$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer File: EA364B048B6B5A81F887F07FDB60499024CE8C94.cer (raw, json) Hash identifier: fdQ8tXPRkovh/Za6DM0M7wj+RL65g51XJzdj/AUucV4= Subject key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 60DCE60C0A66112CDC4CCAB83A99268E29004970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft caRepository: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Jan 2024 11:41:18 +0000 Certificate not after: Wed 01 Jan 2025 11:46:18 +0000 Subordinate resources: IP: 103.121.100.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dc:e6:0c:0a:66:11:2c:dc:4c:ca:b8:3a:99:26:8e:29:00:49:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 3 11:41:18 2024 GMT Not After : Jan 1 11:46:18 2025 GMT Subject: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:ae:7f:d6:a8:41:ff:73:c3:26:77:58:30: df:b9:5e:2c:b4:67:6f:a6:de:90:1e:f4:61:85:99: d7:f3:6f:22:2e:04:f5:89:af:f6:a8:7b:ff:7b:7e: 0a:e6:0e:c9:2c:fc:9e:c9:2d:01:3d:cb:ad:85:c0: 1e:e2:0b:15:24:d8:38:0f:3a:5e:66:4e:af:c3:b9: bb:42:b4:e3:8b:98:5e:77:14:03:11:a2:a7:df:6f: d2:1d:cc:ec:ce:96:33:26:16:3e:10:24:80:2c:be: 98:43:56:52:fa:e8:82:5e:fc:70:8a:eb:5b:45:f0: 4b:cc:cb:5c:a1:23:3e:81:1f:7c:64:f8:1c:84:dc: aa:48:bb:3b:20:14:b7:90:4b:85:13:75:08:ce:f3: 66:41:e9:89:00:c7:67:be:60:26:7a:dd:0b:99:86: 14:8b:47:b6:34:09:e4:3c:18:ee:04:85:c4:62:44: b4:e0:39:76:2b:e5:82:b0:8c:cc:5f:be:ea:92:bc: 4e:05:5c:89:75:28:e8:3c:e9:3d:a0:86:81:c6:ba: e8:49:53:09:c1:c1:e4:c5:dc:14:e9:ae:1b:d3:53: d2:d3:01:8e:cd:26:1c:83:1f:9f:9a:ae:f3:23:3b: 9f:6e:b9:36:6e:d8:b0:c1:c6:46:95:e1:72:98:45: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:88:e4:6b:35:e3:16:25:9a:ad:4b:f1:0b:db:3e:31:7a:27: 6c:3b:23:57:48:e3:2c:ed:e4:02:54:2b:4d:44:62:ad:54:89: 94:5a:bb:1d:8f:8d:0a:12:b6:ec:d9:15:1c:cd:ab:5d:0f:6c: 0b:9c:c4:bc:f3:95:69:fb:8b:7f:d1:29:c8:24:f4:6e:50:3e: d9:17:23:c4:ff:01:c7:d3:aa:dd:01:d9:d2:90:c1:4b:e6:3b: 61:ea:8f:10:4c:da:4f:b0:cf:5f:18:1f:c4:cb:5b:c0:d9:8a: a6:d5:a2:fe:9a:dd:08:d3:ec:4f:d2:44:93:73:60:61:61:6b: 76:28:f5:bb:42:eb:08:d9:1f:c2:35:63:78:01:99:f9:74:fc: 80:25:43:1b:2a:64:3a:a4:69:58:df:c9:e9:97:35:64:11:a5: 22:87:2b:de:6f:c9:c2:8d:a8:c2:c0:7f:43:72:32:45:5e:9f: f3:ec:c8:80:3f:8c:61:58:5a:da:97:13:8d:25:7f:c6:e4:b2: 16:5a:62:dd:aa:0a:23:e4:eb:3b:68:6e:d8:ee:b9:6f:d7:56: 56:a1:d3:e4:42:d2:0d:29:be:10:70:02:89:ec:80:93:c9:09: a8:7f:c8:47:60:c4:c1:a8:5e:18:ba:42:cd:38:9b:9e:d5:ed: 50:72:4d:35 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYNzmDApmESzcTMq4OpkmjikASXAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMzExNDExOFoX DTI1MDEwMTExNDYxOFowMzExMC8GA1UEAxMoRUEzNjRCMDQ4QjZCNUE4MUY4ODdG MDdGREI2MDQ5OTAyNENFOEM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANH+rn/WqEH/c8Mmd1gw37leLLRnb6bekB70YYWZ1/NvIi4E9Ymv9qh7/3t+ CuYOySz8nsktAT3LrYXAHuILFSTYOA86XmZOr8O5u0K044uYXncUAxGip99v0h3M 7M6WMyYWPhAkgCy+mENWUvrogl78cIrrW0XwS8zLXKEjPoEffGT4HITcqki7OyAU t5BLhRN1CM7zZkHpiQDHZ75gJnrdC5mGFItHtjQJ5DwY7gSFxGJEtOA5divlgrCM zF++6pK8TgVciXUo6DzpPaCGgca66ElTCcHB5MXcFOmuG9NT0tMBjs0mHIMfn5qu 8yM7n265Nm7YsMHGRpXhcphFq5kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOo2SwSLa1qB+Ifwf9tgSZAkzoyUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMTEzMjQ5Ny01OTYzLTQ3YWEtOWRlMS02Yzg0OTZhMzZlYjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMTMyNDk3 LTU5NjMtNDdhYS05ZGUxLTZjODQ5NmEzNmViNi8wL0VBMzY0QjA0OEI2QjVBODFG ODg3RjA3RkRCNjA0OTkwMjRDRThDOTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneWQwDQYJKoZIhvcNAQELBQADggEBAE2I5Gs14xYlmq1L8QvbPjF6J2w7I1dI 4yzt5AJUK01EYq1UiZRaux2PjQoStuzZFRzNq10PbAucxLzzlWn7i3/RKcgk9G5Q PtkXI8T/AcfTqt0B2dKQwUvmO2HqjxBM2k+wz18YH8TLW8DZiqbVov6a3QjT7E/S RJNzYGFha3Yo9btC6wjZH8I1Y3gBmfl0/IAlQxsqZDqkaVjfyemXNWQRpSKHK95v ycKNqMLAf0NyMkVen/PsyIA/jGFYWtqXE40lf8bkshZaYt2qCiPk6ztobtjuuW/X Vlah0+RC0g0pvhBwAonsgJPJCah/yEdgxMGoXhi6Qs04m57V7VByTTU= -----END CERTIFICATE-----Generated at Wed May 8 17:45:31 2024 by rpki-client on console-ams.rpki-client.org