$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer (raw, json) Hash identifier: d34QCRL2Mqc/pKQ9HqOC7DLV67/xy7PbkLtb7NyAVco= Subject key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E59301A4FE7F42673AC3DEE7D1BA464E4FEDC90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft caRepository: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 31 Oct 2023 05:51:47 +0000 Certificate not after: Tue 29 Oct 2024 05:56:47 +0000 Subordinate resources: IP: 103.147.74.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:59:30:1a:4f:e7:f4:26:73:ac:3d:ee:7d:1b:a4:64:e4:fe:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 31 05:51:47 2023 GMT Not After : Oct 29 05:56:47 2024 GMT Subject: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:56:67:a3:6e:da:92:57:19:ef:df:fb:3b: f9:c4:62:a1:fb:e1:de:f6:42:3f:9d:02:f4:71:55: d1:ef:74:74:5d:e4:a4:9d:7d:0d:e2:7e:e4:79:d6: 41:b8:cd:ff:3f:2c:41:5f:58:b8:21:59:22:9a:50: a9:2b:45:40:0c:89:c7:62:0b:b9:b9:47:24:fd:3c: 55:a5:c7:6d:16:54:88:f8:ad:9a:9c:49:82:b6:28: 4b:80:dc:99:8c:81:58:e9:80:b6:50:26:b5:28:e4: 3a:6e:02:82:09:81:f0:40:4f:8f:b5:44:8d:9f:ea: 44:41:23:70:6b:71:a0:6a:58:7e:8c:f0:9d:e0:57: 73:68:44:46:68:bd:57:d6:43:9b:ea:ac:75:ca:62: 2f:17:78:a2:21:c9:82:59:28:03:17:e1:4b:be:b5: 5f:ba:d1:bb:5c:4f:4f:af:33:eb:4a:35:76:44:f5: 6a:b0:b6:d0:ac:51:cb:2d:72:d4:7f:5e:eb:54:34: cd:37:25:36:a8:14:35:67:eb:53:07:c3:ac:3b:9d: 72:7c:dd:1c:cc:c1:6d:bb:d4:f4:6f:28:50:a8:85: ec:e6:91:0b:fa:7d:a6:50:58:49:68:49:5f:32:c7: e7:54:e6:97:45:9f:e1:0f:2f:74:6c:ff:7a:21:8e: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.74.0/23 Signature Algorithm: sha256WithRSAEncryption 90:b1:80:71:62:34:f3:d8:51:b2:b2:05:9e:2f:b3:93:ca:48: 23:55:38:9c:1c:cc:f0:f1:1e:14:ff:dc:f7:b1:59:45:a9:2f: e0:8c:2c:d3:70:35:c1:ee:dd:ce:bc:dd:28:e1:90:c7:dd:80: 19:37:49:84:52:41:9e:b6:eb:91:81:35:54:98:ce:86:d8:64: 38:d6:d6:ac:25:69:c0:3a:c2:2b:a3:be:74:67:06:bf:f7:52: 27:56:38:94:85:29:4e:06:0b:35:ca:b5:92:5f:c0:04:4c:fa: f2:74:b3:a2:43:a7:b5:e8:1c:e0:a3:b5:71:c5:77:bb:e2:69: 61:ff:0d:fd:8a:89:24:82:36:96:91:a8:42:f8:77:6f:2c:76: a1:5f:c1:5e:4b:ea:81:76:0d:f3:bd:d9:89:5d:1b:d4:53:43: f2:83:60:fa:8a:fe:96:8d:e5:32:76:52:82:10:11:b8:96:b6: 0a:67:f1:61:8c:ae:b3:c2:29:fc:cb:b6:2a:21:34:62:23:5c: ae:2d:a1:a1:fb:f4:f2:04:d4:00:63:16:cb:c7:e2:1f:30:56: 73:48:2d:f1:43:62:3a:b3:41:3d:96:3b:76:58:29:62:ca:fd: 0c:e7:af:8c:1b:f7:17:98:19:19:82:c5:9a:19:79:2f:06:cd: f2:ca:dc:6f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTlkwGk/n9CZzrD3ufRukZOT+3JAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAzMTA1NTE0N1oX DTI0MTAyOTA1NTY0N1owMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3 NzBGNUQ4NDZCNTBGQzc4M0EzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZGVmejbtqSVxnv3/s7+cRiofvh3vZCP50C9HFV0e90dF3kpJ19DeJ+5HnW QbjN/z8sQV9YuCFZIppQqStFQAyJx2ILublHJP08VaXHbRZUiPitmpxJgrYoS4Dc mYyBWOmAtlAmtSjkOm4CggmB8EBPj7VEjZ/qREEjcGtxoGpYfozwneBXc2hERmi9 V9ZDm+qsdcpiLxd4oiHJglkoAxfhS761X7rRu1xPT68z60o1dkT1arC20KxRyy1y 1H9e61Q0zTclNqgUNWfrUwfDrDudcnzdHMzBbbvU9G8oUKiF7OaRC/p9plBYSWhJ XzLH51Tml0Wf4Q8vdGz/eiGOVNsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSBO/2f0nycoip3D12Ea1D8eDo8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3MjkwN2Qz LWJlMjQtNGRhOC05NmJiLWYxMjI4ZmM5OTIwNS8wL0U0ODEzQkZEOUZEMjdDOUNB MjJBNzcwRjVEODQ2QjUwRkM3ODNBM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk0owDQYJKoZIhvcNAQELBQADggEBAJCxgHFiNPPYUbKyBZ4vs5PKSCNVOJwc zPDxHhT/3PexWUWpL+CMLNNwNcHu3c683SjhkMfdgBk3SYRSQZ6265GBNVSYzobY ZDjW1qwlacA6wiujvnRnBr/3UidWOJSFKU4GCzXKtZJfwARM+vJ0s6JDp7XoHOCj tXHFd7viaWH/Df2KiSSCNpaRqEL4d28sdqFfwV5L6oF2DfO92YldG9RTQ/KDYPqK /paN5TJ2UoIQEbiWtgpn8WGMrrPCKfzLtiohNGIjXK4toaH79PIE1ABjFsvH4h8w VnNILfFDYjqzQT2WO3ZYKWLK/Qznr4wb9xeYGRmCxZoZeS8GzfLK3G8= -----END CERTIFICATE-----Generated at Wed May 8 04:38:02 2024 by rpki-client on console-fra.rpki-client.org