$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer (raw, json) Hash identifier: RZKJq+0MT1pF2ztRV3cDywxCPQoYBVrn15eDS8FcqWM= Subject key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D7F08E88113E1C1444EE74E2C669B52A1DE034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft caRepository: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 03:42:16 +0000 Certificate not after: Tue 01 Jul 2025 03:47:16 +0000 Subordinate resources: IP: 103.211.49.0/24 IP: 2001:df1:1200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7f:08:e8:81:13:e1:c1:44:4e:e7:4e:2c:66:9b:52:a1:de:03:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 03:42:16 2024 GMT Not After : Jul 1 03:47:16 2025 GMT Subject: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:7f:96:66:5c:81:12:c0:e0:b7:3a:34:03: 28:76:47:f9:8c:9e:e6:5c:33:1d:29:f3:c6:8c:90: 07:79:ee:13:ca:f0:06:1e:a8:59:26:66:24:a0:72: b0:8e:e0:e4:16:47:de:c1:a7:40:1a:0f:5f:6e:a2: a7:6c:51:8b:19:0f:6b:be:c3:85:e0:6c:ac:b6:6a: 71:b7:21:93:fd:f3:47:b4:8b:26:5d:42:46:f8:03: 47:46:c7:31:cf:99:43:d5:b0:f2:a0:7c:30:6a:b7: 2d:aa:1c:ff:2e:14:9d:26:11:f6:ee:56:bc:ab:73: da:a4:ba:c3:c0:38:89:1e:87:2d:24:32:dc:30:85: d2:aa:84:eb:24:8b:f3:ad:aa:56:a1:63:d1:ee:42: 61:ea:c2:ea:f0:f6:96:d0:60:be:af:1a:4c:1c:54: e2:1f:48:f7:56:a2:b5:a9:3f:be:99:f7:1f:00:21: 62:27:33:bd:6c:de:5b:fd:9e:82:a9:4b:16:92:37: 98:0a:7e:b2:f5:e7:51:13:51:cd:f7:d0:30:8c:18: 27:5e:40:a8:fa:0f:5a:5b:d3:57:74:e3:b6:73:9a: 29:18:f0:6c:bd:e9:6b:1b:2e:09:42:16:75:0e:8e: 08:be:46:96:8f:2b:67:54:10:60:56:4a:78:29:2f: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.49.0/24 IPv6: 2001:df1:1200::/48 Signature Algorithm: sha256WithRSAEncryption 85:2f:89:4b:87:bb:68:04:50:69:d8:b4:58:26:0d:90:4e:e0: 9a:01:e8:90:d6:0e:ce:2f:c9:32:2d:be:ba:d2:81:00:11:18: 5d:ea:fa:46:ab:fc:96:a6:db:01:31:20:f1:4a:37:1a:b7:ff: 8b:44:73:96:94:54:04:64:7b:3e:34:50:42:b8:ad:04:7d:88: 99:1e:d8:77:fc:c7:8d:4e:b9:3d:aa:48:3f:26:1d:83:7e:dd: 7e:83:da:be:e8:b8:ac:52:52:f7:73:14:ac:cf:7a:a8:9a:c1: 81:c9:4e:39:34:48:56:f5:20:a0:3a:62:75:7b:1b:04:46:a7: 17:f7:59:08:c7:a6:d7:b6:c8:8e:7a:dc:80:15:f6:7d:1f:13: 62:41:35:d3:cb:ef:c0:08:ee:61:2c:d1:65:09:e0:a7:0b:31: 9f:55:e8:0e:72:e6:f1:d0:60:08:23:3d:d8:0f:81:64:42:ee: b5:ed:70:69:17:ac:24:b6:c1:a8:e7:95:04:ff:fa:a5:31:5a: 42:30:00:fb:ac:d3:37:e0:7b:f3:06:3b:0b:94:47:a1:94:62: f3:c0:32:c9:15:2d:df:c5:99:c4:83:31:9f:ea:17:44:72:0e: 1e:53:4f:b2:97:f9:dc:69:2a:c9:97:d0:cb:6e:4c:0d:1a:49: 3f:5e:c2:33 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXX8I6IET4cFETudOLGabUqHeA04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAzNDIxNloX DTI1MDcwMTAzNDcxNlowMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRF NDQzM0Y3QkQ1M0RDRTQyNkU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp8f5ZmXIESwOC3OjQDKHZH+Yye5lwzHSnzxoyQB3nuE8rwBh6oWSZmJKBy sI7g5BZH3sGnQBoPX26ip2xRixkPa77DheBsrLZqcbchk/3zR7SLJl1CRvgDR0bH Mc+ZQ9Ww8qB8MGq3Laoc/y4UnSYR9u5WvKtz2qS6w8A4iR6HLSQy3DCF0qqE6ySL 862qVqFj0e5CYerC6vD2ltBgvq8aTBxU4h9I91aitak/vpn3HwAhYiczvWzeW/2e gqlLFpI3mAp+svXnURNRzffQMIwYJ15AqPoPWlvTV3TjtnOaKRjwbL3paxsuCUIW dQ6OCL5Glo8rZ1QQYFZKeCkvRvMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEpv1+B59UOl1f3kQz971T3OQm5aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDllMTNj LWNlYTAtNDdmZi05Yzk2LWY0OWIzOWQ0MzkyMC8wLzRBNkZEN0UwNzlGNTQzQTVE NUZERTQ0MzNGN0JENTNEQ0U0MjZFNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABn0zEwDwQCAAIwCQMHACABDfESADANBgkqhkiG9w0BAQsFAAOCAQEAhS+JS4e7 aARQadi0WCYNkE7gmgHokNYOzi/JMi2+utKBABEYXer6Rqv8lqbbATEg8Uo3Grf/ i0RzlpRUBGR7PjRQQritBH2ImR7Yd/zHjU65PapIPyYdg37dfoPavui4rFJS93MU rM96qJrBgclOOTRIVvUgoDpidXsbBEanF/dZCMem17bIjnrcgBX2fR8TYkE108vv wAjuYSzRZQngpwsxn1XoDnLm8dBgCCM92A+BZELute1waResJLbBqOeVBP/6pTFa QjAA+6zTN+B78wY7C5RHoZRi88AyyRUt38WZxIMxn+oXRHIOHlNPspf53GkqyZfQ y25MDRpJP17CMw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org