$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer (raw, json) Hash identifier: 2eCbAelyLqUCxViOi4KrI9tYcdmmnhUMCDrntNU65yk= Subject key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70386A257BCC648E5ED0E5D579243F4EB9FB663A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 May 2024 07:10:57 +0000 Certificate not after: Wed 30 Apr 2025 07:15:57 +0000 Subordinate resources: IP: 103.187.90.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:6a:25:7b:cc:64:8e:5e:d0:e5:d5:79:24:3f:4e:b9:fb:66:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 1 07:10:57 2024 GMT Not After : Apr 30 07:15:57 2025 GMT Subject: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:b5:bf:a7:6f:49:aa:a0:42:61:37:2b:54: 17:27:a2:c4:c4:6c:97:e6:50:f8:d3:87:d6:43:25: e8:10:e2:be:0e:4d:21:63:15:8c:69:4a:2e:d4:52: f9:97:d9:5a:4a:a9:14:69:b8:97:f9:9e:75:13:19: ef:ac:0d:81:d6:20:ba:dd:fd:9f:c6:36:09:bd:fb: 75:c8:45:ab:6b:a1:fc:a5:98:22:65:f5:0d:0d:04: 6a:02:f5:55:fc:c7:5f:bd:fe:10:c9:30:74:6d:25: 9e:66:78:18:36:0c:84:a7:09:8b:91:54:c2:f9:07: af:22:7b:d6:45:8a:0d:4b:17:66:ad:b7:ab:c4:ba: 0b:8d:49:8a:5b:03:89:1b:11:36:8b:62:5c:db:16: a7:5d:21:87:02:20:7a:92:bb:fb:0c:01:8d:87:fb: 0d:f3:67:be:92:b2:8d:ae:47:98:3f:54:10:61:5d: 2a:6f:e7:19:fd:f9:9c:e3:2c:0e:cf:3d:65:84:73: e7:14:7d:6a:f1:b1:84:3d:be:72:65:6b:52:37:48: b4:8a:ee:9e:01:14:13:06:f6:5f:39:d5:cc:90:d8: 69:b9:fb:20:a5:37:98:c5:0d:5b:cd:ec:0a:a9:78: 4b:e4:36:47:45:ee:3e:08:ba:bd:82:b2:14:ea:a9: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.90.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:cb:4a:c7:80:ba:96:49:fe:bf:ed:14:7b:87:03:3a:ce:33: 7a:4b:c7:81:b9:78:fd:b5:cf:19:c5:b0:6b:67:c3:c1:44:b1: f1:9d:43:f0:23:4b:aa:1e:2f:a0:f7:65:c2:2c:85:32:81:88: d0:97:e3:a8:9b:6d:86:57:48:9c:99:56:d2:72:6d:91:79:7f: ab:52:90:bd:bc:82:29:a3:24:3f:67:3c:22:94:71:47:97:ba: f4:36:6f:fa:b9:20:3b:c4:40:22:0e:82:7f:db:ee:dd:5b:87: e3:6c:8a:fc:7c:9a:e5:aa:77:52:07:d2:bf:99:8e:c8:47:c1: b7:79:70:ef:b5:04:ba:aa:c3:e7:53:b5:92:f3:e0:02:43:31: 22:b0:09:ef:54:a4:e8:41:b5:7c:03:42:a9:f2:0e:90:d7:b9: 91:3a:5d:31:14:d0:7d:f0:bb:c0:20:80:92:b6:27:be:19:77: 37:18:25:30:29:9e:30:22:c6:fc:d1:9b:43:12:e0:fe:fe:59: 5a:9d:b8:24:58:7e:4a:eb:c4:c1:16:bc:c9:94:d4:fa:46:60: 1f:93:47:ae:eb:01:06:8d:fb:4d:cf:90:33:4d:18:81:81:a0: 7c:d2:df:91:7f:24:d6:a2:c8:fc:95:80:56:2e:e6:77:6e:55: ca:15:3b:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcDhqJXvMZI5e0OXVeSQ/Trn7ZjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwMTA3MTA1N1oX DTI1MDQzMDA3MTU1N1owMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3 RjEzNUQyQkJCMUIzMDEwNTA1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnmtb+nb0mqoEJhNytUFyeixMRsl+ZQ+NOH1kMl6BDivg5NIWMVjGlKLtRS +ZfZWkqpFGm4l/medRMZ76wNgdYgut39n8Y2Cb37dchFq2uh/KWYImX1DQ0EagL1 VfzHX73+EMkwdG0lnmZ4GDYMhKcJi5FUwvkHryJ71kWKDUsXZq23q8S6C41JilsD iRsRNotiXNsWp10hhwIgepK7+wwBjYf7DfNnvpKyja5HmD9UEGFdKm/nGf35nOMs Ds89ZYRz5xR9avGxhD2+cmVrUjdItIrungEUEwb2XznVzJDYabn7IKU3mMUNW83s Cql4S+Q2R0XuPgi6vYKyFOqpGS8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEOdFuA9BdXOyit/E10ruxswEFBXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZjNiMzdk LWZlNGQtNDM2ZC1hOTNiLWUxZjZmY2M5ZmM0ZC8wLzQzOUQxNkUwM0QwNUQ1Q0VD QTJCN0YxMzVEMkJCQjFCMzAxMDUwNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnu1owDQYJKoZIhvcNAQELBQADggEBAA3LSseAupZJ/r/tFHuHAzrOM3pLx4G5 eP21zxnFsGtnw8FEsfGdQ/AjS6oeL6D3ZcIshTKBiNCX46ibbYZXSJyZVtJybZF5 f6tSkL28gimjJD9nPCKUcUeXuvQ2b/q5IDvEQCIOgn/b7t1bh+Nsivx8muWqd1IH 0r+ZjshHwbd5cO+1BLqqw+dTtZLz4AJDMSKwCe9UpOhBtXwDQqnyDpDXuZE6XTEU 0H3wu8AggJK2J74ZdzcYJTApnjAixvzRm0MS4P7+WVqduCRYfkrrxMEWvMmU1PpG YB+TR67rAQaN+03PkDNNGIGBoHzS35F/JNaiyPyVgFYu5nduVcoVO0Q= -----END CERTIFICATE-----Generated at Wed May 8 17:45:17 2024 by rpki-client on console-ams.rpki-client.org