78:fd:ca:cf:36:ed:33: e7:c9:49:5a:bc:6a:b6:c1:5e:10:49:30:aa:9b:01:55:a3:bb: 7b:67:06:c0:73:9a:90:ad:a5:8c:b9:e0:7e:6b:8c:4c:f1:89: 0f:80:e9:4e:e5:31:c7:4b:1b:5e:f3:65:6b:0f:78:84:87:2a: 49:60:6f:cf:95:1e:33:96:de:70:e4:5a:f6:88:a9:19:61:3c: ff:d2:c1:58:d1:0e:37:b9:09:35:91:19:61:0e:d7:45:5c:55: 00:75:db:32:f9:eb:57:01:20:cd:27:23:a5:da:75:24:98:ff: c7:2c:0d:2c:0a:00:5d:45:54:6b:cf:c9:cd:ac:e4:b4:df:01: c8:e1:a1:25:1a:55:03:6c:fd:00:30:60:c0:f5:df:c6:7b:a6: 1c:ca:fa:d9:67:68:34:b2:bf:cf:0d:6c:99:4a:73:83:d3:a1: 3c:6d:5f:64:8e:f2:36:c5:ad:1a:98:70:17:f8:c2:28:85:7e: ef:a2:e1:11:bf:66:46:75:f3:18:b9:17:55:fc:7a:13:fb:83: 55:95:eb:b1:de:93:73:ed:f8:ea:98:02:66:2c:a1:79:29:9e: fa:6d:f5:f7:bf:cf:74:a0:f5:41:b0:4e:47:38:96:c2:ce:70: e7:fe:fa:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTDodWsXNqNM/66PV+r0iPNKgIpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAzMDExNDg1OFoX DTI0MTAyODExNTM1OFowMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcy RUVDQ0ExRTEyMTM1QTM3MTVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYjjsEDybjbfohdNCTKCjouelc4soS1j2G/mbN42bV9m4X9LQ+U4lN/rQts eekZGO8saPqCtwoOLDOVcPT/4A/eUeqkhlpTCfifrywBX3AmaO6yuvDmQWptfQyE zDQUoceiqCA2Ldr65/cJg0ozVYLh3QW1m2ro+10l912xrWmJATfKX0MSRkOeCrGq O4ExaVkupNVARGa8ZQSu5M6jmpN2hZZbBFA2NKQLXSfDroxtfx5rLND9zO2+W/wc zXYmLocR+vCSyC8pH6kM0ovuVImU/KD1IHUwQMCpsfQKLFuP1jXrAQfqqdYlrgLo W3RznczDVXwrpraXDmA1HLpLnYMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlGH4XVd+953gcu7MoeEhNaNxXAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3M2I5NTll LWZmNTItNDAyOC1iNTM0LTFkNjA1ZmEzYTgwYi8wLzA5NDYxRjg1RDU3N0VGNzlE RTA3MkVFQ0NBMUUxMjEzNUEzNzE1QzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk5IwDQYJKoZIhvcNAQELBQADggEBAIhITdcwIUP9swyoeP3KzzbtM+fJSVq8 arbBXhBJMKqbAVWju3tnBsBzmpCtpYy54H5rjEzxiQ+A6U7lMcdLG17zZWsPeISH Kklgb8+VHjOW3nDkWvaIqRlhPP/SwVjRDje5CTWRGWEO10VcVQB12zL561cBIM0n I6XadSSY/8csDSwKAF1FVGvPyc2s5LTfAcjhoSUaVQNs/QAwYMD138Z7phzK+tln aDSyv88NbJlKc4PToTxtX2SO8jbFrRqYcBf4wiiFfu+i4RG/ZkZ18xi5F1X8ehP7 g1WV67Hek3Pt+OqYAmYsoXkpnvpt9fe/z3Sg9UGwTkc4lsLOcOf++iw= -----END CERTIFICATE-----Generated at Wed May 8 18:12:03 2024 by rpki-client on console-fra.rpki-client.org