$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer File: E4B72563B465301EE966885E5BE212EE92B97305.cer (raw, json) Hash identifier: 14odvTnnI+PHTs+Jg+ihrijmEvOJLq/rAXypOLVoIPA= Subject key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C41579DA45B5CF68D5AD31085A1FD26E92214F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft caRepository: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 05 Feb 2024 16:08:40 +0000 Certificate not after: Mon 03 Feb 2025 16:13:40 +0000 Subordinate resources: IP: 103.11.22.0/23 IP: 2001:df0:2ec::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:41:57:9d:a4:5b:5c:f6:8d:5a:d3:10:85:a1:fd:26:e9:22:14:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 5 16:08:40 2024 GMT Not After : Feb 3 16:13:40 2025 GMT Subject: CN=E4B72563B465301EE966885E5BE212EE92B97305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:f4:97:f5:08:c4:2e:5b:69:4c:b5:27:f3: a8:2c:e2:e4:0e:86:a1:44:f9:eb:20:4f:fc:33:dc: 4c:dc:d2:a7:04:b6:08:77:f8:a3:f6:2f:0a:03:94: 94:63:30:4e:4b:44:66:cb:45:db:4c:8b:5c:64:61: 3f:af:2e:07:c8:39:c4:02:49:9d:11:49:d1:4d:ca: fc:e7:af:a5:ef:bc:de:10:4c:ae:cf:de:22:6c:68: c9:3d:da:1d:cd:81:6d:82:e2:d1:88:73:32:b2:31: 5b:c6:7a:36:71:5d:17:c1:de:82:86:56:d1:3e:c8: 52:0a:73:6c:38:f8:e6:00:28:f4:60:c6:6b:69:b2: 55:30:85:69:b8:46:d1:f7:c2:20:33:cf:0a:5a:16: 93:83:b8:7f:66:7e:bf:7a:8b:d7:c5:a2:cb:cb:cb: 4e:99:f2:1d:51:1d:75:86:2c:f6:83:72:97:90:45: d4:ab:26:62:2f:8b:c4:05:84:42:81:3e:d8:45:52: 72:cb:5d:01:38:9f:5d:5f:7a:7d:f8:b9:8a:13:3f: 86:91:de:b5:13:12:7e:ab:1c:a3:dc:60:dc:19:c6: 59:84:90:f6:f0:ac:3a:1e:8e:ba:ca:16:35:0e:eb: 90:a1:c9:b0:f2:2e:5f:38:db:2d:01:23:ed:cc:51: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.22.0/23 IPv6: 2001:df0:2ec::/48 Signature Algorithm: sha256WithRSAEncryption 7f:3e:ff:29:09:6e:e0:d9:5d:07:b2:45:b9:9e:39:e8:5f:31: 35:77:3b:b2:ae:a6:13:63:09:e5:6c:3a:c8:02:98:b4:93:84: c6:b1:1d:fa:92:de:da:22:a6:78:07:ce:d3:c9:66:84:f3:30: bf:ec:ec:73:72:02:0c:1b:68:f3:4e:72:08:46:73:c7:ec:e4: 7a:eb:d8:94:51:c5:b6:39:a7:e4:7a:2c:82:40:8d:1b:13:95: 30:14:46:f4:5a:84:a1:f7:ad:91:0d:f0:5a:10:4a:a6:d2:06: b3:c0:c1:5d:78:dd:d0:e9:e0:d4:8e:87:4c:22:c2:0e:c5:6e: 2c:58:6f:b4:51:b8:5e:6b:2d:95:59:26:5a:0e:d3:23:31:b1: 94:c2:e3:dd:16:92:bf:3f:b2:c0:2e:d2:b7:79:4d:c5:38:f5: 44:d0:9a:af:15:31:ae:0a:3e:b6:27:90:5a:34:d9:94:03:24: cf:bb:df:2c:29:5d:f1:e7:10:4a:95:ba:02:d6:c9:04:62:17: f5:04:d7:2b:c6:4d:f2:94:a8:38:38:36:5d:3c:c2:c7:4a:1c: b0:ec:db:6f:f8:e8:1c:2c:be:97:48:8c:10:d0:f7:b3:63:80: ab:54:4b:96:63:d1:7b:e1:8d:4a:88:d1:76:58:44:98:c5:cb: 31:49:9c:e6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTEFXnaRbXPaNWtMQhaH9JukiFPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNTE2MDg0MFoX DTI1MDIwMzE2MTM0MFowMzExMC8GA1UEAxMoRTRCNzI1NjNCNDY1MzAxRUU5NjY4 ODVFNUJFMjEyRUU5MkI5NzMwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbd9Jf1CMQuW2lMtSfzqCzi5A6GoUT56yBP/DPcTNzSpwS2CHf4o/YvCgOU lGMwTktEZstF20yLXGRhP68uB8g5xAJJnRFJ0U3K/Oevpe+83hBMrs/eImxoyT3a Hc2BbYLi0YhzMrIxW8Z6NnFdF8HegoZW0T7IUgpzbDj45gAo9GDGa2myVTCFabhG 0ffCIDPPCloWk4O4f2Z+v3qL18Wiy8vLTpnyHVEddYYs9oNyl5BF1KsmYi+LxAWE QoE+2EVScstdATifXV96ffi5ihM/hpHetRMSfqsco9xg3BnGWYSQ9vCsOh6OusoW NQ7rkKHJsPIuXzjbLQEj7cxRpOsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOS3JWO0ZTAe6WaIXlviEu6SuXMFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODdhZGU5Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2FkZTlm LTZiNzktNDcyMy05OTQ5LTk2ZGU3ZTQxZGI3MC8wL0U0QjcyNTYzQjQ2NTMwMUVF OTY2ODg1RTVCRTIxMkVFOTJCOTczMDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnCxYwDwQCAAIwCQMHACABDfAC7DANBgkqhkiG9w0BAQsFAAOCAQEAfz7/KQlu 4NldB7JFuZ456F8xNXc7sq6mE2MJ5Ww6yAKYtJOExrEd+pLe2iKmeAfO08lmhPMw v+zsc3ICDBto805yCEZzx+zkeuvYlFHFtjmn5HosgkCNGxOVMBRG9FqEofetkQ3w WhBKptIGs8DBXXjd0Ong1I6HTCLCDsVuLFhvtFG4XmstlVkmWg7TIzGxlMLj3RaS vz+ywC7St3lNxTj1RNCarxUxrgo+tieQWjTZlAMkz7vfLCld8ecQSpW6AtbJBGIX 9QTXK8ZN8pSoODg2XTzCx0ocsOzbb/joHCy+l0iMEND3s2OAq1RLlmPRe+GNSojR dlhEmMXLMUmc5g== -----END CERTIFICATE-----Generated at Wed May 8 21:02:28 2024 by rpki-client on console-fra.rpki-client.org