$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer File: ED4F41D4EBE684D523406475FAB471CE1B24E360.cer (raw, json) Hash identifier: Q+u2uWvEqmlftCmcP3VH3MQvD8GgiHy8159BKrScmX8= Subject key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 670317424AA1C302432F29CA3EA1033BAADC0ECE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft caRepository: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jan 2024 04:43:06 +0000 Certificate not after: Mon 30 Dec 2024 04:48:06 +0000 Subordinate resources: IP: 103.175.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:03:17:42:4a:a1:c3:02:43:2f:29:ca:3e:a1:03:3b:aa:dc:0e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 1 04:43:06 2024 GMT Not After : Dec 30 04:48:06 2024 GMT Subject: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:5d:8e:23:b1:66:27:93:0e:2d:36:c5:3b: 08:ca:68:5f:cd:64:a1:9b:fc:72:28:f5:82:62:56: 70:ef:fd:f7:41:ad:ad:31:2f:db:d7:d6:73:fe:95: 7e:6c:1a:02:9e:17:d1:b3:dd:19:be:1e:91:64:a4: 9e:5b:51:20:d3:5b:87:13:5e:fc:d1:31:16:2d:5f: a9:45:37:33:5f:c4:9b:7d:94:35:4a:82:21:3f:aa: 9e:0b:fa:56:3e:88:fc:ae:a1:21:28:bf:80:2d:49: 26:5f:db:44:b4:09:94:f8:dc:e2:b9:d7:15:9b:6a: 12:63:a7:13:02:f7:35:ca:c7:a8:7c:dd:44:47:d8: 84:77:78:fe:44:60:02:8d:da:d5:3d:54:b5:8c:69: a8:64:37:65:b9:54:31:94:a7:70:91:06:ac:2a:3d: 09:12:5f:8a:b2:f5:20:cc:23:38:36:92:d6:e2:bd: 3c:25:aa:92:a2:b1:4b:60:3d:f6:9a:ad:76:1e:c0: d6:8c:b1:2e:dd:66:f7:c7:5a:0e:d7:3e:6c:58:6f: ac:1e:d0:c1:e1:67:db:19:73:9f:ed:f5:ae:8e:d7: f4:ab:fd:dc:20:ce:c4:3d:f7:70:2b:fb:bf:34:54: 53:8c:a0:4d:09:6e:d3:f7:35:81:b9:c1:1a:df:f4: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.156.0/23 Signature Algorithm: sha256WithRSAEncryption 08:d4:bd:f5:01:52:97:27:a5:50:0d:ad:7f:30:09:27:f9:bd: 4b:59:b2:59:67:99:8a:02:21:ba:a0:f4:ad:77:a6:06:1a:b5: d8:4c:52:79:5a:7e:37:78:8d:30:12:82:c5:4e:ec:21:8b:a9: 23:78:7b:a0:11:0c:f9:3e:4a:d6:6d:58:e8:2a:f3:b2:cc:34: 4a:a2:d2:d8:85:49:22:4c:71:9d:09:fa:d1:8d:ce:4a:d7:3c: 7d:f4:50:cb:fc:69:39:37:12:eb:23:d1:6f:92:e5:38:e0:a0: 6d:5f:ce:9c:35:87:e9:88:19:d6:a1:e3:9b:08:34:00:0f:ee: 6b:f9:3c:de:28:3c:cd:b3:cf:e0:8d:dc:66:d5:7f:4f:b4:0d: d6:52:0b:a6:95:65:e0:2b:4c:05:c7:c4:78:11:d5:97:d0:0a: 3e:81:00:79:50:e7:df:f1:0a:0c:b7:aa:cc:cf:08:53:86:c2: 50:81:88:b4:2f:8d:0b:60:2f:d4:f5:99:ff:64:81:1b:79:f3: e1:db:12:ad:e5:f2:61:d4:f3:d9:41:c9:19:59:42:98:6a:01: ad:36:48:32:7c:fe:4e:0d:e3:d2:5b:22:3c:1a:6c:57:5d:76: aa:aa:4f:8d:25:47:4d:e5:34:9a:e5:fc:b1:a1:c2:bf:84:69: b5:17:2e:48 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZwMXQkqhwwJDLynKPqEDO6rcDs4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMTA0NDMwNloX DTI0MTIzMDA0NDgwNlowMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2 NDc1RkFCNDcxQ0UxQjI0RTM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQIXY4jsWYnkw4tNsU7CMpoX81koZv8cij1gmJWcO/990GtrTEv29fWc/6V fmwaAp4X0bPdGb4ekWSknltRINNbhxNe/NExFi1fqUU3M1/Em32UNUqCIT+qngv6 Vj6I/K6hISi/gC1JJl/bRLQJlPjc4rnXFZtqEmOnEwL3NcrHqHzdREfYhHd4/kRg Ao3a1T1UtYxpqGQ3ZblUMZSncJEGrCo9CRJfirL1IMwjODaS1uK9PCWqkqKxS2A9 9pqtdh7A1oyxLt1m98daDtc+bFhvrB7QweFn2xlzn+31ro7X9Kv93CDOxD33cCv7 vzRUU4ygTQlu0/c1gbnBGt/0CSkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO1PQdTr5oTVI0Bkdfq0cc4bJONgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZWU3YTVm LTUxMjEtNDE4MS1hNjM1LTEyMWI2ZTY5YWQ1OS8wL0VENEY0MUQ0RUJFNjg0RDUy MzQwNjQ3NUZBQjQ3MUNFMUIyNEUzNjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr5wwDQYJKoZIhvcNAQELBQADggEBAAjUvfUBUpcnpVANrX8wCSf5vUtZslln mYoCIbqg9K13pgYatdhMUnlafjd4jTASgsVO7CGLqSN4e6ARDPk+StZtWOgq87LM NEqi0tiFSSJMcZ0J+tGNzkrXPH30UMv8aTk3Eusj0W+S5TjgoG1fzpw1h+mIGdah 45sINAAP7mv5PN4oPM2zz+CN3GbVf0+0DdZSC6aVZeArTAXHxHgR1ZfQCj6BAHlQ 59/xCgy3qszPCFOGwlCBiLQvjQtgL9T1mf9kgRt58+HbEq3l8mHU89lByRlZQphq Aa02SDJ8/k4N49JbIjwabFdddqqqT40lR03lNJrl/LGhwr+EabUXLkg= -----END CERTIFICATE-----Generated at Wed May 8 15:17:49 2024 by rpki-client on console-fra.rpki-client.org