$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer (raw, json) Hash identifier: EK7Pv0E5DgQnes+CPkU1bZSW03LxnoMkMQoBbHP6yIU= Subject key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 252903FF842B674005CB3091F729D8DAA63DD78F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft caRepository: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 04 Nov 2023 02:40:15 +0000 Certificate not after: Sat 02 Nov 2024 02:45:15 +0000 Subordinate resources: IP: 103.239.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:29:03:ff:84:2b:67:40:05:cb:30:91:f7:29:d8:da:a6:3d:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 4 02:40:15 2023 GMT Not After : Nov 2 02:45:15 2024 GMT Subject: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:a4:d0:2c:b3:c1:a1:18:2d:27:db:92:87: d7:2c:df:7b:a8:ed:49:91:6f:e1:f0:9e:f5:71:bf: 0e:14:96:bf:4b:68:e5:23:cb:91:f5:4e:6d:cf:49: db:73:92:68:34:aa:e1:33:63:a0:a7:41:a9:a0:df: c1:f5:a4:24:2f:90:5d:a2:77:9e:1e:3d:f3:34:66: 9a:70:b0:91:be:f5:48:5e:80:c6:6c:aa:a4:e5:07: fe:9c:50:82:f9:2c:80:55:39:25:80:20:d9:aa:fa: be:48:49:77:8f:fa:c0:96:85:b1:03:0f:ca:0e:6e: 8b:fc:df:57:00:7e:1c:79:09:48:21:72:87:7d:76: 97:95:98:ab:53:b5:2b:47:c2:4f:1d:d4:ac:01:00: e9:51:2e:30:04:c6:73:1d:50:3e:8c:bd:b0:3e:cb: c1:a9:a1:cc:cb:00:e9:aa:7e:40:c7:78:1b:7e:55: 3c:23:5e:c5:14:f3:6d:0f:15:82:60:fb:1b:3f:b8: 08:e1:b5:fd:28:e2:34:ad:bd:29:28:c9:4e:1a:3b: af:5f:38:e2:50:b8:b2:ac:29:73:b0:6b:94:7c:68: cc:d1:9b:e7:2a:a1:c5:4a:e4:54:3f:af:ce:1f:54: 45:b1:46:22:f0:c4:e6:00:4a:0b:aa:1a:62:33:45: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/23 Signature Algorithm: sha256WithRSAEncryption 97:dc:d3:a8:d9:80:3b:38:2c:7e:a1:b3:7c:86:e3:66:ea:9f: 81:dd:73:ab:e6:2d:90:73:94:93:25:9e:1d:ab:51:47:58:6a: 8e:ee:a7:2c:03:f5:4c:9c:aa:78:02:be:1b:56:86:9d:d8:b9: 38:1d:a7:c8:15:61:63:0f:90:29:ce:19:00:00:fc:28:3e:cd: 04:0c:b1:e2:a7:d0:7d:ed:c7:8c:7f:cb:62:b6:d9:02:97:25: d1:04:dd:af:77:87:1d:e0:96:9a:7d:16:ef:2f:8b:a7:c7:71: 7a:23:cc:f1:af:f2:b4:9e:94:23:87:90:76:87:ae:50:60:47: 88:2a:3a:a5:fa:3e:30:3d:3a:17:ac:aa:da:d1:dc:e8:4a:61: 98:1e:b9:b9:7f:5d:b3:ec:d5:ed:4a:90:08:4b:11:9f:88:b0: 66:54:e6:f0:a4:77:79:fc:9d:84:2f:3d:6d:11:a4:a5:6d:fe: 16:16:2d:d8:08:3f:b7:e9:e5:22:1c:29:13:7a:aa:0a:2a:c3: 8c:c2:fc:7a:08:a0:8f:df:bf:bb:ec:67:2f:26:97:a6:90:49: 52:4d:30:be:fe:e5:c3:58:63:e4:33:ac:16:a3:8e:80:6d:b2: 96:0c:06:14:91:53:91:70:9f:12:f0:15:e6:a5:5a:d9:1d:8c: a1:6e:41:13 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJSkD/4QrZ0AFyzCR9ynY2qY9148wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNDAyNDAxNVoX DTI0MTEwMjAyNDUxNVowMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4 MkQ3MzcwQjlFQUZGNDJBOTQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWtpNAss8GhGC0n25KH1yzfe6jtSZFv4fCe9XG/DhSWv0to5SPLkfVObc9J 23OSaDSq4TNjoKdBqaDfwfWkJC+QXaJ3nh498zRmmnCwkb71SF6AxmyqpOUH/pxQ gvksgFU5JYAg2ar6vkhJd4/6wJaFsQMPyg5ui/zfVwB+HHkJSCFyh312l5WYq1O1 K0fCTx3UrAEA6VEuMATGcx1QPoy9sD7LwamhzMsA6ap+QMd4G35VPCNexRTzbQ8V gmD7Gz+4COG1/SjiNK29KSjJTho7r1844lC4sqwpc7BrlHxozNGb5yqhxUrkVD+v zh9URbFGIvDE5gBKC6oaYjNFX4cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE4FTgZNzfLkn3KC1zcLnq/0KpRLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNl LTU3YTEtNDBmMi04NTI3LTRkMGE2OWM1ZDY0Ny8wLzRFMDU0RTA2NERDREYyRTQ5 RjcyODJENzM3MEI5RUFGRjQyQTk0NEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7xYwDQYJKoZIhvcNAQELBQADggEBAJfc06jZgDs4LH6hs3yG42bqn4Hdc6vm LZBzlJMlnh2rUUdYao7upywD9UycqngCvhtWhp3YuTgdp8gVYWMPkCnOGQAA/Cg+ zQQMseKn0H3tx4x/y2K22QKXJdEE3a93hx3glpp9Fu8vi6fHcXojzPGv8rSelCOH kHaHrlBgR4gqOqX6PjA9OhesqtrR3OhKYZgeubl/XbPs1e1KkAhLEZ+IsGZU5vCk d3n8nYQvPW0RpKVt/hYWLdgIP7fp5SIcKRN6qgoqw4zC/HoIoI/fv7vsZy8ml6aQ SVJNML7+5cNYY+QzrBajjoBtspYMBhSRU5FwnxLwFealWtkdjKFuQRM= -----END CERTIFICATE-----Generated at Wed May 8 22:46:39 2024 by rpki-client on console-ams.rpki-client.org