$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer (raw, json) Hash identifier: KzcXMMP6FvvfeRNWphBo1KsZZm9Zh4oM3JG58lyztCk= Subject key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F221D3023531EB32F23A9B1D250BADF246440AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft caRepository: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 24 Dec 2023 18:37:27 +0000 Certificate not after: Sun 22 Dec 2024 18:42:27 +0000 Subordinate resources: IP: 103.112.144.0/23 IP: 2001:df4:ad00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:22:1d:30:23:53:1e:b3:2f:23:a9:b1:d2:50:ba:df:24:64:40:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 18:37:27 2023 GMT Not After : Dec 22 18:42:27 2024 GMT Subject: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:59:a7:38:c9:42:0d:63:1e:ef:de:9c:db: 2d:2b:91:b0:5f:92:00:58:b9:d6:5b:ac:30:5d:6f: 64:24:f4:e2:01:26:45:15:b6:67:bb:75:b6:87:4c: fa:d5:ea:7b:e3:e5:a3:af:3a:14:46:a9:b3:cc:d7: da:3c:88:d4:33:2a:ab:5c:b7:62:b1:58:8b:76:46: e5:e4:89:c8:cc:2f:ef:11:be:a3:e3:ee:8c:64:f7: e5:6b:13:62:30:9d:73:27:59:0e:f3:fb:43:9c:09: ec:2f:4a:e5:af:25:ac:44:69:95:a0:87:a9:ab:b0: 81:d4:c2:7c:cc:fd:da:76:1c:77:e3:ef:35:0f:f6: 0c:ff:db:5d:28:11:d6:d1:ed:85:ff:f8:fb:0e:45: 27:f6:ac:a7:90:b5:78:82:37:7f:30:94:e5:49:5f: e2:a0:7c:d5:57:8d:e2:74:eb:2a:20:0c:09:c5:12: 7a:73:42:73:f3:20:04:5d:7a:14:56:ae:7f:2e:68: c8:f1:74:8a:45:69:46:07:c1:1e:a8:c8:e6:d4:e4: f7:ce:20:4c:fc:29:80:07:10:33:41:74:e6:2e:42: 9f:0c:d2:b2:91:ec:6c:1d:cc:57:88:fa:bc:c5:da: 06:23:76:7d:ce:bd:07:2c:ac:5f:26:5a:dc:60:ae: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.144.0/23 IPv6: 2001:df4:ad00::/48 Signature Algorithm: sha256WithRSAEncryption 89:3e:4e:08:90:d0:b1:00:ba:6d:28:ed:a1:fc:cc:4a:e2:36: d5:f6:7b:8c:7e:c0:23:0b:f9:2a:3b:b0:58:c2:84:d1:39:de: 64:71:94:0e:9d:92:86:7f:b9:7c:e2:b0:a3:d5:73:a5:16:29: da:79:e3:a2:18:c1:d4:52:21:81:e6:72:ec:59:4b:16:18:18: 97:bd:70:0c:81:0a:08:1f:ce:2e:c8:f7:81:47:ed:bd:3a:eb: fa:67:69:f3:51:a2:a5:f3:c4:9a:7d:4c:f2:62:52:c4:5c:65: af:a8:09:ce:19:a7:37:3e:8c:be:c5:65:17:7f:67:44:a1:40: d7:67:92:67:64:ee:90:f1:1f:ba:4c:f4:dc:81:20:70:4e:7c: a9:2b:a3:5e:d4:89:e7:cc:ab:74:7a:f7:cf:f8:be:c9:67:16: 19:41:3a:c0:ce:35:bd:9b:65:44:bb:21:4e:fd:39:d3:8f:80: 5f:7c:71:15:17:7e:2b:87:d5:d7:93:5a:5e:8e:da:c2:c9:29: d9:fc:6c:10:82:06:31:25:50:ec:1d:9d:5b:a4:6a:fc:02:cb: ff:fe:22:64:d3:9d:66:04:8d:70:0a:12:e6:2e:9d:2c:3f:77: 44:98:dd:91:ac:01:6e:3c:eb:2e:12:fc:70:22:a2:3a:a3:00: df:6b:96:e4 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUfyIdMCNTHrMvI6mx0lC63yRkQKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNDE4MzcyN1oX DTI0MTIyMjE4NDIyN1owMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4 NzNBMUIxRTcwMzJCMkM5ODEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhJWac4yUINYx7v3pzbLSuRsF+SAFi51lusMF1vZCT04gEmRRW2Z7t1todM +tXqe+Plo686FEaps8zX2jyI1DMqq1y3YrFYi3ZG5eSJyMwv7xG+o+PujGT35WsT YjCdcydZDvP7Q5wJ7C9K5a8lrERplaCHqauwgdTCfMz92nYcd+PvNQ/2DP/bXSgR 1tHthf/4+w5FJ/asp5C1eII3fzCU5Ulf4qB81VeN4nTrKiAMCcUSenNCc/MgBF16 FFaufy5oyPF0ikVpRgfBHqjI5tTk984gTPwpgAcQM0F05i5CnwzSspHsbB3MV4j6 vMXaBiN2fc69ByysXyZa3GCuKzECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlNVWygtVr0pjaHOhsecDKyyYE8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIz LTkzN2QtNDMwNC05MTY3LTQ2M2Q3YzU4ZDVlNC8wLzA5NEQ1NTZDQTBCNTVBRjRB NjM2ODczQTFCMUU3MDMyQjJDOTgxM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFncJAwDwQCAAIwCQMHACABDfStADANBgkqhkiG9w0BAQsFAAOCAQEAiT5OCJDQ sQC6bSjtofzMSuI21fZ7jH7AIwv5KjuwWMKE0TneZHGUDp2Shn+5fOKwo9VzpRYp 2nnjohjB1FIhgeZy7FlLFhgYl71wDIEKCB/OLsj3gUftvTrr+mdp81GipfPEmn1M 8mJSxFxlr6gJzhmnNz6MvsVlF39nRKFA12eSZ2TukPEfukz03IEgcE58qSujXtSJ 58yrdHr3z/i+yWcWGUE6wM41vZtlRLshTv0504+AX3xxFRd+K4fV15NaXo7awskp 2fxsEIIGMSVQ7B2dW6Rq/ALL//4iZNOdZgSNcAoS5i6dLD93RJjdkawBbjzrLhL8 cCKiOqMA32uW5A== -----END CERTIFICATE-----Generated at Wed May 8 22:46:36 2024 by rpki-client on console-ams.rpki-client.org