$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.cer (raw, json) Hash identifier: 84nHMoT/4WjVEi0USejKx/h0se4cK3z9zErltkcqvMs= Subject key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5951A918348956419C2F0E94CF4CCF8DBE74A5C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 10:24:22 +0000 Certificate not after: Mon 30 Jun 2025 10:29:22 +0000 Subordinate resources: IP: 43.245.188.0/22 IP: 103.29.148.0/22 IP: 202.6.208.0/20 IP: 2403:e600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:51:a9:18:34:89:56:41:9c:2f:0e:94:cf:4c:cf:8d:be:74:a5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 10:24:22 2024 GMT Not After : Jun 30 10:29:22 2025 GMT Subject: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:e3:ff:ec:5c:d4:18:8f:80:08:37:85:d4: 9c:26:8b:de:bf:08:7c:47:44:f9:13:c8:d3:3e:51: 5b:7d:2d:d2:aa:8b:a3:d1:d0:16:38:f0:ba:4a:2a: c5:89:fe:07:1d:f5:c6:cf:28:44:b6:51:a5:cf:58: 5d:54:6f:d1:87:71:76:06:e3:8f:78:b6:21:7c:d6: 92:fc:ce:f7:d0:00:f4:52:f3:a8:fb:54:fc:48:30: 2b:38:34:b4:cf:b1:65:80:de:ad:40:87:6c:a5:84: f0:8a:8b:32:e3:08:08:c3:a7:83:a5:2b:a1:7a:68: 22:dd:60:d0:59:72:9b:80:b5:e1:70:1f:97:9a:c8: 98:58:02:94:f9:be:fc:be:fd:84:50:d9:49:58:ad: 6f:76:80:99:2d:a8:e6:78:ee:a8:0a:99:43:54:44: 21:4c:70:7d:46:82:0c:4e:7f:39:65:60:c5:da:06: 4d:fd:4f:90:19:3d:e1:c8:a4:dd:3d:57:db:f4:55: 81:69:23:e2:e8:79:94:29:f5:70:d4:1e:66:57:01: c4:5e:4c:b1:8a:f5:b5:40:e0:68:ea:b4:9a:fb:12: 85:c5:54:dc:3d:af:d2:23:db:90:b2:8a:14:e0:26: 36:53:9e:27:53:15:20:9c:3d:4b:e2:97:49:30:e5: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.188.0/22 103.29.148.0/22 202.6.208.0/20 IPv6: 2403:e600::/32 Signature Algorithm: sha256WithRSAEncryption 7d:8f:08:1c:fc:f6:b8:01:00:df:67:1e:02:d9:e2:12:f9:46: af:32:71:f1:66:f6:33:d8:0f:62:06:52:8c:51:33:72:2e:cd: 34:d9:00:77:ef:a3:b7:c7:46:c1:3f:8a:9e:68:2c:23:76:4b: a8:09:d9:d8:cb:3f:63:73:03:7b:a4:00:11:8d:7c:da:22:e1: 87:7b:51:83:a7:d6:2a:20:3c:55:ed:47:f8:e0:3a:e1:fe:2d: 7e:c7:b5:09:a5:a6:3c:3c:3f:bc:69:42:cf:de:48:24:0e:98: 60:d3:a8:df:cd:7c:9e:59:96:e0:7a:9c:39:65:aa:c4:f7:9f: 4a:02:77:af:ca:f5:83:56:be:ef:56:3a:5b:b8:f3:14:17:75: ed:0d:23:87:d1:63:32:32:ab:c1:95:17:2a:11:88:48:fb:64: 89:0a:84:8e:2d:31:dd:18:ad:fe:80:d9:1d:3b:2f:e3:21:09: 1c:6e:26:87:2d:38:67:ef:92:e2:ee:f7:30:60:44:b2:bd:c8: 21:ef:ab:6a:03:36:41:b4:52:7a:98:85:f0:eb:62:55:06:73: a5:87:8f:e9:b3:92:b4:1a:c6:6d:16:12:1a:6e:77:e6:ba:5d: a0:37:2b:43:fb:74:b7:13:0b:d1:cf:79:35:46:81:7f:de:40: 37:8d:41:d1 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUWVGpGDSJVkGcLw6Uz0zPjb50pccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTEwMjQyMloX DTI1MDYzMDEwMjkyMlowMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0 RTY3RDgwNDhDMEQxQ0UzQjI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIL4//sXNQYj4AIN4XUnCaL3r8IfEdE+RPI0z5RW30t0qqLo9HQFjjwukoq xYn+Bx31xs8oRLZRpc9YXVRv0Ydxdgbjj3i2IXzWkvzO99AA9FLzqPtU/EgwKzg0 tM+xZYDerUCHbKWE8IqLMuMICMOng6UroXpoIt1g0Flym4C14XAfl5rImFgClPm+ /L79hFDZSVitb3aAmS2o5njuqAqZQ1REIUxwfUaCDE5/OWVgxdoGTf1PkBk94cik 3T1X2/RVgWkj4uh5lCn1cNQeZlcBxF5MsYr1tUDgaOq0mvsShcVU3D2v0iPbkLKK FOAmNlOeJ1MVIJw9S+KXSTDl+IECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE5SUEOXtoNXhL1OZ9gEjA0c47JCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8wLzRFNTI1MDQzOTdCNjgzNTc4 NEJENEU2N0Q4MDQ4QzBEMUNFM0IyNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAIr9bwDBAJnHZQDBATKBtAwDQQCAAIwBwMFACQD5gAwDQYJKoZIhvcNAQELBQAD ggEBAH2PCBz89rgBAN9nHgLZ4hL5Rq8ycfFm9jPYD2IGUoxRM3IuzTTZAHfvo7fH RsE/ip5oLCN2S6gJ2djLP2NzA3ukABGNfNoi4Yd7UYOn1iogPFXtR/jgOuH+LX7H tQmlpjw8P7xpQs/eSCQOmGDTqN/NfJ5ZluB6nDllqsT3n0oCd6/K9YNWvu9WOlu4 8xQXde0NI4fRYzIyq8GVFyoRiEj7ZIkKhI4tMd0Yrf6A2R07L+MhCRxuJoctOGfv kuLu9zBgRLK9yCHvq2oDNkG0UnqYhfDrYlUGc6WHj+mzkrQaxm0WEhpud+a6XaA3 K0P7dLcTC9HPeTVGgX/eQDeNQdE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:21 2024 by rpki-client on console-ams.rpki-client.org