$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer File: 4A906D4F534B26A0E62898882630292936CEA54A.cer (raw, json) Hash identifier: VN3vksZ8Uz8na8TKUoXUsMIM4XGODPsDsZbpykKv3rI= Subject key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F291DF0A521D410B325A39A1E202FC2141B4091 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 22 Sep 2024 22:28:13 +0000 Certificate not after: Sun 21 Sep 2025 22:33:13 +0000 Subordinate resources: IP: 103.171.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:29:1d:f0:a5:21:d4:10:b3:25:a3:9a:1e:20:2f:c2:14:1b:40:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 22 22:28:13 2024 GMT Not After : Sep 21 22:33:13 2025 GMT Subject: CN=4A906D4F534B26A0E62898882630292936CEA54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:ea:e8:90:7c:17:61:1e:e9:94:13:f8:9a: ab:91:24:b0:88:47:98:42:cf:de:89:6d:05:6a:06: d5:c9:1f:9a:9d:31:80:80:a0:11:fa:34:c8:a6:e7: a9:ec:fc:93:3b:9c:c0:6c:36:c8:36:da:59:91:44: 63:02:65:f7:e0:ba:a4:44:64:13:2d:5b:c1:64:e2: 81:b5:53:ec:2b:3e:c9:73:58:85:dc:db:a3:b2:06: 96:0d:72:25:60:c9:ba:c7:f0:8f:75:85:fd:26:42: d9:3e:f5:67:04:76:8a:f5:ed:0c:e6:69:98:c4:91: d8:53:c4:86:de:ec:22:7c:33:c0:ff:b7:e7:65:0c: ed:d7:94:d0:55:8a:62:3f:67:48:54:23:e0:44:f5: 44:f4:8f:16:64:21:e0:fb:a8:55:1d:a8:aa:3b:a1: e1:cc:cc:5b:09:50:cc:59:0d:a2:dc:87:13:52:f6: cc:9b:ff:b7:d1:3c:aa:06:0e:ca:1f:35:a5:04:d1: 2d:51:31:b3:a5:fd:4f:58:ea:39:ad:2e:ab:a5:5a: 1c:88:1e:57:3f:5f:6f:48:da:f7:88:88:03:70:85: 21:22:0f:3e:99:ab:90:87:6a:7a:97:0d:0e:bd:5e: 68:9b:2d:3b:d1:88:a8:9f:e8:6b:ba:e5:f4:27:de: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.82.0/23 Signature Algorithm: sha256WithRSAEncryption 27:8e:89:bf:52:db:d5:b2:82:8f:cb:29:ac:0b:19:44:75:4d: ff:7c:2f:43:de:14:89:5f:0f:0b:a7:fc:bb:34:11:7e:c8:be: e2:03:e8:0c:78:12:d2:78:43:5c:a0:76:9c:88:a9:94:78:a1: 3a:98:36:0f:b5:cc:0c:09:a9:e2:49:03:82:43:f9:c8:55:7f: ab:3b:30:4d:68:b9:44:16:fd:0b:bd:2e:42:b2:a3:9e:60:27: af:82:69:47:da:b2:1c:44:85:bb:67:98:82:86:ae:6b:17:e4: 3c:7a:92:20:bf:c1:6b:52:38:76:56:a5:0b:47:5f:32:c8:5f: f7:93:0f:e6:29:68:96:0d:59:a6:c3:ae:34:7e:b0:55:31:e7: 41:4a:b4:e5:da:37:8a:4a:c9:6f:42:46:35:fa:d3:f9:b9:9e: 65:14:ad:d7:f2:5d:d5:64:01:e2:af:c6:8b:fd:fb:87:ef:8c: bf:44:5f:c5:45:09:f1:6b:77:8e:7a:09:a8:0a:94:df:48:59: 7e:5c:2b:0e:53:1f:ae:26:5e:b3:36:37:1b:1e:2c:f2:35:84: dc:68:35:a8:5a:5a:0e:b8:eb:91:85:c3:e7:fe:e3:69:7f:ec: de:dd:8e:50:ae:35:3a:11:56:f3:84:4b:e7:96:d3:fa:50:49: 59:b4:67:4d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbykd8KUh1BCzJaOaHiAvwhQbQJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMjIyMjgxM1oX DTI1MDkyMTIyMzMxM1owMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5 ODg4MjYzMDI5MjkzNkNFQTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkJ6uiQfBdhHumUE/iaq5EksIhHmELP3oltBWoG1ckfmp0xgICgEfo0yKbn qez8kzucwGw2yDbaWZFEYwJl9+C6pERkEy1bwWTigbVT7Cs+yXNYhdzbo7IGlg1y JWDJusfwj3WF/SZC2T71ZwR2ivXtDOZpmMSR2FPEht7sInwzwP+352UM7deU0FWK Yj9nSFQj4ET1RPSPFmQh4PuoVR2oqjuh4czMWwlQzFkNotyHE1L2zJv/t9E8qgYO yh81pQTRLVExs6X9T1jqOa0uq6VaHIgeVz9fb0ja94iIA3CFISIPPpmrkIdqepcN Dr1eaJstO9GIqJ/oa7rl9CfeDAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqQbU9TSyag5iiYiCYwKSk2zqVKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODllODU5 LTNjMmMtNGEwOS1hNGE5LTM3MzIzZWE1ZGUyMi8wLzRBOTA2RDRGNTM0QjI2QTBF NjI4OTg4ODI2MzAyOTI5MzZDRUE1NEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnq1IwDQYJKoZIhvcNAQELBQADggEBACeOib9S29Wygo/LKawLGUR1Tf98L0Pe FIlfDwun/Ls0EX7IvuID6Ax4EtJ4Q1ygdpyIqZR4oTqYNg+1zAwJqeJJA4JD+chV f6s7ME1ouUQW/Qu9LkKyo55gJ6+CaUfashxEhbtnmIKGrmsX5Dx6kiC/wWtSOHZW pQtHXzLIX/eTD+YpaJYNWabDrjR+sFUx50FKtOXaN4pKyW9CRjX60/m5nmUUrdfy XdVkAeKvxov9+4fvjL9EX8VFCfFrd456CagKlN9IWX5cKw5TH64mXrM2NxseLPI1 hNxoNahaWg6465GFw+f+42l/7N7djlCuNToRVvOES+eW0/pQSVm0Z00= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org