$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer (raw, json) Hash identifier: 3q3j9fzYcwUQQP6xtKybO5+VizLU8Tx5r7x8v9AARyw= Subject key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53B09B3CE6A13541A73253E9687B778F32647C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 04 Nov 2023 11:21:53 +0000 Certificate not after: Sat 02 Nov 2024 11:26:53 +0000 Subordinate resources: IP: 27.111.48.0/20 IP: 103.3.220.0/22 IP: 112.215.0.0/16 IP: 121.52.0.0/17 IP: 202.152.224.0/19 IP: 203.78.112.0/20 IP: 2400:9800::/32 IP: 2407:7600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b0:9b:3c:e6:a1:35:41:a7:32:53:e9:68:7b:77:8f:32:64:7c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 4 11:21:53 2023 GMT Not After : Nov 2 11:26:53 2024 GMT Subject: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:16:68:e6:29:b9:f1:89:54:05:9a:e1:ec: 23:bf:1a:f8:10:60:56:1a:83:1b:14:b3:1c:aa:8a: 9a:4e:b2:19:a1:49:46:fa:c4:28:61:69:18:92:4b: ee:dc:40:00:75:88:08:7e:62:70:c5:89:3b:b5:39: 6b:f4:1d:60:c4:6d:04:fd:49:76:7f:b7:a4:eb:7c: 46:02:56:61:23:03:39:88:77:3b:f3:99:93:8d:5e: e2:f1:b1:fb:4f:d3:2e:fd:3a:08:5a:53:06:18:d0: 59:de:85:f6:05:81:86:80:61:97:c0:46:8a:c1:ad: 65:9c:cf:f3:91:4c:81:de:46:67:2c:04:dc:26:9e: 67:35:a1:eb:7e:ac:b0:2f:f9:a5:de:12:12:b8:e1: a0:7c:3d:3b:83:a7:74:8c:40:61:a0:b0:8a:cd:ed: 38:e2:e4:3e:5a:b1:81:c2:ef:f9:4b:f7:5b:ae:b9: e6:23:04:bc:bd:39:38:24:30:5c:36:83:42:ac:a1: a2:c3:a6:1c:5e:ce:32:e6:83:9e:7e:2a:05:54:30: ec:89:eb:c2:ba:1b:e7:c5:65:bb:4b:1a:22:0b:38: 93:07:4b:42:74:80:d8:dd:8d:27:f0:9d:c9:cd:70: b6:2e:b9:64:3e:64:18:08:dd:92:76:70:16:93:41: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.48.0/20 103.3.220.0/22 112.215.0.0/16 121.52.0.0/17 202.152.224.0/19 203.78.112.0/20 IPv6: 2400:9800::/32 2407:7600::/32 Signature Algorithm: sha256WithRSAEncryption 1f:1b:61:35:90:4e:7f:75:0f:88:09:e4:51:8b:23:05:fc:73: e3:90:14:38:33:25:9b:09:cd:5b:a2:7f:40:0b:b5:9d:e8:b8: 49:46:c8:d6:9b:fe:2d:de:e6:f4:16:ec:a8:48:49:df:66:93: ce:38:d8:58:4e:16:38:5a:bf:8e:93:4a:d9:30:8b:8f:2a:de: b9:ff:1f:5f:34:73:ee:ea:5f:5e:68:98:d3:2a:bb:83:03:26: fa:41:66:6c:80:9f:76:5d:18:88:84:90:31:80:a6:57:ca:15: 08:9f:31:02:01:c7:a9:28:f3:2a:38:40:39:03:d6:a3:70:90: 68:44:78:89:6a:3e:a5:90:7a:0d:20:0b:ec:36:44:e7:51:44: 86:10:60:e7:81:0d:26:7e:7b:b6:2f:ca:e1:85:34:ab:8a:bc: da:d1:4e:1d:75:8a:3b:1b:6e:d1:da:f1:bc:a0:ca:ba:50:39: f3:4a:e6:c4:3a:22:00:7b:0c:33:19:35:c1:70:92:95:ca:41: 67:2b:af:b1:24:6c:a4:e0:d2:dd:70:29:c5:ef:d5:7e:89:1e: ff:8d:64:0f:1d:4a:6f:ff:4f:f2:b4:4b:79:2d:5a:06:a7:e5: 37:91:4d:9b:78:8b:8a:8f:fa:a8:7c:cd:4c:aa:2e:d6:83:5e: 28:23:11:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU7CbPOahNUGnMlPpaHt3jzJkfGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNDExMjE1M1oX DTI0MTEwMjExMjY1M1owMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5 QUMyMjExREFGRDIwOTU2ODdEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIDFmjmKbnxiVQFmuHsI78a+BBgVhqDGxSzHKqKmk6yGaFJRvrEKGFpGJJL 7txAAHWICH5icMWJO7U5a/QdYMRtBP1Jdn+3pOt8RgJWYSMDOYh3O/OZk41e4vGx +0/TLv06CFpTBhjQWd6F9gWBhoBhl8BGisGtZZzP85FMgd5GZywE3CaeZzWh636s sC/5pd4SErjhoHw9O4OndIxAYaCwis3tOOLkPlqxgcLv+Uv3W6655iMEvL05OCQw XDaDQqyhosOmHF7OMuaDnn4qBVQw7Inrwrob58Vlu0saIgs4kwdLQnSA2N2NJ/Cd yc1wti65ZD5kGAjdknZwFpNBlA0CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLSTpc6/CeELw12awiEdr9IJVofaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBh LWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wL0I0OTNBNUNFQkYwOUUxMEJD MzVEOUFDMjIxMURBRkQyMDk1Njg3REEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD BAQbbzADBAJnA9wDAwBw1wMEB3k0AAMEBcqY4AMEBMtOcDAUBAIAAjAOAwUAJACY AAMFACQHdgAwDQYJKoZIhvcNAQELBQADggEBAB8bYTWQTn91D4gJ5FGLIwX8c+OQ FDgzJZsJzVuif0ALtZ3ouElGyNab/i3e5vQW7KhISd9mk8442FhOFjhav46TStkw i48q3rn/H180c+7qX15omNMqu4MDJvpBZmyAn3ZdGIiEkDGAplfKFQifMQIBx6ko 8yo4QDkD1qNwkGhEeIlqPqWQeg0gC+w2ROdRRIYQYOeBDSZ+e7YvyuGFNKuKvNrR Th11ijsbbtHa8bygyrpQOfNK5sQ6IgB7DDMZNcFwkpXKQWcrr7EkbKTg0t1wKcXv 1X6JHv+NZA8dSm//T/K0S3ktWgan5TeRTZt4i4qP+qh8zUyqLtaDXigjEQY= -----END CERTIFICATE-----Generated at Wed May 8 18:12:19 2024 by rpki-client on console-fra.rpki-client.org