$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer File: 09461F85D577EF79DE072EECCA1E12135A3715C0.cer (raw, json) Hash identifier: XHimZZXUNPSwWUUP2oztG+mBEsr7zyk/HoUsV6L7Ib4= Subject key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E1C45322B5E5FF66CD23089BA8DCC664400EDA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft caRepository: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Sep 2024 15:07:22 +0000 Certificate not after: Mon 29 Sep 2025 15:12:22 +0000 Subordinate resources: IP: 103.147.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1c:45:32:2b:5e:5f:f6:6c:d2:30:89:ba:8d:cc:66:44:00:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 30 15:07:22 2024 GMT Not After : Sep 29 15:12:22 2025 GMT Subject: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:8e:c1:03:c9:b8:db:7e:88:5d:34:24:ca: 0a:3a:2e:7a:57:38:b2:84:b5:8f:61:bf:99:b3:78: d9:b5:7d:9b:85:fd:2d:0f:94:e2:53:7f:ad:0b:6c: 79:e9:19:18:ef:2c:68:fa:82:b7:0a:0e:2c:33:95: 70:f4:ff:e0:0f:de:51:ea:a4:86:5a:53:09:f8:9f: af:2c:01:5f:70:26:68:ee:b2:ba:f0:e6:41:6a:6d: 7d:0c:84:cc:34:14:a1:c7:a2:a8:20:36:2d:da:fa: e7:f7:09:83:4a:33:55:82:e1:dd:05:b5:9b:6a:e8: fb:5d:25:f7:5d:b1:ad:69:89:01:37:ca:5f:43:12: 46:43:9e:0a:b1:aa:3b:81:31:69:59:2e:a4:d5:40: 44:66:bc:65:04:ae:e4:ce:a3:9a:93:76:85:96:5b: 04:50:36:34:a4:0b:5d:27:c3:ae:8c:6d:7f:1e:6b: 2c:d0:fd:cc:ed:be:5b:fc:1c:cd:76:26:2e:87:11: fa:f0:92:c8:2f:29:1f:a9:0c:d2:8b:ee:54:89:94: fc:a0:f5:20:75:30:40:c0:a9:b1:f4:0a:2c:5b:8f: d6:35:eb:01:07:ea:a9:d6:25:ae:02:e8:5b:74:73: 9d:cc:c3:55:7c:2b:a6:b6:97:0e:60:35:1c:ba:4b: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.146.0/23 Signature Algorithm: sha256WithRSAEncryption 28:e1:ce:b9:88:7d:b4:60:ce:c9:a0:f5:b2:23:09:43:05:f4: 6d:eb:12:3a:fb:da:fb:d5:3e:14:8b:77:00:14:80:52:11:e6: 8a:3a:78:96:9f:4d:4b:bc:39:b7:6b:9c:49:fc:d2:66:cf:8c: de:e4:93:73:3c:df:7a:d7:7b:4d:dc:c2:fe:7d:e1:7a:af:55: ac:d8:23:c7:15:a8:00:0d:5e:15:06:1d:d6:c9:d8:ef:2a:ab: 37:0b:3d:93:84:c1:a8:fa:e3:2d:3e:a6:6e:d5:8b:d1:12:84: 84:1e:5f:c9:4f:86:98:c5:62:50:26:e3:93:e2:12:db:c9:05: 89:a1:29:e5:81:30:c3:fc:33:a3:47:46:36:97:f2:2d:74:35: e8:02:cf:1d:f0:ac:29:ec:6d:6b:7d:50:57:05:c6:c8:c9:21: 81:f3:d4:9c:51:8b:e1:5c:45:6d:6d:28:fc:43:f6:98:2d:82: 6b:7d:4e:cf:d9:89:ec:6f:8f:8f:b5:27:7c:c9:45:bb:c6:13: ab:ec:ec:63:dd:a7:38:36:58:bd:d4:c9:93:13:08:19:55:b8: b3:72:26:f7:9a:ca:0c:86:5c:60:43:b5:51:ee:6c:94:f7:82: 36:cd:e0:ac:b7:69:dd:02:ba:4a:2e:61:85:b3:4a:e4:b7:6a: a1:e5:4c:54 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbhxFMiteX/Zs0jCJuo3MZkQA7aAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkzMDE1MDcyMloX DTI1MDkyOTE1MTIyMlowMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcy RUVDQ0ExRTEyMTM1QTM3MTVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYjjsEDybjbfohdNCTKCjouelc4soS1j2G/mbN42bV9m4X9LQ+U4lN/rQts eekZGO8saPqCtwoOLDOVcPT/4A/eUeqkhlpTCfifrywBX3AmaO6yuvDmQWptfQyE zDQUoceiqCA2Ldr65/cJg0ozVYLh3QW1m2ro+10l912xrWmJATfKX0MSRkOeCrGq O4ExaVkupNVARGa8ZQSu5M6jmpN2hZZbBFA2NKQLXSfDroxtfx5rLND9zO2+W/wc zXYmLocR+vCSyC8pH6kM0ovuVImU/KD1IHUwQMCpsfQKLFuP1jXrAQfqqdYlrgLo W3RznczDVXwrpraXDmA1HLpLnYMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlGH4XVd+953gcu7MoeEhNaNxXAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3M2I5NTll LWZmNTItNDAyOC1iNTM0LTFkNjA1ZmEzYTgwYi8wLzA5NDYxRjg1RDU3N0VGNzlE RTA3MkVFQ0NBMUUxMjEzNUEzNzE1QzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk5IwDQYJKoZIhvcNAQELBQADggEBACjhzrmIfbRgzsmg9bIjCUMF9G3rEjr7 2vvVPhSLdwAUgFIR5oo6eJafTUu8ObdrnEn80mbPjN7kk3M833rXe03cwv594Xqv VazYI8cVqAANXhUGHdbJ2O8qqzcLPZOEwaj64y0+pm7Vi9EShIQeX8lPhpjFYlAm 45PiEtvJBYmhKeWBMMP8M6NHRjaX8i10NegCzx3wrCnsbWt9UFcFxsjJIYHz1JxR i+FcRW1tKPxD9pgtgmt9Ts/Ziexvj4+1J3zJRbvGE6vs7GPdpzg2WL3UyZMTCBlV uLNyJveaygyGXGBDtVHubJT3gjbN4Ky3ad0CukouYYWzSuS3aqHlTFQ= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:09 2025 by rpki-client