$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer (raw, json) Hash identifier: lXKPl4jIdqkrws2X6qU2E8yiNjnQCCsyaqHYzqZViWI= Subject key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01FDA91FCD9D2F2519CCDE8C9184557033FBBCF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft caRepository: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:42:02 +0000 Certificate not after: Mon 29 Jul 2024 02:47:02 +0000 Subordinate resources: IP: 103.41.192.0/22 IP: 117.53.144.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fd:a9:1f:cd:9d:2f:25:19:cc:de:8c:91:84:55:70:33:fb:bc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:42:02 2023 GMT Not After : Jul 29 02:47:02 2024 GMT Subject: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:ec:0f:3e:e4:c8:bc:2c:79:57:1d:77:a0: ed:1d:99:8e:77:d9:72:50:33:b0:f2:a8:40:3d:41: c1:2f:97:30:1a:a8:11:3e:1e:7f:f1:d2:82:79:3f: 35:bb:c0:fe:f1:85:1b:a8:b9:be:1d:64:25:25:d9: a0:73:5e:e8:ed:f5:f4:3b:d2:bb:6f:b5:fa:8a:f8: e9:39:79:4a:b5:de:a3:92:ac:06:ad:55:98:e0:54: 44:ae:ba:93:a2:bf:6a:16:5a:74:8f:53:55:c9:b8: b3:cb:30:28:8f:ee:17:15:ea:12:3c:5b:fa:70:4f: 06:ea:8a:9a:1a:d7:68:e2:88:db:fd:48:c4:3a:88: ee:d5:2d:70:6b:38:6f:a7:80:a7:39:0b:d2:76:ec: 75:4f:d1:fc:90:dd:e0:44:9e:7d:2b:db:9f:92:7d: c2:f7:42:e9:70:6a:84:fc:82:32:d3:ee:1c:60:dd: 18:90:6c:70:84:99:aa:24:ee:73:f7:f0:f6:df:38: b6:26:62:b4:e7:2a:51:83:10:c8:f8:a5:58:da:f0: b3:90:6d:c7:90:9c:74:9a:72:03:45:c8:25:fa:a1: 27:40:4e:4d:ce:86:60:34:19:49:59:b0:a4:f0:99: 2a:ac:0b:e2:79:39:21:6f:df:7d:95:8e:eb:c0:61: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.192.0/22 117.53.144.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:f8:20:df:f8:48:ed:d0:15:8d:67:c7:6c:66:6b:5d:55:6a: d2:25:50:51:d4:33:fb:e8:fc:53:f4:4c:aa:53:98:2a:64:27: 77:c3:5b:82:0a:15:ea:35:2e:4b:d3:67:2c:dd:94:fe:0e:17: 35:2f:94:af:e1:bf:56:24:a8:72:6c:04:16:93:14:07:5a:cd: d2:33:ae:80:70:2d:d0:29:5c:80:d3:8a:c4:da:46:ab:aa:fe: d5:a5:cc:5f:1f:36:78:a4:ff:4c:f7:63:91:4e:38:05:a9:4b: 0b:bd:8f:ed:f8:2a:6f:ba:32:43:12:7c:f4:bf:27:14:03:e7: 13:32:23:ed:96:b9:7b:58:24:e3:fa:69:31:3f:53:57:73:76: cc:dc:9c:4c:93:79:7d:db:5f:21:8d:8c:a5:be:d3:ff:da:07: d6:75:0d:97:7c:74:88:1e:e4:57:69:17:49:ac:db:9b:dd:0e: 1f:fd:c0:2e:c2:78:07:9b:30:73:00:fb:45:32:4b:57:4e:63: 39:de:45:16:9c:15:70:22:4b:71:62:fd:bf:72:1d:5a:91:0c: f0:17:f0:ca:1c:18:79:17:af:e4:0f:96:a7:f0:59:f2:0f:32: 78:ab:00:83:94:92:fa:35:62:ef:58:1f:f2:1e:6d:72:b6:f3: 31:f7:01:d3 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUAf2pH82dLyUZzN6MkYRVcDP7vPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyNDIwMloX DTI0MDcyOTAyNDcwMlowMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1 Q0Y5QjJBODFFMjIzOTI1QTg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANe17A8+5Mi8LHlXHXeg7R2ZjnfZclAzsPKoQD1BwS+XMBqoET4ef/HSgnk/ NbvA/vGFG6i5vh1kJSXZoHNe6O319DvSu2+1+or46Tl5SrXeo5KsBq1VmOBURK66 k6K/ahZadI9TVcm4s8swKI/uFxXqEjxb+nBPBuqKmhrXaOKI2/1IxDqI7tUtcGs4 b6eApzkL0nbsdU/R/JDd4ESefSvbn5J9wvdC6XBqhPyCMtPuHGDdGJBscISZqiTu c/fw9t84tiZitOcqUYMQyPilWNrws5Btx5CcdJpyA0XIJfqhJ0BOTc6GYDQZSVmw pPCZKqwL4nk5IW/ffZWO68BhRlUCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEmLRreJNh0qqk5c+bKoHiI5JaifMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxOTE2NmEx LTE4Y2QtNDRkMy1hNmUwLTJlZjgyZjc2MGQyOC8wLzQ5OEI0NkI3ODkzNjFEMkFB QTRFNUNGOUIyQTgxRTIyMzkyNUE4OUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJnKcADBAJ1NZAwDQYJKoZIhvcNAQELBQADggEBAF74IN/4SO3QFY1nx2xma11V atIlUFHUM/vo/FP0TKpTmCpkJ3fDW4IKFeo1LkvTZyzdlP4OFzUvlK/hv1YkqHJs BBaTFAdazdIzroBwLdApXIDTisTaRquq/tWlzF8fNnik/0z3Y5FOOAWpSwu9j+34 Km+6MkMSfPS/JxQD5xMyI+2WuXtYJOP6aTE/U1dzdszcnEyTeX3bXyGNjKW+0//a B9Z1DZd8dIge5FdpF0ms25vdDh/9wC7CeAebMHMA+0UyS1dOYzneRRacFXAiS3Fi /b9yHVqRDPAX8MocGHkXr+QPlqfwWfIPMnirAIOUkvo1Yu9YH/IebXK28zH3AdM= -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:16 2024 by rpki-client on console-ams.rpki-client.org