$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer File: 93B49EA86589396F687875020DE4D17DE244CD6E.cer (raw, json) Hash identifier: LpXZKLZVUnJ6WwTue0MjWoJZMoDiwY4QdeplSIlDoc8= Subject key identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 18BED7EE18EB2366761AADBB947BBB837CEF2D75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jan 2024 02:51:54 +0000 Certificate not after: Thu 09 Jan 2025 02:56:54 +0000 Subordinate resources: IP: 2001:df3:5bc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:d7:ee:18:eb:23:66:76:1a:ad:bb:94:7b:bb:83:7c:ef:2d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 11 02:51:54 2024 GMT Not After : Jan 9 02:56:54 2025 GMT Subject: CN=93B49EA86589396F687875020DE4D17DE244CD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:d3:47:44:ba:72:a6:f0:39:f1:5f:7f:f1: ef:6f:c6:8e:30:78:ed:38:24:5a:71:c7:e2:c8:bf: 81:bf:57:d7:e4:eb:19:64:84:d4:15:55:87:a5:8a: 12:fc:5a:df:77:8b:7e:54:56:be:16:54:63:5e:ef: b4:6b:b6:88:ea:50:8b:43:68:35:71:47:7b:14:69: 9d:68:20:9d:bf:18:e3:0e:b7:15:4a:5f:4b:63:5c: c9:21:7f:27:1e:f3:fc:17:ac:e8:e5:86:19:aa:b8: 98:33:da:6e:1c:41:83:89:7c:b4:92:57:1e:b8:1e: fa:e0:52:c0:a4:f3:25:1c:24:09:75:29:16:a1:21: 81:73:2d:03:b1:ba:92:f1:d6:9a:49:9d:58:bb:c6: c9:31:a0:76:20:34:59:47:4a:32:6c:41:13:11:57: ba:3e:c9:ba:2f:40:ba:1a:06:97:03:5f:0b:4f:13: e2:fa:f6:2f:3a:4c:3c:cf:2d:1a:55:db:1d:44:36: 88:88:f2:1d:e0:ed:45:c4:42:d4:a4:d0:14:96:b9: 78:02:9b:29:ab:ea:84:cb:0b:a8:fe:53:84:b8:13: e7:dc:af:ce:98:45:f6:4f:82:14:cd:fd:a6:01:4d: cc:c7:0c:58:19:b8:c9:d2:69:e9:6f:1a:86:74:5d: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:5bc0::/48 Signature Algorithm: sha256WithRSAEncryption 63:88:08:17:35:2e:ca:a9:89:e8:04:89:75:8e:a3:d3:94:b1: cb:ed:b6:44:31:0f:37:59:a5:21:0a:14:1f:57:26:b4:37:7f: 4f:2d:d4:44:f2:3e:8f:ec:25:e4:3d:0a:06:b5:34:d2:b0:97: 3b:ac:bd:a4:3e:e2:d2:e0:a6:0e:a8:1b:2c:a0:50:85:9d:cf: dc:e4:b2:12:1d:34:65:fd:15:04:df:ef:2d:45:92:f0:8d:3c: fe:60:89:eb:32:bf:4a:d6:a5:6a:9b:4d:1c:e1:12:47:92:02: 12:94:8e:db:fb:96:9c:66:27:c9:a1:33:6c:fe:12:27:4c:4a: 10:0a:e6:2a:15:7b:6b:63:a3:4e:0e:d0:33:20:35:c4:25:b3: 58:38:28:80:4c:3e:10:d5:f7:e1:41:59:a0:a3:e3:c9:02:8f: 3b:5e:a3:15:4b:50:f7:c5:c5:c8:5b:47:66:fd:ee:b1:2e:98: 17:96:b7:67:ef:a7:89:1f:b3:5f:96:8a:ff:37:65:a9:13:6d: 38:d9:21:bc:df:03:a4:14:70:f9:ea:dc:d0:ef:bc:00:59:91: 31:55:64:c6:40:bd:59:95:f0:33:f0:41:c3:8e:52:43:33:0f: c2:89:ad:47:b3:9b:06:54:0d:06:f3:c2:a8:72:28:c6:68:a3: 33:55:83:01 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUGL7X7hjrI2Z2Gq27lHu7g3zvLXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExMTAyNTE1NFoX DTI1MDEwOTAyNTY1NFowMzExMC8GA1UEAxMoOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3 NTAyMERFNEQxN0RFMjQ0Q0Q2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh400dEunKm8DnxX3/x72/GjjB47TgkWnHH4si/gb9X1+TrGWSE1BVVh6WK Evxa33eLflRWvhZUY17vtGu2iOpQi0NoNXFHexRpnWggnb8Y4w63FUpfS2NcySF/ Jx7z/Bes6OWGGaq4mDPabhxBg4l8tJJXHrge+uBSwKTzJRwkCXUpFqEhgXMtA7G6 kvHWmkmdWLvGyTGgdiA0WUdKMmxBExFXuj7Jui9AuhoGlwNfC08T4vr2LzpMPM8t GlXbHUQ2iIjyHeDtRcRC1KTQFJa5eAKbKavqhMsLqP5ThLgT59yvzphF9k+CFM39 pgFNzMcMWBm4ydJp6W8ahnRdjksCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJO0nqhliTlvaHh1Ag3k0X3iRM1uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMmU0Zjg2 LTQ4ZTctNDhjNy1iYTkxLWUyNTk2ODM3OGU5NS8xLzkzQjQ5RUE4NjU4OTM5NkY2 ODc4NzUwMjBERTREMTdERTI0NENENkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zW8AwDQYJKoZIhvcNAQELBQADggEBAGOICBc1LsqpiegEiXWOo9OUscvt tkQxDzdZpSEKFB9XJrQ3f08t1ETyPo/sJeQ9Cga1NNKwlzusvaQ+4tLgpg6oGyyg UIWdz9zkshIdNGX9FQTf7y1FkvCNPP5giesyv0rWpWqbTRzhEkeSAhKUjtv7lpxm J8mhM2z+EidMShAK5ioVe2tjo04O0DMgNcQls1g4KIBMPhDV9+FBWaCj48kCjzte oxVLUPfFxchbR2b97rEumBeWt2fvp4kfs1+Wiv83ZakTbTjZIbzfA6QUcPnq3NDv vABZkTFVZMZAvVmV8DPwQcOOUkMzD8KJrUezmwZUDQbzwqhyKMZoozNVgwE= -----END CERTIFICATE-----Generated at Wed May 8 04:37:53 2024 by rpki-client on console-fra.rpki-client.org