$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer (raw, json) Hash identifier: 3sI0b1XwVErHNPR7IIQVwcpN6nFU6hysMdlRU9xjThQ= Subject key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01C3EE18BCBA3195953583F199550AD9630790DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 May 2024 07:27:34 +0000 Certificate not after: Tue 20 May 2025 07:32:34 +0000 Subordinate resources: IP: 103.143.194.0/23 IP: 2405:59c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c3:ee:18:bc:ba:31:95:95:35:83:f1:99:55:0a:d9:63:07:90:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 07:27:34 2024 GMT Not After : May 20 07:32:34 2025 GMT Subject: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:0f:59:48:aa:dc:8d:1c:13:fa:e5:35:20: e2:0e:d4:4f:ab:c6:ae:02:4e:bd:b3:d8:7f:02:96: 4b:fb:38:9b:dd:d8:2f:01:bc:69:ad:3b:4b:cb:4d: f2:14:32:1c:67:bc:1c:27:37:e1:70:29:c8:5f:7b: e4:e7:c8:8a:74:2f:5d:96:e3:05:2a:6f:76:ad:ce: a3:f8:46:de:fd:56:bf:5e:ae:f9:1c:cc:fe:c3:54: 3f:12:3e:86:ff:cf:da:c6:3f:30:bf:f9:32:cf:12: 6c:1c:64:0f:b1:cf:71:b6:1e:7e:3c:70:24:88:47: 4c:c1:a4:94:7d:6b:e0:81:41:5d:f0:d9:28:13:63: 6d:67:5e:32:3c:92:69:d2:bb:34:59:73:e2:12:2a: cf:d4:c4:8e:2c:68:3d:1f:0f:9b:2b:bf:05:b1:02: 4e:a0:0b:30:42:74:50:f8:cb:e7:dc:5f:1b:a5:77: 32:ba:1c:e7:89:fe:f3:e0:e8:ee:ae:7a:91:46:9c: 35:a3:f2:04:57:99:31:ca:3d:bd:c6:bc:38:54:dd: 7b:eb:46:b5:38:2b:08:e9:46:86:ce:d4:f3:96:fb: 1f:1f:fa:bb:0d:76:eb:73:fb:cc:22:54:cf:69:49: c9:c5:39:c4:52:fd:e9:b9:78:35:95:04:b5:7c:11: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.194.0/23 IPv6: 2405:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 11:ed:65:ff:34:56:71:59:34:65:14:81:c0:3e:56:c4:25:a6: 32:ff:c0:09:b9:ea:67:e6:fd:8f:83:26:ad:69:ab:91:19:83: ee:2b:c2:c7:6a:d5:6c:55:93:03:e1:b0:1f:7b:18:79:ca:9a: 1f:2e:19:09:0a:56:27:88:06:1f:b5:c9:27:8d:ef:2f:c1:1c: ea:69:08:d7:fe:68:d2:c4:c3:68:79:5b:d5:1f:54:d4:cc:31: a3:8a:bc:2e:75:00:37:69:46:0d:e5:eb:10:76:94:08:f2:70: 98:68:27:45:c2:bb:e7:85:44:42:75:15:53:bc:20:97:97:ad: b6:83:30:dd:cf:87:43:1b:4c:90:74:31:a4:1a:18:fd:11:6d: 5f:57:6e:93:5f:d0:b0:b9:e5:f2:52:89:ad:93:2a:8f:2f:16: 82:be:4a:9d:81:91:67:f7:04:cd:2d:b4:ee:d3:7f:ef:c5:c7: 71:7e:38:9e:34:55:6b:56:8f:f0:a8:b1:67:86:78:d0:c7:a5: 01:b8:23:7c:b5:69:99:0a:ca:95:3c:57:a2:ff:ee:2c:62:6d: 83:df:8f:47:a6:83:a1:d8:28:bd:32:2b:1a:9a:e6:a8:42:9a: 3f:ea:ad:e9:79:dc:02:5e:b9:1e:4d:40:26:0e:be:52:37:94: 24:3c:0b:0d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAcPuGLy6MZWVNYPxmVUK2WMHkN4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTA3MjczNFoX DTI1MDUyMDA3MzIzNFowMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1 N0ZGQTJFQTA2MUI2NkFDQkRBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHeD1lIqtyNHBP65TUg4g7UT6vGrgJOvbPYfwKWS/s4m93YLwG8aa07S8tN 8hQyHGe8HCc34XApyF975OfIinQvXZbjBSpvdq3Oo/hG3v1Wv16u+RzM/sNUPxI+ hv/P2sY/ML/5Ms8SbBxkD7HPcbYefjxwJIhHTMGklH1r4IFBXfDZKBNjbWdeMjyS adK7NFlz4hIqz9TEjixoPR8Pmyu/BbECTqALMEJ0UPjL59xfG6V3Mroc54n+8+Do 7q56kUacNaPyBFeZMco9vca8OFTde+tGtTgrCOlGhs7U85b7Hx/6uw1263P7zCJU z2lJycU5xFL96bl4NZUEtXwRzq0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAn1j2QcXUK9LSVX/6LqBhtmrL2oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyZTA2Zjcy LTEzMjMtNGZiZC1iMjZlLTllZDlhOWFkZDg4MC8wLzA5RjU4RjY0MUM1RDQyQkQy RDI1NTdGRkEyRUEwNjFCNjZBQ0JEQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnj8IwDQQCAAIwBwMFACQFWcAwDQYJKoZIhvcNAQELBQADggEBABHtZf80VnFZ NGUUgcA+VsQlpjL/wAm56mfm/Y+DJq1pq5EZg+4rwsdq1WxVkwPhsB97GHnKmh8u GQkKVieIBh+1ySeN7y/BHOppCNf+aNLEw2h5W9UfVNTMMaOKvC51ADdpRg3l6xB2 lAjycJhoJ0XCu+eFREJ1FVO8IJeXrbaDMN3Ph0MbTJB0MaQaGP0RbV9XbpNf0LC5 5fJSia2TKo8vFoK+Sp2BkWf3BM0ttO7Tf+/Fx3F+OJ40VWtWj/CosWeGeNDHpQG4 I3y1aZkKypU8V6L/7ixibYPfj0emg6HYKL0yKxqa5qhCmj/qrel53AJeuR5NQCYO vlI3lCQ8Cw0= -----END CERTIFICATE-----Generated at Sun Jun 23 00:03:51 2024 by rpki-client on console-ams.rpki-client.org