$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer (raw, json) Hash identifier: hKfTDTkLEPis3uGO/pFYHjFYvPy3QmNFijpwJt4HSl0= Subject key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56A57C8C13060E63220E6CE8F60948BDB42314C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft caRepository: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Nov 2023 17:00:29 +0000 Certificate not after: Wed 06 Nov 2024 17:05:29 +0000 Subordinate resources: IP: 103.154.230.0/23 IP: 2406:5dc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a5:7c:8c:13:06:0e:63:22:0e:6c:e8:f6:09:48:bd:b4:23:14:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 17:00:29 2023 GMT Not After : Nov 6 17:05:29 2024 GMT Subject: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:51:99:54:ab:c0:a3:6b:1f:ee:0a:62:bc: 32:c4:3a:e6:fc:3c:00:b7:13:33:0e:6b:77:7e:71: 32:36:dc:b4:17:95:08:d9:9c:66:ad:a9:c7:6f:f0: a1:cd:42:00:15:a2:67:f3:73:b3:6a:c3:a5:e4:ab: 1e:c1:22:ab:5e:d3:f6:4d:4b:67:fc:70:18:a9:b9: 2b:25:92:ed:d6:ff:b0:01:79:3c:24:3a:bd:ab:4d: 12:a4:58:91:82:a6:92:12:60:9e:8d:1d:bc:df:3b: 95:21:9e:89:37:f1:51:79:f5:37:6e:15:db:60:cb: c1:51:66:af:8c:45:d6:2b:14:05:26:fb:30:2f:ca: a7:1a:2c:3d:27:06:63:f9:55:f3:4d:6b:d3:94:f9: ad:6c:e2:97:47:2d:a5:e4:06:7e:28:14:a6:de:9b: 12:8a:76:ba:07:8f:d0:7a:25:57:97:11:ba:c4:8e: 78:7b:e6:e3:fd:02:6b:c8:78:27:23:9e:c3:3c:ff: 59:34:1f:0b:b9:cb:48:fd:bd:4e:3b:53:79:b0:6c: 93:56:0b:5d:f3:03:53:4c:9e:9f:31:09:17:2e:21: 4e:c6:a1:82:62:33:2a:91:f0:21:ba:62:f0:68:42: db:e9:6e:de:d1:32:ed:43:f1:2c:05:17:6a:01:5c: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.230.0/23 IPv6: 2406:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 52:01:e9:fa:1f:dd:a7:65:f7:b7:0c:91:47:43:73:ca:84:e1: ad:32:fe:4f:19:28:a0:1e:55:d9:5f:44:ec:98:2a:07:3b:a5: 6a:4b:f2:15:05:79:b2:3d:af:1a:00:a4:b9:f8:a4:5c:fe:c0: cb:ca:7b:46:73:75:56:09:fa:57:3e:fc:89:95:a7:66:b9:b7: 13:5e:8f:c8:7e:56:49:4a:9a:3c:ab:da:03:a9:6d:1b:e5:22: 12:63:24:19:9c:3b:61:0c:63:44:5e:9c:d6:a1:cd:65:e0:d5: b0:37:11:59:d6:4e:f5:c2:f9:af:32:7d:80:74:08:cb:d0:fe: 10:fb:c3:32:8c:d8:69:5b:9a:77:df:bb:89:cc:9e:6c:90:15: 8d:74:ff:42:9f:2a:0e:42:0d:b2:e0:41:d7:35:0d:34:bb:a3: 73:2d:d4:54:95:3e:c9:91:6b:5b:dd:9e:50:54:be:ee:31:bd: 52:aa:7e:98:af:5b:30:bf:74:53:43:97:be:56:da:6a:e4:74: fd:7b:8d:dd:ab:2f:fd:80:e8:bb:e9:f1:09:71:f7:41:b0:71: 87:27:8d:5a:e1:26:57:67:c2:e7:9b:b1:5e:92:a8:95:9f:c3: 69:6b:98:17:97:a6:51:22:bf:33:1a:31:e7:c4:24:38:96:e0: 40:f5:eb:2d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVqV8jBMGDmMiDmzo9glIvbQjFMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwODE3MDAyOVoX DTI0MTEwNjE3MDUyOVowMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjky NEVDRjFBRDlDOUMxMzk5MjM4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdKUZlUq8Cjax/uCmK8MsQ65vw8ALcTMw5rd35xMjbctBeVCNmcZq2px2/w oc1CABWiZ/Nzs2rDpeSrHsEiq17T9k1LZ/xwGKm5KyWS7db/sAF5PCQ6vatNEqRY kYKmkhJgno0dvN87lSGeiTfxUXn1N24V22DLwVFmr4xF1isUBSb7MC/KpxosPScG Y/lV801r05T5rWzil0ctpeQGfigUpt6bEop2ugeP0HolV5cRusSOeHvm4/0Ca8h4 JyOewzz/WTQfC7nLSP29TjtTebBsk1YLXfMDU0yenzEJFy4hTsahgmIzKpHwIbpi 8GhC2+lu3tEy7UPxLAUXagFcbDMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJT3WwTOvg3x0Lkk7PGtnJwTmSODMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyMTI3ZmVi LTk2MTUtNGM1OC1hM2JiLWVlZjdiN2E2NTQ3ZS8wLzk0Rjc1QjA0Q0VCRTBERjFE MEI5MjRFQ0YxQUQ5QzlDMTM5OTIzODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmuYwDQQCAAIwBwMFACQGXcAwDQYJKoZIhvcNAQELBQADggEBAFIB6fof3adl 97cMkUdDc8qE4a0y/k8ZKKAeVdlfROyYKgc7pWpL8hUFebI9rxoApLn4pFz+wMvK e0ZzdVYJ+lc+/ImVp2a5txNej8h+VklKmjyr2gOpbRvlIhJjJBmcO2EMY0RenNah zWXg1bA3EVnWTvXC+a8yfYB0CMvQ/hD7wzKM2Glbmnffu4nMnmyQFY10/0KfKg5C DbLgQdc1DTS7o3Mt1FSVPsmRa1vdnlBUvu4xvVKqfpivWzC/dFNDl75W2mrkdP17 jd2rL/2A6Lvp8Qlx90GwcYcnjVrhJldnwuebsV6SqJWfw2lrmBeXplEivzMaMefE JDiW4ED16y0= -----END CERTIFICATE-----Generated at Wed May 8 10:06:50 2024 by rpki-client on console-ams.rpki-client.org