$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer File: 4A906D4F534B26A0E62898882630292936CEA54A.cer (raw, json) Hash identifier: vlbOpzXZvyfEjtjHy9cuekhRoyEnb3R3KjF1EkNH6PE= Subject key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E1AB7B887405A3A77849373270C2893E20530BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 22 Oct 2023 08:58:09 +0000 Certificate not after: Sun 20 Oct 2024 09:03:09 +0000 Subordinate resources: IP: 103.171.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1a:b7:b8:87:40:5a:3a:77:84:93:73:27:0c:28:93:e2:05:30:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 22 08:58:09 2023 GMT Not After : Oct 20 09:03:09 2024 GMT Subject: CN=4A906D4F534B26A0E62898882630292936CEA54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:ea:e8:90:7c:17:61:1e:e9:94:13:f8:9a: ab:91:24:b0:88:47:98:42:cf:de:89:6d:05:6a:06: d5:c9:1f:9a:9d:31:80:80:a0:11:fa:34:c8:a6:e7: a9:ec:fc:93:3b:9c:c0:6c:36:c8:36:da:59:91:44: 63:02:65:f7:e0:ba:a4:44:64:13:2d:5b:c1:64:e2: 81:b5:53:ec:2b:3e:c9:73:58:85:dc:db:a3:b2:06: 96:0d:72:25:60:c9:ba:c7:f0:8f:75:85:fd:26:42: d9:3e:f5:67:04:76:8a:f5:ed:0c:e6:69:98:c4:91: d8:53:c4:86:de:ec:22:7c:33:c0:ff:b7:e7:65:0c: ed:d7:94:d0:55:8a:62:3f:67:48:54:23:e0:44:f5: 44:f4:8f:16:64:21:e0:fb:a8:55:1d:a8:aa:3b:a1: e1:cc:cc:5b:09:50:cc:59:0d:a2:dc:87:13:52:f6: cc:9b:ff:b7:d1:3c:aa:06:0e:ca:1f:35:a5:04:d1: 2d:51:31:b3:a5:fd:4f:58:ea:39:ad:2e:ab:a5:5a: 1c:88:1e:57:3f:5f:6f:48:da:f7:88:88:03:70:85: 21:22:0f:3e:99:ab:90:87:6a:7a:97:0d:0e:bd:5e: 68:9b:2d:3b:d1:88:a8:9f:e8:6b:ba:e5:f4:27:de: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.82.0/23 Signature Algorithm: sha256WithRSAEncryption 06:31:37:ad:e5:5a:97:4a:08:09:03:51:2c:32:32:a4:1d:55: c3:aa:a8:69:f5:22:23:bf:1a:cf:06:45:48:ae:a8:0a:7e:24: 95:c2:a2:bc:2b:85:ec:27:09:39:66:60:c7:eb:43:79:d0:cb: 1c:23:13:6a:c7:bd:6e:25:a9:c3:f6:b6:39:a0:5c:d1:8e:9f: 11:ea:ae:e8:a9:09:d6:d1:4b:47:73:7b:8b:d6:89:95:d5:70: 5d:44:65:52:39:8c:40:ae:4c:ba:65:0b:29:cd:41:eb:41:86: ce:63:15:4c:62:e0:40:bb:69:43:da:a7:d3:c9:a9:6e:85:1b: 21:62:03:b9:61:1e:b2:3a:5b:16:1b:f5:00:d8:07:3e:e1:0b: f7:5f:78:88:c4:b8:28:0e:b5:b4:ef:12:9f:da:e7:84:d4:3c: d3:c8:0b:f5:83:15:64:71:15:9f:90:b5:57:1c:fe:a1:50:80: 30:3d:89:e9:29:71:a2:7c:91:95:be:8a:64:d3:ca:c9:2e:69: f0:8e:fb:99:77:ce:e2:96:61:d7:a6:c0:c8:72:48:37:b5:b2: e7:8e:59:8c:3c:24:f2:4f:dc:e8:90:07:1b:ce:c5:36:3c:78: 14:cf:de:f5:9e:7f:59:17:77:ed:0c:b6:dc:92:c9:4a:02:15: 4b:61:6c:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXhq3uIdAWjp3hJNzJwwok+IFML8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMjA4NTgwOVoX DTI0MTAyMDA5MDMwOVowMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5 ODg4MjYzMDI5MjkzNkNFQTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkJ6uiQfBdhHumUE/iaq5EksIhHmELP3oltBWoG1ckfmp0xgICgEfo0yKbn qez8kzucwGw2yDbaWZFEYwJl9+C6pERkEy1bwWTigbVT7Cs+yXNYhdzbo7IGlg1y JWDJusfwj3WF/SZC2T71ZwR2ivXtDOZpmMSR2FPEht7sInwzwP+352UM7deU0FWK Yj9nSFQj4ET1RPSPFmQh4PuoVR2oqjuh4czMWwlQzFkNotyHE1L2zJv/t9E8qgYO yh81pQTRLVExs6X9T1jqOa0uq6VaHIgeVz9fb0ja94iIA3CFISIPPpmrkIdqepcN Dr1eaJstO9GIqJ/oa7rl9CfeDAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqQbU9TSyag5iiYiCYwKSk2zqVKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODllODU5 LTNjMmMtNGEwOS1hNGE5LTM3MzIzZWE1ZGUyMi8wLzRBOTA2RDRGNTM0QjI2QTBF NjI4OTg4ODI2MzAyOTI5MzZDRUE1NEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnq1IwDQYJKoZIhvcNAQELBQADggEBAAYxN63lWpdKCAkDUSwyMqQdVcOqqGn1 IiO/Gs8GRUiuqAp+JJXCorwrhewnCTlmYMfrQ3nQyxwjE2rHvW4lqcP2tjmgXNGO nxHqruipCdbRS0dze4vWiZXVcF1EZVI5jECuTLplCynNQetBhs5jFUxi4EC7aUPa p9PJqW6FGyFiA7lhHrI6WxYb9QDYBz7hC/dfeIjEuCgOtbTvEp/a54TUPNPIC/WD FWRxFZ+QtVcc/qFQgDA9iekpcaJ8kZW+imTTyskuafCO+5l3zuKWYdemwMhySDe1 sueOWYw8JPJP3OiQBxvOxTY8eBTP3vWef1kXd+0MttySyUoCFUthbBE= -----END CERTIFICATE-----Generated at Wed May 8 18:12:07 2024 by rpki-client on console-fra.rpki-client.org