$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.cer (raw, json) Hash identifier: q7EE6+XpGbdpcqkJYlqkh2xnh9gEGq/55HhreNm5/7A= Subject key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7ECFA6C309CA9315F19458677B6AA69C7A2790D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 23:43:36 +0000 Certificate not after: Sun 28 Jul 2024 23:48:36 +0000 Subordinate resources: IP: 43.245.188.0/22 IP: 103.29.148.0/22 IP: 202.6.208.0/20 IP: 2403:e600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cf:a6:c3:09:ca:93:15:f1:94:58:67:7b:6a:a6:9c:7a:27:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 23:43:36 2023 GMT Not After : Jul 28 23:48:36 2024 GMT Subject: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:e3:ff:ec:5c:d4:18:8f:80:08:37:85:d4: 9c:26:8b:de:bf:08:7c:47:44:f9:13:c8:d3:3e:51: 5b:7d:2d:d2:aa:8b:a3:d1:d0:16:38:f0:ba:4a:2a: c5:89:fe:07:1d:f5:c6:cf:28:44:b6:51:a5:cf:58: 5d:54:6f:d1:87:71:76:06:e3:8f:78:b6:21:7c:d6: 92:fc:ce:f7:d0:00:f4:52:f3:a8:fb:54:fc:48:30: 2b:38:34:b4:cf:b1:65:80:de:ad:40:87:6c:a5:84: f0:8a:8b:32:e3:08:08:c3:a7:83:a5:2b:a1:7a:68: 22:dd:60:d0:59:72:9b:80:b5:e1:70:1f:97:9a:c8: 98:58:02:94:f9:be:fc:be:fd:84:50:d9:49:58:ad: 6f:76:80:99:2d:a8:e6:78:ee:a8:0a:99:43:54:44: 21:4c:70:7d:46:82:0c:4e:7f:39:65:60:c5:da:06: 4d:fd:4f:90:19:3d:e1:c8:a4:dd:3d:57:db:f4:55: 81:69:23:e2:e8:79:94:29:f5:70:d4:1e:66:57:01: c4:5e:4c:b1:8a:f5:b5:40:e0:68:ea:b4:9a:fb:12: 85:c5:54:dc:3d:af:d2:23:db:90:b2:8a:14:e0:26: 36:53:9e:27:53:15:20:9c:3d:4b:e2:97:49:30:e5: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.188.0/22 103.29.148.0/22 202.6.208.0/20 IPv6: 2403:e600::/32 Signature Algorithm: sha256WithRSAEncryption 16:b7:76:ad:85:26:f7:83:44:e2:5d:8f:b6:81:8d:07:45:07: 6f:55:27:cc:cc:71:fa:1a:e7:f4:95:d0:96:22:ff:87:b4:1f: 03:30:a4:d4:67:97:4e:ca:ec:43:54:1b:c7:b7:ca:09:26:49: da:3a:99:ea:c8:a3:ac:58:a4:ee:de:64:8b:80:c0:e1:c2:32: eb:6f:6e:9c:59:e7:23:48:08:02:51:82:21:b4:ae:1b:fe:04: ee:9f:47:10:ad:ad:e7:a7:54:e2:6a:ad:cc:96:a4:ac:60:94: d6:9f:c7:38:14:c2:12:23:3a:ef:8c:f1:61:3a:53:cf:a1:7c: c1:fb:70:42:40:b3:ff:d0:9d:12:16:a2:31:84:97:11:a9:33: 31:f3:f2:51:f9:be:14:60:27:57:19:f6:26:58:1a:50:45:5f: b7:e4:c7:4d:4e:f3:c7:5f:bf:ab:46:4e:90:a0:4b:44:c5:e9: d9:cd:be:70:4b:5b:19:d6:d8:62:39:8a:28:2f:56:a4:64:12: 97:6c:03:5f:fe:79:27:e0:96:10:f7:99:e9:fc:d8:16:df:1e: ef:5c:cf:44:06:2c:eb:9c:b7:a1:f0:dc:ab:43:07:b0:9b:b3: e4:3f:62:c3:90:37:de:74:75:e1:28:24:aa:23:59:21:c7:96: 22:d1:f0:96 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUfs+mwwnKkxXxlFhne2qmnHonkNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIzNDMzNloX DTI0MDcyODIzNDgzNlowMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0 RTY3RDgwNDhDMEQxQ0UzQjI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIL4//sXNQYj4AIN4XUnCaL3r8IfEdE+RPI0z5RW30t0qqLo9HQFjjwukoq xYn+Bx31xs8oRLZRpc9YXVRv0Ydxdgbjj3i2IXzWkvzO99AA9FLzqPtU/EgwKzg0 tM+xZYDerUCHbKWE8IqLMuMICMOng6UroXpoIt1g0Flym4C14XAfl5rImFgClPm+ /L79hFDZSVitb3aAmS2o5njuqAqZQ1REIUxwfUaCDE5/OWVgxdoGTf1PkBk94cik 3T1X2/RVgWkj4uh5lCn1cNQeZlcBxF5MsYr1tUDgaOq0mvsShcVU3D2v0iPbkLKK FOAmNlOeJ1MVIJw9S+KXSTDl+IECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE5SUEOXtoNXhL1OZ9gEjA0c47JCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8wLzRFNTI1MDQzOTdCNjgzNTc4 NEJENEU2N0Q4MDQ4QzBEMUNFM0IyNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAIr9bwDBAJnHZQDBATKBtAwDQQCAAIwBwMFACQD5gAwDQYJKoZIhvcNAQELBQAD ggEBABa3dq2FJveDROJdj7aBjQdFB29VJ8zMcfoa5/SV0JYi/4e0HwMwpNRnl07K 7ENUG8e3ygkmSdo6merIo6xYpO7eZIuAwOHCMutvbpxZ5yNICAJRgiG0rhv+BO6f RxCtreenVOJqrcyWpKxglNafxzgUwhIjOu+M8WE6U8+hfMH7cEJAs//QnRIWojGE lxGpMzHz8lH5vhRgJ1cZ9iZYGlBFX7fkx01O88dfv6tGTpCgS0TF6dnNvnBLWxnW 2GI5iigvVqRkEpdsA1/+eSfglhD3men82BbfHu9cz0QGLOuct6Hw3KtDB7Cbs+Q/ YsOQN950deEoJKojWSHHliLR8JY= -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:16 2024 by rpki-client on console-ams.rpki-client.org