$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer (raw, json) Hash identifier: N6rlkcmd0ViAj0vHYv/Vi1vofv9S7oJOyawRxWLhljw= Subject key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C29B359E9E9BD4C015B2D0B298F4CBBF4A6E8EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft caRepository: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 11:21:57 +0000 Certificate not after: Mon 30 Jun 2025 11:26:57 +0000 Subordinate resources: IP: 103.144.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:29:b3:59:e9:e9:bd:4c:01:5b:2d:0b:29:8f:4c:bb:f4:a6:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 11:21:57 2024 GMT Not After : Jun 30 11:26:57 2025 GMT Subject: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:b9:d3:75:48:5b:2f:87:d3:c6:7d:d2:40: 2f:37:d4:06:f0:50:70:25:10:b3:ed:f0:16:69:04: 6d:8d:1c:5f:4f:0a:8e:91:e8:ac:e3:35:37:28:3e: 4e:5c:f9:5b:5f:98:44:6f:8a:7c:18:f1:fb:63:f5: ea:f5:37:64:0e:92:45:aa:ed:84:26:32:97:df:24: d8:60:b8:37:dc:85:93:4b:4e:d8:ae:9b:ad:45:da: 32:ec:7f:8b:78:d6:4d:96:79:26:93:b8:5f:f1:6b: 1e:fb:4d:14:2b:0f:8a:05:82:fd:d9:92:cb:99:41: a6:9e:22:2e:f9:2e:0f:57:c9:49:c6:86:14:4b:ff: 5a:f1:4c:d7:49:7a:97:19:df:7c:18:c7:1c:ce:bb: a5:05:e9:dc:0a:67:d5:4f:7c:b8:e5:12:80:27:41: 0a:49:76:df:70:b4:df:30:98:b0:4e:6a:f5:e5:b9: 67:b5:28:b0:60:12:b8:67:56:91:75:4f:a6:ca:ef: 69:c0:37:11:94:fe:08:89:ad:2f:9b:38:48:2c:49: 5e:0d:4d:d1:ae:ca:0f:03:2f:f8:cb:36:38:49:97: 05:e5:8e:6b:6b:ad:c0:96:72:b0:63:dc:3c:63:92: 28:a0:88:35:c6:c7:d6:25:6d:7b:35:39:74:81:71: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.250.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:94:9a:35:35:ed:0f:75:74:54:c4:3d:4d:ea:98:a3:60:b6: 38:79:c0:b9:f4:ab:a4:41:18:ab:bf:a9:33:ba:a5:33:85:17: 2c:6f:2e:6c:f1:15:7e:ba:8f:86:2b:2b:f4:ac:06:11:a1:5f: 39:ab:38:94:a8:a3:41:20:80:93:52:8d:bc:09:e0:84:ea:ad: 54:ee:37:60:fe:5f:55:c2:b3:d4:4d:ab:64:5a:5c:f4:02:2b: bb:8b:35:e5:19:5f:0d:c1:37:0b:04:5e:0a:4b:33:19:73:e5: 53:04:38:e1:f5:cd:16:77:90:87:10:87:0c:7b:05:0b:5b:c2: 77:32:c5:65:58:13:1b:96:90:46:94:68:55:b5:74:fb:25:d5: 10:f1:c4:9e:cc:28:53:b4:14:ab:1c:0a:27:36:48:5c:89:e4: e5:d7:44:a4:11:19:95:45:20:f7:80:7a:ce:1d:c5:85:34:b7: 43:ec:5f:db:04:ae:dd:c9:f5:39:59:99:bd:29:a9:4f:41:32: dc:2b:56:3d:47:3c:f6:e3:18:99:3a:00:e8:e6:35:30:de:a6: db:e0:20:76:e5:f0:d2:db:44:ab:28:a1:8d:04:f1:6a:f4:3b: 20:d8:0d:1e:ca:82:1e:a9:bf:08:9c:e7:15:63:84:a6:5a:1d: 1e:7b:29:96 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfCmzWenpvUwBWy0LKY9Mu/Sm6O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTExMjE1N1oX DTI1MDYzMDExMjY1N1owMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2 RTNFN0VCQUUzNUI5OTdGMkE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+zudN1SFsvh9PGfdJALzfUBvBQcCUQs+3wFmkEbY0cX08KjpHorOM1Nyg+ Tlz5W1+YRG+KfBjx+2P16vU3ZA6SRarthCYyl98k2GC4N9yFk0tO2K6brUXaMux/ i3jWTZZ5JpO4X/FrHvtNFCsPigWC/dmSy5lBpp4iLvkuD1fJScaGFEv/WvFM10l6 lxnffBjHHM67pQXp3Apn1U98uOUSgCdBCkl233C03zCYsE5q9eW5Z7UosGASuGdW kXVPpsrvacA3EZT+CImtL5s4SCxJXg1N0a7KDwMv+Ms2OEmXBeWOa2utwJZysGPc PGOSKKCINcbH1iVtezU5dIFxVqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJTtpLI2C0fcZThuPn6641uZfypCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1YmY3MThk LTkxMWUtNDNkNi04ZTNjLTBkMWIzNjQ2ZTI3Ni8wLzk0RURBNEIyMzYwQjQ3REM2 NTM4NkUzRTdFQkFFMzVCOTk3RjJBNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkPowDQYJKoZIhvcNAQELBQADggEBAIuUmjU17Q91dFTEPU3qmKNgtjh5wLn0 q6RBGKu/qTO6pTOFFyxvLmzxFX66j4YrK/SsBhGhXzmrOJSoo0EggJNSjbwJ4ITq rVTuN2D+X1XCs9RNq2RaXPQCK7uLNeUZXw3BNwsEXgpLMxlz5VMEOOH1zRZ3kIcQ hwx7BQtbwncyxWVYExuWkEaUaFW1dPsl1RDxxJ7MKFO0FKscCic2SFyJ5OXXRKQR GZVFIPeAes4dxYU0t0PsX9sErt3J9TlZmb0pqU9BMtwrVj1HPPbjGJk6AOjmNTDe ptvgIHbl8NLbRKsooY0E8Wr0OyDYDR7Kgh6pvwic5xVjhKZaHR57KZY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:24 2024 by rpki-client on console-ams.rpki-client.org