$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer (raw, json) Hash identifier: +azj/KAadrjfXTR2EJfv8mLuy63fxbOVidvi59NTEdk= Subject key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B5DE29BB0F8E0A02992DDBCAC47AD09C15B0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft caRepository: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Jul 2023 06:38:31 +0000 Certificate not after: Tue 09 Jul 2024 06:43:31 +0000 Subordinate resources: IP: 103.86.128.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5d:e2:9b:b0:f8:e0:a0:29:92:dd:bc:ac:47:ad:09:c1:5b:03:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 06:38:31 2023 GMT Not After : Jul 9 06:43:31 2024 GMT Subject: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:d8:c1:27:ba:0c:bb:4b:63:97:97:3e:42: b3:89:c4:f8:3f:19:b0:4c:8c:60:7e:29:30:ba:15: a9:49:b9:bd:da:0f:7e:88:be:73:63:e5:b7:d5:6e: 6f:c4:51:59:7f:64:0b:7e:06:29:93:4a:2f:5c:74: b6:7a:31:35:c1:fb:ed:2c:ce:6c:fb:b5:4d:c3:ce: 01:3a:0a:17:aa:20:35:61:de:91:7b:b3:5c:ee:73: 28:3d:b9:d8:d1:8e:65:b2:4a:36:4b:79:04:54:c5: 60:82:c9:14:4d:4f:16:33:90:50:21:25:bf:08:1a: 08:9a:28:97:be:03:92:c9:53:82:97:49:8e:49:a0: b4:e5:a1:67:c6:76:fb:79:b8:fd:fe:b3:0a:86:50: af:89:f3:f1:bf:b0:33:a4:51:95:e9:e7:b5:5d:b5: 82:38:4b:8f:5b:91:a8:a3:de:8f:fa:7d:d1:cb:be: fe:ad:12:b9:37:cf:0c:92:67:83:a3:8f:33:43:39: 43:f2:a8:f6:ca:db:69:72:7e:10:44:18:09:22:52: 83:5d:f9:b6:0f:46:02:a3:6b:cc:41:9f:12:2a:3c: 8f:4a:68:8c:18:d1:11:23:fc:08:03:b8:de:64:07: d4:58:4c:f9:ed:1e:38:bc:fe:92:29:6c:0b:34:85: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.128.0/23 Signature Algorithm: sha256WithRSAEncryption 57:50:83:8e:d3:0b:a9:d8:28:45:ea:95:a2:0a:21:3e:f7:e3: 0b:16:a6:01:ae:63:c7:24:2b:90:9d:a8:a7:a5:58:79:1b:19: 74:99:d2:57:22:5b:7a:9e:d3:79:d9:8f:ec:80:2c:28:ab:74: ed:4e:db:22:85:41:7e:d9:d5:48:42:09:67:6c:be:5d:23:f4: 33:12:5e:6f:2a:01:6b:be:c6:c4:f7:7d:be:e8:b7:b6:b2:c9: 3e:58:97:6b:b9:1c:f9:c9:86:74:f4:7b:93:5b:97:44:c3:23: 85:4e:75:41:e8:c4:9e:51:b3:0d:19:70:54:bf:70:24:ee:28: 9e:e7:fe:58:6a:9f:98:ea:d8:00:4e:74:38:62:56:0b:64:9a: 1d:d8:bc:75:fc:7f:d1:af:47:58:73:9e:cd:9f:d6:1a:46:e8: ef:43:6f:15:fa:8c:50:aa:b5:86:85:cb:27:94:13:52:f1:28: 89:e2:49:d1:b1:af:40:3d:c0:db:e5:e2:63:c9:be:d3:7f:b7: 3f:77:ca:33:cb:46:d0:5e:ea:d5:61:b7:de:c2:ab:e1:7b:65: 2c:85:ae:da:94:dd:e9:35:8a:70:d9:f5:9d:ce:bb:8f:8a:64: bd:bf:5e:b9:66:ef:22:f6:1f:e0:06:0a:8f:8c:a3:b9:61:54: 2d:7e:4c:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUe13im7D44KApkt28rEetCcFbA5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxMTA2MzgzMVoX DTI0MDcwOTA2NDMzMVowMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0 RUFENkQ2QTA4RDNBOEMwMUI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMq2MEnugy7S2OXlz5Cs4nE+D8ZsEyMYH4pMLoVqUm5vdoPfoi+c2Plt9Vu b8RRWX9kC34GKZNKL1x0tnoxNcH77SzObPu1TcPOAToKF6ogNWHekXuzXO5zKD25 2NGOZbJKNkt5BFTFYILJFE1PFjOQUCElvwgaCJool74DkslTgpdJjkmgtOWhZ8Z2 +3m4/f6zCoZQr4nz8b+wM6RRlenntV21gjhLj1uRqKPej/p90cu+/q0SuTfPDJJn g6OPM0M5Q/Ko9srbaXJ+EEQYCSJSg135tg9GAqNrzEGfEio8j0pojBjRESP8CAO4 3mQH1FhM+e0eOLz+kilsCzSF7Z8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEvg66/vHiBsrYtOrW1qCNOowBtQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4YTdmMzU1 LWYyMjUtNDhmMy04N2Y4LTBiZmIwYzhlNThmMC8wLzRCRTBFQkFGRUYxRTIwNkNB RDhCNEVBRDZENkEwOEQzQThDMDFCNTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnVoAwDQYJKoZIhvcNAQELBQADggEBAFdQg47TC6nYKEXqlaIKIT734wsWpgGu Y8ckK5CdqKelWHkbGXSZ0lciW3qe03nZj+yALCirdO1O2yKFQX7Z1UhCCWdsvl0j 9DMSXm8qAWu+xsT3fb7ot7ayyT5Yl2u5HPnJhnT0e5Nbl0TDI4VOdUHoxJ5Rsw0Z cFS/cCTuKJ7n/lhqn5jq2ABOdDhiVgtkmh3YvHX8f9GvR1hzns2f1hpG6O9DbxX6 jFCqtYaFyyeUE1LxKIniSdGxr0A9wNvl4mPJvtN/tz93yjPLRtBe6tVht97Cq+F7 ZSyFrtqU3ek1inDZ9Z3Ou4+KZL2/Xrlm7yL2H+AGCo+Mo7lhVC1+TBY= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org