$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer File: 93B49EA86589396F687875020DE4D17DE244CD6E.cer (raw, json) Hash identifier: Q15WNyvncvkrnEF0FufTrc0cB2TTZF7mI8bfsSG6sRI= Subject key identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57B8C97E7163E6BA3B17A7E4DBEB3D793F2CCD08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Dec 2024 15:50:20 +0000 Certificate not after: Thu 11 Dec 2025 15:55:20 +0000 Subordinate resources: IP: 2001:df3:5bc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b8:c9:7e:71:63:e6:ba:3b:17:a7:e4:db:eb:3d:79:3f:2c:cd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 12 15:50:20 2024 GMT Not After : Dec 11 15:55:20 2025 GMT Subject: CN=93B49EA86589396F687875020DE4D17DE244CD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:d3:47:44:ba:72:a6:f0:39:f1:5f:7f:f1: ef:6f:c6:8e:30:78:ed:38:24:5a:71:c7:e2:c8:bf: 81:bf:57:d7:e4:eb:19:64:84:d4:15:55:87:a5:8a: 12:fc:5a:df:77:8b:7e:54:56:be:16:54:63:5e:ef: b4:6b:b6:88:ea:50:8b:43:68:35:71:47:7b:14:69: 9d:68:20:9d:bf:18:e3:0e:b7:15:4a:5f:4b:63:5c: c9:21:7f:27:1e:f3:fc:17:ac:e8:e5:86:19:aa:b8: 98:33:da:6e:1c:41:83:89:7c:b4:92:57:1e:b8:1e: fa:e0:52:c0:a4:f3:25:1c:24:09:75:29:16:a1:21: 81:73:2d:03:b1:ba:92:f1:d6:9a:49:9d:58:bb:c6: c9:31:a0:76:20:34:59:47:4a:32:6c:41:13:11:57: ba:3e:c9:ba:2f:40:ba:1a:06:97:03:5f:0b:4f:13: e2:fa:f6:2f:3a:4c:3c:cf:2d:1a:55:db:1d:44:36: 88:88:f2:1d:e0:ed:45:c4:42:d4:a4:d0:14:96:b9: 78:02:9b:29:ab:ea:84:cb:0b:a8:fe:53:84:b8:13: e7:dc:af:ce:98:45:f6:4f:82:14:cd:fd:a6:01:4d: cc:c7:0c:58:19:b8:c9:d2:69:e9:6f:1a:86:74:5d: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:5bc0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:11:7d:28:21:6a:57:da:b0:aa:64:19:97:37:7e:bb:35:f5: c6:6d:2f:66:ba:6c:1b:9c:39:53:6b:ba:cc:00:a2:e5:d6:d8: 4e:56:79:6d:65:de:6e:5e:ea:3e:c5:3a:d2:42:1c:43:12:a3: bb:66:4f:a9:f1:f4:32:00:e3:5c:e3:df:38:85:23:52:0f:56: 40:30:f1:cf:9c:6d:07:9a:78:54:75:76:0a:8b:fd:33:dc:e9: 73:a7:20:e1:d6:53:de:cf:dc:e6:cd:b3:de:36:8a:c0:0b:08: 30:6b:f6:af:07:42:49:6f:2b:73:f9:e5:c4:7f:f4:0c:39:ce: 1a:b1:d7:ff:ce:48:f8:ce:6d:c6:19:15:ea:72:e6:12:a8:6b: 29:f1:dd:f5:56:ab:83:9d:6e:c4:e7:ee:cd:2b:3e:01:a5:19: db:25:70:de:a5:2e:e0:76:ba:42:f4:c5:ac:58:bc:ea:80:a7: 2b:3a:33:e2:85:8c:38:ca:44:6a:83:21:40:b2:8d:41:07:2a: 7e:11:c1:11:21:cd:d5:32:13:a4:03:ce:50:dd:b8:56:aa:c5: e3:8e:35:5d:10:a6:4a:e9:34:b9:39:49:94:27:8f:20:e3:d2: 08:69:09:73:44:04:a7:b0:87:fe:d1:b2:7e:ae:9d:ea:27:41: e4:44:47:5f -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUV7jJfnFj5ro7F6fk2+s9eT8szQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMjE1NTAyMFoX DTI1MTIxMTE1NTUyMFowMzExMC8GA1UEAxMoOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3 NTAyMERFNEQxN0RFMjQ0Q0Q2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh400dEunKm8DnxX3/x72/GjjB47TgkWnHH4si/gb9X1+TrGWSE1BVVh6WK Evxa33eLflRWvhZUY17vtGu2iOpQi0NoNXFHexRpnWggnb8Y4w63FUpfS2NcySF/ Jx7z/Bes6OWGGaq4mDPabhxBg4l8tJJXHrge+uBSwKTzJRwkCXUpFqEhgXMtA7G6 kvHWmkmdWLvGyTGgdiA0WUdKMmxBExFXuj7Jui9AuhoGlwNfC08T4vr2LzpMPM8t GlXbHUQ2iIjyHeDtRcRC1KTQFJa5eAKbKavqhMsLqP5ThLgT59yvzphF9k+CFM39 pgFNzMcMWBm4ydJp6W8ahnRdjksCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJO0nqhliTlvaHh1Ag3k0X3iRM1uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMmU0Zjg2 LTQ4ZTctNDhjNy1iYTkxLWUyNTk2ODM3OGU5NS8xLzkzQjQ5RUE4NjU4OTM5NkY2 ODc4NzUwMjBERTREMTdERTI0NENENkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zW8AwDQYJKoZIhvcNAQELBQADggEBAF0RfSghalfasKpkGZc3frs19cZt L2a6bBucOVNruswAouXW2E5WeW1l3m5e6j7FOtJCHEMSo7tmT6nx9DIA41zj3ziF I1IPVkAw8c+cbQeaeFR1dgqL/TPc6XOnIOHWU97P3ObNs942isALCDBr9q8HQklv K3P55cR/9Aw5zhqx1//OSPjObcYZFepy5hKoaynx3fVWq4OdbsTn7s0rPgGlGdsl cN6lLuB2ukL0xaxYvOqApys6M+KFjDjKRGqDIUCyjUEHKn4RwREhzdUyE6QDzlDd uFaqxeOONV0QpkrpNLk5SZQnjyDj0ghpCXNEBKewh/7Rsn6uneonQeRER18= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:49 2025 by rpki-client