$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer (raw, json) Hash identifier: LkKSCa1p/0zGi0Jp2Oct1NQy8wtRtavuIjRTLmn7OE4= Subject key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6395430AB47D84DBF0AA5FD15D6F33B4B2877F16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft caRepository: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Aug 2023 20:59:18 +0000 Certificate not after: Wed 31 Jul 2024 21:04:18 +0000 Subordinate resources: IP: 103.226.48.0/22 IP: 2400:a680::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:95:43:0a:b4:7d:84:db:f0:aa:5f:d1:5d:6f:33:b4:b2:87:7f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 2 20:59:18 2023 GMT Not After : Jul 31 21:04:18 2024 GMT Subject: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:6e:4f:90:4a:27:f9:ea:2c:b6:48:cb:f7: 0c:69:5a:59:2b:02:ff:de:48:b4:e0:85:6e:49:2f: 9c:82:9d:0c:d9:6d:8b:6f:bb:28:3c:4c:6a:7b:d4: e1:df:dc:a8:fd:38:8a:e2:52:ef:8e:62:0c:4a:39: b9:ec:55:64:28:3c:cd:a4:f4:c7:19:a3:10:05:1e: 5c:50:5d:a1:52:4b:e7:44:ba:6f:86:c8:2e:4f:51: 96:2b:6b:90:21:02:16:01:38:b2:bc:4e:67:0d:02: b6:74:87:06:c1:86:96:3b:18:27:1a:36:91:b3:59: 36:a4:09:1f:3d:f5:67:51:e9:84:f1:fb:ec:07:3e: fb:c7:b0:66:00:ee:f1:7c:9c:26:ec:0c:cf:a3:3f: 46:1e:21:c4:fc:89:2e:95:f6:e7:53:db:b5:b8:f8: bf:bc:25:dc:2f:a6:0a:89:3b:9c:08:3c:67:3d:63: d0:c3:9f:3f:89:37:02:67:66:28:d4:6a:c0:6a:10: f6:9b:2a:4c:e5:64:3a:54:f9:66:d6:e2:11:8c:2d: 12:c6:a1:ee:f7:a8:37:81:90:2b:5b:eb:a1:07:04: 1d:2f:df:26:2c:ef:f6:02:61:54:3f:71:ce:37:c1: 4c:12:99:ce:4a:ec:55:dd:26:c5:27:e2:1e:73:59: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.48.0/22 IPv6: 2400:a680::/32 Signature Algorithm: sha256WithRSAEncryption 30:37:5b:e4:90:49:e2:35:13:f8:45:55:17:f6:07:bc:9d:71: 2f:06:aa:77:44:99:41:e0:88:41:ee:89:02:62:8d:45:98:b5: 71:da:ad:50:fd:d0:29:ae:81:c1:0f:9b:02:ab:ec:0f:db:74: 02:3b:3e:a8:08:fe:a3:12:12:c6:12:a7:2a:99:82:18:4f:a0: 6a:7b:fe:33:a2:78:0b:f6:ec:db:21:e9:ee:3d:ec:5b:0a:69: 7f:c8:5e:ce:a2:de:f6:cf:a9:79:e3:37:a7:84:4a:0d:f8:84: e7:ab:c1:07:d4:be:05:99:ce:af:c9:9a:37:6c:66:af:a8:6a: 60:2b:1d:fd:76:1d:b4:d7:c0:0d:23:dd:b8:de:96:f8:72:64: a6:ab:2b:3a:e3:89:98:62:93:79:71:da:7e:d2:aa:1f:0c:dc: 0a:96:6f:bc:ea:ec:47:50:01:a1:da:d9:78:8b:ab:70:26:19: 31:9f:d6:f7:aa:66:5c:8e:30:cc:fa:87:1e:15:a6:ef:41:08: 8c:4e:7f:33:18:c5:96:21:d2:aa:62:5a:97:43:a6:af:a5:e3: 79:0b:87:c4:52:81:25:9b:0d:8f:f1:bc:2a:48:fa:17:c8:0d: 1a:5b:4b:49:cc:92:85:df:0f:bf:2b:c2:ec:5c:26:f9:9d:be: cf:2c:d0:ef -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUY5VDCrR9hNvwql/RXW8ztLKHfxYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwMjIwNTkxOFoX DTI0MDczMTIxMDQxOFowMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2 ODkyNjEyRTBCRUQzRkZGQjUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxebk+QSif56iy2SMv3DGlaWSsC/95ItOCFbkkvnIKdDNlti2+7KDxManvU 4d/cqP04iuJS745iDEo5uexVZCg8zaT0xxmjEAUeXFBdoVJL50S6b4bILk9Rlitr kCECFgE4srxOZw0CtnSHBsGGljsYJxo2kbNZNqQJHz31Z1HphPH77Ac++8ewZgDu 8XycJuwMz6M/Rh4hxPyJLpX251Pbtbj4v7wl3C+mCok7nAg8Zz1j0MOfP4k3Amdm KNRqwGoQ9psqTOVkOlT5ZtbiEYwtEsah7veoN4GQK1vroQcEHS/fJizv9gJhVD9x zjfBTBKZzkrsVd0mxSfiHnNZuckCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL4qntyMVW1N14RokmEuC+0//7UrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MGNlNzMz LTc3ZjQtNGUxZC1iNWVjLTYxZWRlNGRhMDc0ZC8wL0JFMkE5RURDOEM1NTZENERE Nzg0Njg5MjYxMkUwQkVEM0ZGRkI1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn4jAwDQQCAAIwBwMFACQApoAwDQYJKoZIhvcNAQELBQADggEBADA3W+SQSeI1 E/hFVRf2B7ydcS8GqndEmUHgiEHuiQJijUWYtXHarVD90CmugcEPmwKr7A/bdAI7 PqgI/qMSEsYSpyqZghhPoGp7/jOieAv27Nsh6e497FsKaX/IXs6i3vbPqXnjN6eE Sg34hOerwQfUvgWZzq/JmjdsZq+oamArHf12HbTXwA0j3bjelvhyZKarKzrjiZhi k3lx2n7Sqh8M3AqWb7zq7EdQAaHa2XiLq3AmGTGf1veqZlyOMMz6hx4Vpu9BCIxO fzMYxZYh0qpiWpdDpq+l43kLh8RSgSWbDY/xvCpI+hfIDRpbS0nMkoXfD78rwuxc Jvmdvs8s0O8= -----END CERTIFICATE-----Generated at Thu May 9 00:37:10 2024 by rpki-client on console-fra.rpki-client.org