$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer File: 49E141888BC2948405FED00F49F101FAF7483662.cer (raw, json) Hash identifier: x+C+MTADZvAuB38rQ9MMiwKsgpaBoTzirS26mVKUdsg= Subject key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5252BE85DDCFD39BD7ABF1FC060DC55E08954783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft caRepository: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 Aug 2024 23:14:55 +0000 Certificate not after: Thu 14 Aug 2025 23:19:55 +0000 Subordinate resources: IP: 103.146.182.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 04:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:52:be:85:dd:cf:d3:9b:d7:ab:f1:fc:06:0d:c5:5e:08:95:47:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 23:14:55 2024 GMT Not After : Aug 14 23:19:55 2025 GMT Subject: CN=49E141888BC2948405FED00F49F101FAF7483662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:bc:63:47:b3:81:f1:54:c6:a8:3e:47:87: b6:99:96:4b:b9:8e:f9:c0:fb:0a:63:65:f1:d7:68: 99:d0:9b:7b:50:40:71:cd:58:4e:ab:8c:06:40:de: ca:4d:7a:10:6e:6e:ff:19:b1:b8:08:a7:aa:ad:bb: 19:f9:7c:b0:d3:5a:47:ba:1e:d3:f8:f2:f8:c2:f5: 02:6c:47:9f:70:14:1e:d5:64:10:e2:3d:0d:18:89: 39:ca:f1:82:76:52:1a:69:2b:14:57:72:c7:06:de: 55:8a:eb:d6:35:24:0f:58:dc:1f:f6:62:2f:d1:41: d1:de:58:f0:e5:42:4b:06:2f:a2:b0:2a:62:df:68: 6c:92:30:fb:e1:be:86:b7:66:a9:b7:52:18:ad:32: 7a:5a:20:4a:e3:6a:19:25:21:d3:e1:e5:31:07:ae: 8b:d0:d2:74:52:4f:f5:77:82:cb:1f:fe:24:ae:a2: 9e:68:4a:70:75:d6:7e:e7:76:7b:78:20:6a:dd:a3: 33:b1:14:be:c5:b9:c9:e3:ae:36:2c:e5:3f:2b:96: f1:53:43:d4:c3:a7:02:86:6e:6c:c6:c6:68:6a:ab: 6c:fc:0e:75:94:48:cc:a4:ea:57:1e:82:f7:9c:38: 7e:d2:e3:2d:5a:8e:41:aa:52:f5:5e:c5:8f:2c:aa: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.182.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:36:77:67:a6:b2:6a:da:c5:7e:21:8f:05:c8:67:b7:cc:ab: 71:de:b1:18:b1:79:9f:de:8c:41:0f:4d:32:92:18:fa:74:69: c2:d5:0b:3c:a0:fb:fe:a1:14:a7:54:b6:b7:f7:b3:02:72:8d: da:7f:4d:0a:98:14:e3:4b:40:62:5e:cc:f5:7f:5d:92:8e:e4: d4:c4:96:1e:4d:4e:a4:7a:ba:54:9b:d7:65:96:d0:57:a5:f9: 5a:60:c0:86:93:c9:d9:95:33:74:74:ac:8f:f2:89:33:e2:5f: 4d:f1:a0:61:9b:1a:51:28:8d:75:6c:35:18:bd:cf:e5:d6:b2: c8:ca:1e:fc:a3:64:49:e0:5d:cf:ad:4c:63:6c:19:d1:4e:30: 5f:10:55:64:be:7e:c9:5f:bc:58:68:a8:8c:dd:8e:d0:20:60: 88:8a:d5:11:bc:25:34:d9:e2:1f:4b:7a:25:9d:ac:49:18:62: 60:db:76:1a:b3:6b:45:f2:5f:b7:07:f1:9a:ba:a9:a1:35:28: d2:c8:12:a8:47:d1:70:92:1d:36:c5:5c:26:e9:65:75:70:a8: c8:53:49:b4:0b:b6:25:b7:0c:dd:d2:c3:5f:2f:01:20:8e:3b: e7:df:82:a8:be:bf:19:28:d1:a2:4c:62:0b:2b:ce:0d:5f:1d: 16:6d:7e:26 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUlK+hd3P05vXq/H8Bg3FXgiVR4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxNTIzMTQ1NVoX DTI1MDgxNDIzMTk1NVowMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVE MDBGNDlGMTAxRkFGNzQ4MzY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO80vGNHs4HxVMaoPkeHtpmWS7mO+cD7CmNl8ddomdCbe1BAcc1YTquMBkDe yk16EG5u/xmxuAinqq27Gfl8sNNaR7oe0/jy+ML1AmxHn3AUHtVkEOI9DRiJOcrx gnZSGmkrFFdyxwbeVYrr1jUkD1jcH/ZiL9FB0d5Y8OVCSwYvorAqYt9obJIw++G+ hrdmqbdSGK0yelogSuNqGSUh0+HlMQeui9DSdFJP9XeCyx/+JK6inmhKcHXWfud2 e3ggat2jM7EUvsW5yeOuNizlPyuW8VND1MOnAoZubMbGaGqrbPwOdZRIzKTqVx6C 95w4ftLjLVqOQapS9V7FjyyqYH8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEnhQYiLwpSEBf7QD0nxAfr3SDZiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxNmE4YWQ0 LTA2ZTYtNDBjMy05OGU0LWZhOTNhZmM0YTc3Mi8wLzQ5RTE0MTg4OEJDMjk0ODQw NUZFRDAwRjQ5RjEwMUZBRjc0ODM2NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkrYwDQYJKoZIhvcNAQELBQADggEBAFo2d2emsmraxX4hjwXIZ7fMq3HesRix eZ/ejEEPTTKSGPp0acLVCzyg+/6hFKdUtrf3swJyjdp/TQqYFONLQGJezPV/XZKO 5NTElh5NTqR6ulSb12WW0Fel+VpgwIaTydmVM3R0rI/yiTPiX03xoGGbGlEojXVs NRi9z+XWssjKHvyjZEngXc+tTGNsGdFOMF8QVWS+fslfvFhoqIzdjtAgYIiK1RG8 JTTZ4h9LeiWdrEkYYmDbdhqza0XyX7cH8Zq6qaE1KNLIEqhH0XCSHTbFXCbpZXVw qMhTSbQLtiW3DN3Sw18vASCOO+ffgqi+vxko0aJMYgsrzg1fHRZtfiY= -----END CERTIFICATE-----Generated at Sat Sep 28 17:27:20 2024 by rpki-client on console-fra.rpki-client.org