$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer (raw, json) Hash identifier: A7A1VI1ErrAn0fa+cSoiGjwBxxjFCBqggXbP8acE5lM= Subject key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56A434689F408F3B36EB5E432BDF7B0915F001AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft caRepository: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:52:16 +0000 Certificate not after: Mon 29 Jul 2024 09:57:16 +0000 Subordinate resources: IP: 103.211.49.0/24 IP: 2001:df1:1200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a4:34:68:9f:40:8f:3b:36:eb:5e:43:2b:df:7b:09:15:f0:01:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:52:16 2023 GMT Not After : Jul 29 09:57:16 2024 GMT Subject: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:7f:96:66:5c:81:12:c0:e0:b7:3a:34:03: 28:76:47:f9:8c:9e:e6:5c:33:1d:29:f3:c6:8c:90: 07:79:ee:13:ca:f0:06:1e:a8:59:26:66:24:a0:72: b0:8e:e0:e4:16:47:de:c1:a7:40:1a:0f:5f:6e:a2: a7:6c:51:8b:19:0f:6b:be:c3:85:e0:6c:ac:b6:6a: 71:b7:21:93:fd:f3:47:b4:8b:26:5d:42:46:f8:03: 47:46:c7:31:cf:99:43:d5:b0:f2:a0:7c:30:6a:b7: 2d:aa:1c:ff:2e:14:9d:26:11:f6:ee:56:bc:ab:73: da:a4:ba:c3:c0:38:89:1e:87:2d:24:32:dc:30:85: d2:aa:84:eb:24:8b:f3:ad:aa:56:a1:63:d1:ee:42: 61:ea:c2:ea:f0:f6:96:d0:60:be:af:1a:4c:1c:54: e2:1f:48:f7:56:a2:b5:a9:3f:be:99:f7:1f:00:21: 62:27:33:bd:6c:de:5b:fd:9e:82:a9:4b:16:92:37: 98:0a:7e:b2:f5:e7:51:13:51:cd:f7:d0:30:8c:18: 27:5e:40:a8:fa:0f:5a:5b:d3:57:74:e3:b6:73:9a: 29:18:f0:6c:bd:e9:6b:1b:2e:09:42:16:75:0e:8e: 08:be:46:96:8f:2b:67:54:10:60:56:4a:78:29:2f: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.49.0/24 IPv6: 2001:df1:1200::/48 Signature Algorithm: sha256WithRSAEncryption 17:9f:a8:dd:e2:d6:2b:d7:ab:11:0b:20:bf:99:1f:05:12:02: ea:72:2a:ed:b8:00:da:02:89:e5:ca:b7:fc:fc:40:57:3e:7c: f8:fb:15:de:54:2b:c9:5b:fc:ec:78:c5:73:5d:f7:a2:96:8f: 05:cd:99:32:3d:81:68:07:92:7d:c4:34:e4:83:82:99:cf:ac: 66:79:28:a7:d8:67:27:2c:08:47:91:7a:06:79:fc:62:22:70: 79:72:f9:d9:b0:3e:0f:13:17:a5:fd:09:8f:65:f4:b4:88:40: 0a:48:35:29:f9:64:6f:6f:5a:d0:8e:36:08:e0:67:6d:da:00: 6e:e3:1b:c4:cf:ce:bf:19:22:42:f9:5b:62:fb:60:b1:df:35: 95:70:e3:c3:6c:0a:39:02:37:ef:b3:85:79:5a:ae:7b:60:76: 97:cf:20:c2:3f:e4:96:28:9d:48:bc:f7:10:c7:2f:ab:7c:15: ca:2e:ba:4f:99:b4:ea:e5:a9:ce:c9:fe:85:77:fc:18:bb:c5: b3:a0:60:ab:20:ab:a1:6f:84:e9:59:59:b9:74:e1:73:7f:4c: 5b:c7:14:19:3e:c3:91:30:27:e2:79:0d:1d:84:9c:b0:99:7a: 73:23:b4:3f:5c:87:9a:26:9c:69:15:73:eb:bf:5a:ac:8a:2e: d6:21:26:6f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUVqQ0aJ9Ajzs2615DK997CRXwAa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5NTIxNloX DTI0MDcyOTA5NTcxNlowMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRF NDQzM0Y3QkQ1M0RDRTQyNkU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp8f5ZmXIESwOC3OjQDKHZH+Yye5lwzHSnzxoyQB3nuE8rwBh6oWSZmJKBy sI7g5BZH3sGnQBoPX26ip2xRixkPa77DheBsrLZqcbchk/3zR7SLJl1CRvgDR0bH Mc+ZQ9Ww8qB8MGq3Laoc/y4UnSYR9u5WvKtz2qS6w8A4iR6HLSQy3DCF0qqE6ySL 862qVqFj0e5CYerC6vD2ltBgvq8aTBxU4h9I91aitak/vpn3HwAhYiczvWzeW/2e gqlLFpI3mAp+svXnURNRzffQMIwYJ15AqPoPWlvTV3TjtnOaKRjwbL3paxsuCUIW dQ6OCL5Glo8rZ1QQYFZKeCkvRvMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEpv1+B59UOl1f3kQz971T3OQm5aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDllMTNj LWNlYTAtNDdmZi05Yzk2LWY0OWIzOWQ0MzkyMC8wLzRBNkZEN0UwNzlGNTQzQTVE NUZERTQ0MzNGN0JENTNEQ0U0MjZFNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABn0zEwDwQCAAIwCQMHACABDfESADANBgkqhkiG9w0BAQsFAAOCAQEAF5+o3eLW K9erEQsgv5kfBRIC6nIq7bgA2gKJ5cq3/PxAVz58+PsV3lQryVv87HjFc133opaP Bc2ZMj2BaAeSfcQ05IOCmc+sZnkop9hnJywIR5F6Bnn8YiJweXL52bA+DxMXpf0J j2X0tIhACkg1Kflkb29a0I42COBnbdoAbuMbxM/OvxkiQvlbYvtgsd81lXDjw2wK OQI377OFeVque2B2l88gwj/kliidSLz3EMcvq3wVyi66T5m06uWpzsn+hXf8GLvF s6BgqyCroW+E6VlZuXThc39MW8cUGT7DkTAn4nkNHYScsJl6cyO0P1yHmiacaRVz 679arIou1iEmbw== -----END CERTIFICATE-----Generated at Wed May 8 04:37:50 2024 by rpki-client on console-fra.rpki-client.org