$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer File: 94980F009D62A16111BD1186549F0579B0CED71F.cer (raw, json) Hash identifier: NtznfrXRDHuNbQXQCErUBTZls5gGDKHWSs9cWkHDyH0= Subject key identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1ACFBEAC001B212F168F9B5DE071E8616D78FA46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft caRepository: rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 29 Oct 2023 12:00:47 +0000 Certificate not after: Sun 27 Oct 2024 12:05:47 +0000 Subordinate resources: IP: 103.155.104.0/24 IP: 2001:df4:c280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:be:ac:00:1b:21:2f:16:8f:9b:5d:e0:71:e8:61:6d:78:fa:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 12:00:47 2023 GMT Not After : Oct 27 12:05:47 2024 GMT Subject: CN=94980F009D62A16111BD1186549F0579B0CED71F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:35:88:91:bc:80:71:3c:e4:57:ef:b3:2c: 71:d3:2f:dc:3b:6b:0d:36:34:a7:ba:9b:87:32:52: ec:75:07:09:09:f2:74:ea:ff:28:4a:2f:59:cf:a2: 74:0a:32:ce:c4:be:31:0a:85:98:23:2d:e0:6f:65: f3:91:cf:57:41:d9:f2:3a:c6:99:f6:68:b8:3a:1e: 6b:82:15:1a:8b:2c:b6:06:93:37:f0:8f:51:d6:19: a9:a8:24:be:59:c9:8a:8f:d6:1d:f1:7a:a5:8c:9e: 7e:eb:fe:f0:59:70:3b:2b:d6:9b:b8:65:94:e1:88: 04:cc:7e:a6:da:70:6f:45:ae:83:e1:66:28:01:05: e0:4a:51:48:ab:ba:d2:3e:0c:56:6c:26:20:cb:a6: b9:f6:18:c3:dd:c8:0b:b3:38:d2:55:1d:6a:16:82: ff:de:82:ad:3b:f8:d0:38:07:b8:ff:07:5d:89:ce: 99:6d:18:a0:4c:53:58:40:e5:cf:78:44:2b:d9:f7: 22:05:f9:ea:93:a4:33:79:40:ac:1a:f8:d4:9f:b5: d8:21:66:c8:fd:a2:57:cc:97:7c:40:9b:d8:33:66: eb:cd:c4:17:e8:1d:51:42:db:cc:7f:e0:8b:a2:53: 50:32:e3:82:51:10:aa:dc:23:31:ee:c3:93:e6:dc: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.104.0/24 IPv6: 2001:df4:c280::/48 Signature Algorithm: sha256WithRSAEncryption 5c:87:42:98:d4:80:54:a4:3a:bf:98:dd:f5:ab:59:30:57:61: 64:c9:ac:99:58:8e:4a:0f:78:b1:dd:90:d5:df:f5:1a:16:a6: 58:f5:5d:79:b0:2a:26:1b:45:26:36:d3:6c:d0:a3:39:99:37: 3c:db:4a:a7:60:98:80:f0:79:c3:4d:99:7e:ce:73:e6:56:58: 0e:94:e3:3b:22:1b:65:26:3f:82:5e:2a:ab:85:a5:71:70:47: 94:5e:76:64:2b:2d:0b:b0:ab:ac:09:50:07:f4:e6:1e:cf:67: 93:d8:7a:aa:13:6e:fe:97:b8:fc:e1:2d:22:a1:96:ae:11:68: 11:ea:7e:36:81:4c:f2:6e:70:e6:3e:61:b1:be:24:03:5e:15: 91:9a:43:04:f2:17:5c:7c:b2:f5:ae:63:1c:fa:ae:c9:b0:16: 81:b8:e2:31:92:8b:2f:96:0d:12:c0:52:a8:09:37:2d:f5:9c: 54:34:74:22:08:79:82:7e:00:99:75:97:70:82:d0:18:d5:d3: da:db:3e:57:60:29:18:bb:79:69:c6:db:09:ce:55:c3:00:b4: 70:67:5d:3f:c6:09:e6:c2:76:dc:89:27:52:64:5c:ce:93:7c: c9:b0:84:ee:fb:e8:7a:ce:19:11:87:b1:45:7a:0e:9e:0a:3e: 62:18:20:51 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGs++rAAbIS8Wj5td4HHoYW14+kYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyOTEyMDA0N1oX DTI0MTAyNzEyMDU0N1owMzExMC8GA1UEAxMoOTQ5ODBGMDA5RDYyQTE2MTExQkQx MTg2NTQ5RjA1NzlCMENFRDcxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcINYiRvIBxPORX77MscdMv3DtrDTY0p7qbhzJS7HUHCQnydOr/KEovWc+i dAoyzsS+MQqFmCMt4G9l85HPV0HZ8jrGmfZouDoea4IVGosstgaTN/CPUdYZqagk vlnJio/WHfF6pYyefuv+8FlwOyvWm7hllOGIBMx+ptpwb0Wug+FmKAEF4EpRSKu6 0j4MVmwmIMumufYYw93IC7M40lUdahaC/96CrTv40DgHuP8HXYnOmW0YoExTWEDl z3hEK9n3IgX56pOkM3lArBr41J+12CFmyP2iV8yXfECb2DNm683EF+gdUULbzH/g i6JTUDLjglEQqtwjMe7Dk+bcJS0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJSYDwCdYqFhEb0RhlSfBXmwztcfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNDZjNWYyYy0yNDEyLTQyNjQtYWEwYS0xODk5YzM3YjYyYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0NmM1ZjJj LTI0MTItNDI2NC1hYTBhLTE4OTljMzdiNjJiYi8wLzk0OTgwRjAwOUQ2MkExNjEx MUJEMTE4NjU0OUYwNTc5QjBDRUQ3MUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnm2gwDwQCAAIwCQMHACABDfTCgDANBgkqhkiG9w0BAQsFAAOCAQEAXIdCmNSA VKQ6v5jd9atZMFdhZMmsmViOSg94sd2Q1d/1GhamWPVdebAqJhtFJjbTbNCjOZk3 PNtKp2CYgPB5w02Zfs5z5lZYDpTjOyIbZSY/gl4qq4WlcXBHlF52ZCstC7CrrAlQ B/TmHs9nk9h6qhNu/pe4/OEtIqGWrhFoEep+NoFM8m5w5j5hsb4kA14VkZpDBPIX XHyy9a5jHPquybAWgbjiMZKLL5YNEsBSqAk3LfWcVDR0Igh5gn4AmXWXcILQGNXT 2ts+V2ApGLt5acbbCc5VwwC0cGddP8YJ5sJ23IknUmRczpN8ybCE7vvoes4ZEYex RXoOngo+YhggUQ== -----END CERTIFICATE-----Generated at Wed May 8 17:45:20 2024 by rpki-client on console-ams.rpki-client.org