$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer File: E420F134FA1A6BA70588424BD4E862EE6C50C188.cer (raw, json) Hash identifier: ld8epV/Alj728XkKEeUYYM5yctBTMOIy6tu4Tx2Kfxo= Subject key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D29BF5FAA4ED87885B609219AF1D5EBA1D1B0DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft caRepository: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:34:35 +0000 Certificate not after: Mon 29 Jul 2024 03:39:35 +0000 Subordinate resources: IP: 103.194.172.0/22 IP: 2402:cd80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 09:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:29:bf:5f:aa:4e:d8:78:85:b6:09:21:9a:f1:d5:eb:a1:d1:b0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:34:35 2023 GMT Not After : Jul 29 03:39:35 2024 GMT Subject: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:1f:bb:45:d4:0d:75:f9:85:c5:63:f2:04: 7e:8b:e8:32:36:2a:38:f0:05:97:cb:67:db:44:db: 61:bf:42:ba:2e:cf:96:c8:05:3f:3e:f2:a1:12:75: 92:22:b2:3d:6b:9d:f3:b8:68:9f:20:e2:5d:55:2f: 2d:7d:a2:b9:9b:d2:93:32:5c:d0:29:5c:37:20:42: 9f:c3:a8:1b:b1:78:ce:4d:93:20:e4:4c:db:25:e8: 93:98:80:f7:10:5b:39:2e:51:22:de:b8:a0:cc:bd: 94:44:cb:7c:4d:f0:22:09:37:81:a5:3e:41:09:32: 0d:d9:0c:8c:72:9f:40:57:fe:54:06:51:81:70:67: 34:29:3d:ca:90:ba:ed:17:eb:e7:a6:1e:fb:36:c7: 2c:06:a5:8f:41:95:2e:f6:96:8c:a7:5e:78:71:6a: f7:d5:9f:b4:07:a5:82:65:f6:59:eb:bb:24:c3:16: aa:0b:ce:83:dc:3c:e4:e0:78:68:30:73:ba:b7:d3: 92:20:e0:3f:8c:97:8d:00:49:da:0e:91:f1:da:84: 2b:50:f9:e6:ff:33:82:b9:07:2b:a8:53:af:56:72: fb:7e:3b:41:c1:47:f7:67:22:73:82:1c:f7:38:eb: 59:b5:72:32:a3:45:20:1b:7c:09:88:23:7a:86:aa: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.194.172.0/22 IPv6: 2402:cd80::/32 Signature Algorithm: sha256WithRSAEncryption 53:7e:72:f6:6c:25:95:ca:7b:b7:7b:0e:c1:60:ea:2e:6f:77: 68:5a:45:8d:ec:1f:db:be:11:a1:13:ef:fa:12:9b:27:96:bd: 2d:04:c9:77:00:a7:bd:f4:2f:66:31:e8:3a:5e:2b:b1:ca:f4: 6a:38:7f:c9:ed:d9:af:81:2b:2e:22:4b:dd:f9:59:46:7d:b3: bf:cd:d6:9b:d5:a0:da:25:8d:d2:bc:37:cd:b3:ee:fc:84:2e: b8:a4:14:86:9b:01:85:44:09:60:bb:2e:f3:9a:a4:c7:57:38: 0e:cf:2d:ba:78:f8:ca:1f:58:58:a4:52:2e:17:4e:b6:00:2a: 05:49:52:e4:7f:87:f8:5a:f2:09:1e:1a:af:b4:bf:8d:da:a6: 71:f1:61:d2:26:d5:3a:38:00:91:d9:a7:25:66:4e:c4:46:7f: 0a:76:7a:44:05:a7:6b:c7:b7:31:6a:d6:26:4f:d9:eb:ba:18: 3d:dc:64:23:8a:ab:2b:3f:fe:e3:d0:02:76:51:0a:0e:7c:ac: 90:66:75:2b:25:c8:ac:19:70:1b:fe:0f:10:05:c2:58:7f:a4: 26:d0:71:89:5c:8d:42:5b:c8:a3:fb:b1:34:d8:2e:50:f6:91: b9:db:d7:47:43:47:db:a6:11:f6:27:16:95:c1:aa:b7:b8:15: 7f:ee:f9:2c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUDSm/X6pO2HiFtgkhmvHV66HRsN4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMzQzNVoX DTI0MDcyOTAzMzkzNVowMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0 MjRCRDRFODYyRUU2QzUwQzE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJMH7tF1A11+YXFY/IEfovoMjYqOPAFl8tn20TbYb9Cui7PlsgFPz7yoRJ1 kiKyPWud87honyDiXVUvLX2iuZvSkzJc0ClcNyBCn8OoG7F4zk2TIORM2yXok5iA 9xBbOS5RIt64oMy9lETLfE3wIgk3gaU+QQkyDdkMjHKfQFf+VAZRgXBnNCk9ypC6 7Rfr56Ye+zbHLAalj0GVLvaWjKdeeHFq99WftAelgmX2Weu7JMMWqgvOg9w85OB4 aDBzurfTkiDgP4yXjQBJ2g6R8dqEK1D55v8zgrkHK6hTr1Zy+347QcFH92cic4Ic 9zjrWbVyMqNFIBt8CYgjeoaq3fMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOQg8TT6GmunBYhCS9ToYu5sUMGIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmZTM1ZmFh LWVkMmItNDI3MS1iNDhjLTRlYTIxYzMwOTM1Mi8wL0U0MjBGMTM0RkExQTZCQTcw NTg4NDI0QkQ0RTg2MkVFNkM1MEMxODgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnwqwwDQQCAAIwBwMFACQCzYAwDQYJKoZIhvcNAQELBQADggEBAFN+cvZsJZXK e7d7DsFg6i5vd2haRY3sH9u+EaET7/oSmyeWvS0EyXcAp730L2Yx6DpeK7HK9Go4 f8nt2a+BKy4iS935WUZ9s7/N1pvVoNoljdK8N82z7vyELrikFIabAYVECWC7LvOa pMdXOA7PLbp4+MofWFikUi4XTrYAKgVJUuR/h/ha8gkeGq+0v43apnHxYdIm1To4 AJHZpyVmTsRGfwp2ekQFp2vHtzFq1iZP2eu6GD3cZCOKqys//uPQAnZRCg58rJBm dSslyKwZcBv+DxAFwlh/pCbQcYlcjUJbyKP7sTTYLlD2kbnb10dDR9umEfYnFpXB qre4FX/u+Sw= -----END CERTIFICATE-----Generated at Thu May 2 05:10:00 2024 by rpki-client on console-ams.rpki-client.org