$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer File: 50A2EED432F4BC38B22EB315635CF701DA108F7E.cer (raw, json) Hash identifier: 3WnD1K2umhuzJQYA38Pr6o/126KVxyb3KTxq4VQ1jSI= Subject key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BD2FE49ADC66F3092BFFBC05CE51C421A9DBF07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft caRepository: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Apr 2024 10:52:22 +0000 Certificate not after: Fri 18 Apr 2025 10:57:22 +0000 Subordinate resources: IP: 103.169.12.0/23 IP: 2407:a140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d2:fe:49:ad:c6:6f:30:92:bf:fb:c0:5c:e5:1c:42:1a:9d:bf:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 19 10:52:22 2024 GMT Not After : Apr 18 10:57:22 2025 GMT Subject: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:59:a9:a9:9f:ca:90:dd:31:e5:ca:94:4b: ad:67:c8:a2:37:24:92:2e:b5:21:68:81:f7:76:41: 8e:b0:81:cc:25:f4:84:e5:11:c4:31:9b:f2:74:5b: ba:7b:36:ac:de:8f:43:6b:ac:17:7f:46:a7:a6:52: fa:f6:b1:bb:98:ac:8d:e7:eb:2b:ee:7a:9e:22:4e: 71:7f:5d:70:88:1d:2c:8e:ee:10:83:cd:ff:e9:2b: d4:c3:00:35:b0:b0:cd:3b:9e:54:f5:52:3f:d7:83: e6:6e:2a:c4:5e:5b:d8:26:2e:87:34:93:c2:09:c1: aa:0f:4c:43:6e:76:a7:67:d7:33:4d:b2:69:26:a8: c8:0b:c6:32:59:e6:87:99:b6:56:ae:1f:f6:06:6d: 17:62:35:70:72:74:48:d8:1c:58:91:b5:2c:ce:a5: c4:39:26:8b:11:f5:a5:01:10:ee:b0:ae:4c:10:2b: 3f:e8:a1:e6:ca:ca:5d:44:a7:1a:1b:2a:a1:87:cc: a1:43:0c:2d:44:78:36:00:d7:1f:30:15:6b:2f:b7: f8:9f:b1:ad:43:a2:6c:b3:2d:03:99:3c:50:cb:40: 0d:96:81:9f:28:90:12:08:38:79:02:ed:fd:8d:f1: d6:ed:f5:1e:24:10:a8:95:81:53:e4:88:0d:f0:55: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.12.0/23 IPv6: 2407:a140::/32 Signature Algorithm: sha256WithRSAEncryption 2f:c0:d3:3f:c4:df:b4:5d:32:6e:9b:f0:bd:01:81:c7:26:a9: 13:f9:02:b8:65:25:b7:47:96:4b:a3:c2:86:23:17:3f:57:1e: 0f:e9:1e:a5:6a:ba:cb:91:1e:b7:1c:6e:64:9b:5c:0f:6b:f0: 23:5c:c7:9c:2a:ac:5b:f7:6a:65:c3:3a:0f:e4:0e:03:5e:86: e3:b2:32:f9:60:8e:74:8d:9b:65:0c:6f:6a:79:44:b7:d9:a8: 55:5a:6e:54:ec:bc:e2:46:e7:0b:b8:35:af:90:b8:3d:d7:7c: 1f:5d:56:45:17:12:87:ad:f1:3f:67:01:e4:58:b8:ac:75:c1: d3:ed:23:5f:ca:4a:d5:6b:63:ca:61:2e:ed:77:d9:96:7e:6c: 19:3f:a0:9b:0f:1c:8a:09:12:93:3b:2d:8a:07:0b:db:3b:0c: b6:6e:93:dd:32:2a:d6:9e:d8:5a:2a:16:9d:a0:65:70:d7:84: d5:ab:c7:4b:3f:41:5c:35:21:6b:f4:78:89:22:ee:17:bc:70: c2:86:d9:fb:e4:a4:99:d7:3c:69:39:82:3a:06:63:99:33:84: 2e:db:8d:99:1f:52:ee:87:31:ee:1a:37:4e:a6:70:9f:23:e7: 59:9c:69:75:f3:b4:0e:43:a7:24:f1:83:b8:1d:70:67:c8:e1: 8c:91:a7:06 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUS9L+Sa3GbzCSv/vAXOUcQhqdvwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxOTEwNTIyMloX DTI1MDQxODEwNTcyMlowMzExMC8GA1UEAxMoNTBBMkVFRDQzMkY0QkMzOEIyMkVC MzE1NjM1Q0Y3MDFEQTEwOEY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw9Wampn8qQ3THlypRLrWfIojckki61IWiB93ZBjrCBzCX0hOURxDGb8nRb uns2rN6PQ2usF39Gp6ZS+vaxu5isjefrK+56niJOcX9dcIgdLI7uEIPN/+kr1MMA NbCwzTueVPVSP9eD5m4qxF5b2CYuhzSTwgnBqg9MQ252p2fXM02yaSaoyAvGMlnm h5m2Vq4f9gZtF2I1cHJ0SNgcWJG1LM6lxDkmixH1pQEQ7rCuTBArP+ih5srKXUSn GhsqoYfMoUMMLUR4NgDXHzAVay+3+J+xrUOibLMtA5k8UMtADZaBnyiQEgg4eQLt /Y3x1u31HiQQqJWBU+SIDfBVqi0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFCi7tQy9Lw4si6zFWNc9wHaEI9+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZWI3OGY2OC1jN2NiLTQ1MmYtOTZiNS1jNDFkNjUzNzIwMjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjc4ZjY4 LWM3Y2ItNDUyZi05NmI1LWM0MWQ2NTM3MjAyMS8wLzUwQTJFRUQ0MzJGNEJDMzhC MjJFQjMxNTYzNUNGNzAxREExMDhGN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnqQwwDQQCAAIwBwMFACQHoUAwDQYJKoZIhvcNAQELBQADggEBAC/A0z/E37Rd Mm6b8L0BgccmqRP5ArhlJbdHlkujwoYjFz9XHg/pHqVqusuRHrccbmSbXA9r8CNc x5wqrFv3amXDOg/kDgNehuOyMvlgjnSNm2UMb2p5RLfZqFVablTsvOJG5wu4Na+Q uD3XfB9dVkUXEoet8T9nAeRYuKx1wdPtI1/KStVrY8phLu132ZZ+bBk/oJsPHIoJ EpM7LYoHC9s7DLZuk90yKtae2FoqFp2gZXDXhNWrx0s/QVw1IWv0eIki7he8cMKG 2fvkpJnXPGk5gjoGY5kzhC7bjZkfUu6HMe4aN06mcJ8j51mcaXXztA5DpyTxg7gd cGfI4YyRpwY= -----END CERTIFICATE-----Generated at Wed May 8 09:50:29 2024 by rpki-client on console-fra.rpki-client.org