$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer (raw, json) Hash identifier: 3pF82xjeP4b1BXTnRti6DGuaXNbC1pn2laZh/syJv2s= Subject key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 50DAF5E47F5422C3B063F4A3A513FBE6524CC5B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft caRepository: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 05 Oct 2024 15:08:16 +0000 Certificate not after: Sat 04 Oct 2025 15:13:16 +0000 Subordinate resources: IP: 103.239.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:da:f5:e4:7f:54:22:c3:b0:63:f4:a3:a5:13:fb:e6:52:4c:c5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 5 15:08:16 2024 GMT Not After : Oct 4 15:13:16 2025 GMT Subject: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:a4:d0:2c:b3:c1:a1:18:2d:27:db:92:87: d7:2c:df:7b:a8:ed:49:91:6f:e1:f0:9e:f5:71:bf: 0e:14:96:bf:4b:68:e5:23:cb:91:f5:4e:6d:cf:49: db:73:92:68:34:aa:e1:33:63:a0:a7:41:a9:a0:df: c1:f5:a4:24:2f:90:5d:a2:77:9e:1e:3d:f3:34:66: 9a:70:b0:91:be:f5:48:5e:80:c6:6c:aa:a4:e5:07: fe:9c:50:82:f9:2c:80:55:39:25:80:20:d9:aa:fa: be:48:49:77:8f:fa:c0:96:85:b1:03:0f:ca:0e:6e: 8b:fc:df:57:00:7e:1c:79:09:48:21:72:87:7d:76: 97:95:98:ab:53:b5:2b:47:c2:4f:1d:d4:ac:01:00: e9:51:2e:30:04:c6:73:1d:50:3e:8c:bd:b0:3e:cb: c1:a9:a1:cc:cb:00:e9:aa:7e:40:c7:78:1b:7e:55: 3c:23:5e:c5:14:f3:6d:0f:15:82:60:fb:1b:3f:b8: 08:e1:b5:fd:28:e2:34:ad:bd:29:28:c9:4e:1a:3b: af:5f:38:e2:50:b8:b2:ac:29:73:b0:6b:94:7c:68: cc:d1:9b:e7:2a:a1:c5:4a:e4:54:3f:af:ce:1f:54: 45:b1:46:22:f0:c4:e6:00:4a:0b:aa:1a:62:33:45: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/23 Signature Algorithm: sha256WithRSAEncryption 46:79:5d:d1:fa:4a:a1:14:d7:c0:36:d9:09:14:18:3d:2d:b5: 8b:d2:ac:f5:82:2c:90:8d:a2:c5:f5:2f:62:c6:1d:94:6e:ba: 2e:86:75:60:f8:5f:06:83:43:58:00:20:f3:09:c8:29:2c:16: fb:0b:62:2b:fb:c3:e9:9e:16:12:26:d8:65:a5:0a:36:34:56: 91:09:86:a4:53:58:f0:00:17:c3:d8:45:aa:c2:69:4d:d7:d1: 6b:35:35:71:5a:43:b8:7f:e3:a7:dc:43:d0:c8:ac:29:13:26: 61:e8:20:b8:09:c1:72:a7:23:41:01:ae:2f:aa:40:1c:2d:e2: f6:fb:2d:af:2d:32:57:ff:4a:85:da:f7:3d:14:5a:dc:7c:08: 05:ce:98:b4:49:29:d1:90:df:01:6d:da:70:54:39:72:8b:c9: 45:78:f1:9f:60:8f:57:51:a7:ae:14:f8:11:72:d1:45:a0:65: 29:31:90:15:10:98:ed:8f:83:08:d3:b1:41:90:41:b4:06:cd: a1:70:28:7a:56:11:16:a4:fb:26:e3:e3:c3:6a:1b:1e:c4:78: 70:6d:e4:bc:f5:f1:30:29:1d:73:90:4c:3c:cd:2c:6e:02:2c: c1:41:19:3c:f0:c7:20:29:0d:c3:42:22:19:7f:61:1a:7b:c4: 0c:4e:06:a1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUNr15H9UIsOwY/SjpRP75lJMxbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwNTE1MDgxNloX DTI1MTAwNDE1MTMxNlowMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4 MkQ3MzcwQjlFQUZGNDJBOTQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWtpNAss8GhGC0n25KH1yzfe6jtSZFv4fCe9XG/DhSWv0to5SPLkfVObc9J 23OSaDSq4TNjoKdBqaDfwfWkJC+QXaJ3nh498zRmmnCwkb71SF6AxmyqpOUH/pxQ gvksgFU5JYAg2ar6vkhJd4/6wJaFsQMPyg5ui/zfVwB+HHkJSCFyh312l5WYq1O1 K0fCTx3UrAEA6VEuMATGcx1QPoy9sD7LwamhzMsA6ap+QMd4G35VPCNexRTzbQ8V gmD7Gz+4COG1/SjiNK29KSjJTho7r1844lC4sqwpc7BrlHxozNGb5yqhxUrkVD+v zh9URbFGIvDE5gBKC6oaYjNFX4cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE4FTgZNzfLkn3KC1zcLnq/0KpRLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNl LTU3YTEtNDBmMi04NTI3LTRkMGE2OWM1ZDY0Ny8wLzRFMDU0RTA2NERDREYyRTQ5 RjcyODJENzM3MEI5RUFGRjQyQTk0NEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7xYwDQYJKoZIhvcNAQELBQADggEBAEZ5XdH6SqEU18A22QkUGD0ttYvSrPWC LJCNosX1L2LGHZRuui6GdWD4XwaDQ1gAIPMJyCksFvsLYiv7w+meFhIm2GWlCjY0 VpEJhqRTWPAAF8PYRarCaU3X0Ws1NXFaQ7h/46fcQ9DIrCkTJmHoILgJwXKnI0EB ri+qQBwt4vb7La8tMlf/SoXa9z0UWtx8CAXOmLRJKdGQ3wFt2nBUOXKLyUV48Z9g j1dRp64U+BFy0UWgZSkxkBUQmO2PgwjTsUGQQbQGzaFwKHpWERak+ybj48NqGx7E eHBt5Lz18TApHXOQTDzNLG4CLMFBGTzwxyApDcNCIhl/YRp7xAxOBqE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:17 2024 by rpki-client on console-fra.rpki-client.org