$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer (raw, json) Hash identifier: wPmgZq8dJOu7v1QNZpM0zt+GRe506U97FkF+TRzik+E= Subject key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FDD42F98147CD3356F0936AD520DA5A95D5BCF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Apr 2024 04:18:57 +0000 Certificate not after: Fri 25 Apr 2025 04:23:57 +0000 Subordinate resources: IP: 103.173.128.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dd:42:f9:81:47:cd:33:56:f0:93:6a:d5:20:da:5a:95:d5:bc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 04:18:57 2024 GMT Not After : Apr 25 04:23:57 2025 GMT Subject: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:5d:44:a1:53:10:32:24:bc:c1:ff:59:70: e2:af:01:fd:8e:b7:62:7c:3e:4a:44:bb:b5:81:1c: 4c:b7:c0:98:9f:f3:4d:e4:a7:08:44:0a:2b:75:df: 5e:b0:be:b2:ec:67:82:16:c7:cc:c3:1a:8c:a5:74: 34:74:f6:6a:e3:dd:54:77:2e:07:ea:3f:e3:68:77: 57:d9:3f:6a:e0:1f:be:50:f4:74:6a:be:14:55:4a: bd:32:4f:a8:6e:12:98:49:43:d9:02:eb:cb:fb:45: 06:f3:d4:c3:90:33:bf:11:b3:bc:d1:40:87:95:16: b8:cb:33:92:ea:a6:91:c7:f8:a2:22:8b:f2:cc:b7: 40:23:37:64:07:44:07:53:dd:19:5d:10:5a:53:91: f1:b5:05:8c:dd:08:a5:b5:c1:42:f2:20:9a:09:b9: 0c:3b:c0:49:ce:b3:63:61:30:a0:65:17:90:c0:c4: f3:bb:24:17:34:11:c0:f2:dc:6e:07:b2:24:33:45: 30:96:f7:99:3b:a2:26:42:ba:5d:66:4d:db:b8:db: 1c:6f:5e:3b:2b:dd:a4:14:df:b9:7f:53:54:a5:7c: cb:a5:bc:b9:72:43:88:b2:9e:21:9b:48:99:7e:80: 98:da:08:00:f4:bb:af:0c:e7:e0:d4:25:64:e7:eb: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.128.0/23 Signature Algorithm: sha256WithRSAEncryption 40:a5:b6:b6:33:19:7c:e9:f0:be:e6:70:d0:a3:e6:99:0f:ac: 36:19:b2:90:fa:5f:70:cd:d2:9f:3d:66:e4:ad:0c:c1:9f:1d: 29:2f:90:87:e3:88:40:cf:1b:76:b7:45:d9:9a:de:c5:41:49: b4:c5:4d:de:61:ae:d6:2b:87:6b:7b:d5:66:b4:e2:c9:9f:4e: 40:5c:1d:88:2b:2a:c5:12:be:4c:50:5b:ab:d2:01:53:a1:de: 31:08:49:a6:ca:3c:08:50:68:5b:37:6d:4f:bd:b0:6b:51:c3: 81:56:2c:81:1d:d9:3c:eb:ea:7c:f9:72:5b:90:ad:97:9d:a1: f5:67:a4:12:38:7c:16:78:ef:be:1e:32:49:50:6f:44:e7:85: 0b:08:69:bb:83:57:4e:48:7e:86:c7:71:de:24:2e:cd:21:ca: 92:a3:d7:82:d0:75:d0:50:4f:90:34:8b:79:1d:67:96:d9:7d: bd:da:0b:d6:2d:8e:a6:5b:58:84:41:74:d8:7d:3a:b5:5b:e9: 82:53:ee:10:b6:6c:23:15:3e:0f:48:9d:8b:bc:46:52:97:67: 8b:92:60:a7:c4:6f:d9:12:0c:71:4c:a5:57:57:de:95:80:38: 0d:ad:69:0d:3e:82:a1:0d:da:93:9b:a8:df:60:bb:26:2f:05: b3:53:2d:77 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX91C+YFHzTNW8JNq1SDaWpXVvPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNjA0MTg1N1oX DTI1MDQyNTA0MjM1N1owMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThC M0MzODFENkVEQ0ZBNEE0NUExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRrXUShUxAyJLzB/1lw4q8B/Y63Ynw+SkS7tYEcTLfAmJ/zTeSnCEQKK3Xf XrC+suxnghbHzMMajKV0NHT2auPdVHcuB+o/42h3V9k/auAfvlD0dGq+FFVKvTJP qG4SmElD2QLry/tFBvPUw5AzvxGzvNFAh5UWuMszkuqmkcf4oiKL8sy3QCM3ZAdE B1PdGV0QWlOR8bUFjN0IpbXBQvIgmgm5DDvASc6zY2EwoGUXkMDE87skFzQRwPLc bgeyJDNFMJb3mTuiJkK6XWZN27jbHG9eOyvdpBTfuX9TVKV8y6W8uXJDiLKeIZtI mX6AmNoIAPS7rwzn4NQlZOfrbYcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqLajOVYSzTPaizw4HW7c+kpFofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTM3YWVj LTYzYzItNDVkMS05NmFlLWRhMTZkMTAxOGIwZi8wLzRBOEI2QTMzOTU2MTJDRDMz REE4QjNDMzgxRDZFRENGQTRBNDVBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrYAwDQYJKoZIhvcNAQELBQADggEBAECltrYzGXzp8L7mcNCj5pkPrDYZspD6 X3DN0p89ZuStDMGfHSkvkIfjiEDPG3a3Rdma3sVBSbTFTd5hrtYrh2t71Wa04smf TkBcHYgrKsUSvkxQW6vSAVOh3jEISabKPAhQaFs3bU+9sGtRw4FWLIEd2Tzr6nz5 cluQrZedofVnpBI4fBZ4774eMklQb0TnhQsIabuDV05IfobHcd4kLs0hypKj14LQ ddBQT5A0i3kdZ5bZfb3aC9YtjqZbWIRBdNh9OrVb6YJT7hC2bCMVPg9InYu8RlKX Z4uSYKfEb9kSDHFMpVdX3pWAOA2taQ0+gqEN2pObqN9guyYvBbNTLXc= -----END CERTIFICATE-----Generated at Wed May 8 18:12:07 2024 by rpki-client on console-fra.rpki-client.org