$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer (raw, json) Hash identifier: Po8nEW3qiNFTZWIQfH1wIFczdkwrzJWJJJcUoNxHYaY= Subject key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52DB6C855871147A0765B1E19B4E2BB2FD32191B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft caRepository: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 01 Oct 2024 06:21:38 +0000 Certificate not after: Tue 30 Sep 2025 06:26:38 +0000 Subordinate resources: IP: 103.147.74.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:db:6c:85:58:71:14:7a:07:65:b1:e1:9b:4e:2b:b2:fd:32:19:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 06:21:38 2024 GMT Not After : Sep 30 06:26:38 2025 GMT Subject: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:56:67:a3:6e:da:92:57:19:ef:df:fb:3b: f9:c4:62:a1:fb:e1:de:f6:42:3f:9d:02:f4:71:55: d1:ef:74:74:5d:e4:a4:9d:7d:0d:e2:7e:e4:79:d6: 41:b8:cd:ff:3f:2c:41:5f:58:b8:21:59:22:9a:50: a9:2b:45:40:0c:89:c7:62:0b:b9:b9:47:24:fd:3c: 55:a5:c7:6d:16:54:88:f8:ad:9a:9c:49:82:b6:28: 4b:80:dc:99:8c:81:58:e9:80:b6:50:26:b5:28:e4: 3a:6e:02:82:09:81:f0:40:4f:8f:b5:44:8d:9f:ea: 44:41:23:70:6b:71:a0:6a:58:7e:8c:f0:9d:e0:57: 73:68:44:46:68:bd:57:d6:43:9b:ea:ac:75:ca:62: 2f:17:78:a2:21:c9:82:59:28:03:17:e1:4b:be:b5: 5f:ba:d1:bb:5c:4f:4f:af:33:eb:4a:35:76:44:f5: 6a:b0:b6:d0:ac:51:cb:2d:72:d4:7f:5e:eb:54:34: cd:37:25:36:a8:14:35:67:eb:53:07:c3:ac:3b:9d: 72:7c:dd:1c:cc:c1:6d:bb:d4:f4:6f:28:50:a8:85: ec:e6:91:0b:fa:7d:a6:50:58:49:68:49:5f:32:c7: e7:54:e6:97:45:9f:e1:0f:2f:74:6c:ff:7a:21:8e: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.74.0/23 Signature Algorithm: sha256WithRSAEncryption 63:58:72:86:fc:95:4b:86:9c:43:18:31:f2:e5:4f:c2:47:de: 1c:03:41:2d:d4:ca:87:c0:07:4a:75:be:85:40:b1:65:78:af: ad:3f:2f:bb:c7:9c:d8:23:96:ed:44:d8:76:01:cc:74:66:72: 22:e3:53:01:aa:92:b8:4e:ef:0a:da:30:38:de:a6:00:b6:45: bd:99:f6:f4:67:01:98:9b:4c:f9:5c:72:b7:95:2f:17:c0:b2: f6:c4:36:6c:51:82:e7:cb:48:cb:9d:2c:a9:db:b1:9f:df:16: 32:90:25:e8:f4:44:d6:4d:62:d2:c9:cc:3b:a0:68:f9:23:1e: 2d:3d:74:09:3a:1b:10:2b:35:cc:ba:a1:79:10:05:32:90:a4: 81:b7:f2:2d:e6:93:c2:10:7f:3b:ce:2f:d7:d2:f8:85:1e:bc: 8b:2e:55:6b:ce:6b:44:ca:db:f6:f1:e7:7f:2a:0a:49:31:a5: 13:bc:e0:c4:64:7d:8d:e2:2e:e5:26:7c:11:60:39:57:eb:30: 2a:07:ad:51:f8:22:83:17:42:d6:19:f1:1b:0e:b5:43:68:9f: d1:2e:7d:04:02:c8:ea:10:05:f4:be:f6:42:59:06:ac:57:65: 39:44:1e:ef:e1:74:82:74:4c:26:e4:f0:31:ec:00:b4:62:e6: 40:ae:aa:b6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUttshVhxFHoHZbHhm04rsv0yGRswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMTA2MjEzOFoX DTI1MDkzMDA2MjYzOFowMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3 NzBGNUQ4NDZCNTBGQzc4M0EzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZGVmejbtqSVxnv3/s7+cRiofvh3vZCP50C9HFV0e90dF3kpJ19DeJ+5HnW QbjN/z8sQV9YuCFZIppQqStFQAyJx2ILublHJP08VaXHbRZUiPitmpxJgrYoS4Dc mYyBWOmAtlAmtSjkOm4CggmB8EBPj7VEjZ/qREEjcGtxoGpYfozwneBXc2hERmi9 V9ZDm+qsdcpiLxd4oiHJglkoAxfhS761X7rRu1xPT68z60o1dkT1arC20KxRyy1y 1H9e61Q0zTclNqgUNWfrUwfDrDudcnzdHMzBbbvU9G8oUKiF7OaRC/p9plBYSWhJ XzLH51Tml0Wf4Q8vdGz/eiGOVNsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSBO/2f0nycoip3D12Ea1D8eDo8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3MjkwN2Qz LWJlMjQtNGRhOC05NmJiLWYxMjI4ZmM5OTIwNS8wL0U0ODEzQkZEOUZEMjdDOUNB MjJBNzcwRjVEODQ2QjUwRkM3ODNBM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk0owDQYJKoZIhvcNAQELBQADggEBAGNYcob8lUuGnEMYMfLlT8JH3hwDQS3U yofAB0p1voVAsWV4r60/L7vHnNgjlu1E2HYBzHRmciLjUwGqkrhO7wraMDjepgC2 Rb2Z9vRnAZibTPlccreVLxfAsvbENmxRgufLSMudLKnbsZ/fFjKQJej0RNZNYtLJ zDugaPkjHi09dAk6GxArNcy6oXkQBTKQpIG38i3mk8IQfzvOL9fS+IUevIsuVWvO a0TK2/bx538qCkkxpRO84MRkfY3iLuUmfBFgOVfrMCoHrVH4IoMXQtYZ8RsOtUNo n9EufQQCyOoQBfS+9kJZBqxXZTlEHu/hdIJ0TCbk8DHsALRi5kCuqrY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org