$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer File: FED855DD505D24B6FE25BD8656297329F7EF4785.cer (raw, json) Hash identifier: omo0IymCf1jQZe44kNfmv03GKDVk1kaE6I0iZM5pHrs= Subject key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A0638B1DA4062EC1C31785424AE085CA452997A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft caRepository: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Nov 2023 12:06:48 +0000 Certificate not after: Wed 06 Nov 2024 12:11:48 +0000 Subordinate resources: IP: 103.105.128.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:06:38:b1:da:40:62:ec:1c:31:78:54:24:ae:08:5c:a4:52:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 12:06:48 2023 GMT Not After : Nov 6 12:11:48 2024 GMT Subject: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:2c:d8:31:c6:3a:da:ad:d8:5e:22:3b:fd: cc:a7:13:e1:4c:84:58:f6:27:4b:09:fa:7e:3c:bd: 58:77:70:8e:66:6f:03:67:73:e3:48:cf:04:f9:ae: 06:9c:01:35:b5:05:f2:9c:b4:7a:39:f1:65:d4:37: c6:90:73:a6:12:f9:34:51:1f:cc:b8:79:fa:ef:0e: 22:fa:e9:24:73:06:2b:17:0b:6f:f4:67:66:f1:dc: 6d:03:f5:52:5b:4c:c8:b1:77:f1:71:69:90:5b:95: 14:8d:30:39:76:38:d7:a5:d5:3c:c4:a0:00:35:1e: 2b:6f:58:a1:10:17:05:6a:c8:92:48:38:bd:fb:68: fc:32:d3:4e:fe:c5:d0:5d:a2:b3:47:33:fe:d6:f8: a5:28:77:5f:ec:15:1d:ad:a7:5e:70:b9:3c:8d:9f: 1d:aa:9d:91:98:c5:14:c1:6f:81:49:6c:7f:42:ee: a9:e7:2b:d3:6e:26:0f:b2:82:be:6e:6b:f4:a2:64: 87:39:0a:42:63:2d:a6:ab:02:64:8f:19:18:e2:82: 37:20:98:60:ac:09:45:ec:8e:12:5a:3e:59:d7:bd: e3:44:82:2e:6d:5c:7f:fa:37:cf:1d:5d:a6:cf:f0: 5f:95:06:cc:d2:57:dd:ec:f5:18:4e:7f:aa:70:97: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.128.0/22 Signature Algorithm: sha256WithRSAEncryption 50:65:b0:e6:07:56:fe:3f:6d:6b:f5:81:e7:db:01:d8:fd:4a: 13:84:4f:8d:00:43:48:0c:a2:b4:70:78:8e:52:73:ce:71:2b: ca:a5:98:48:13:5e:cb:da:8b:37:9b:27:f3:d0:20:02:28:26: 03:73:b7:f1:94:06:00:1e:b5:12:ad:96:cb:0a:6c:50:aa:ba: 10:c5:38:ff:f9:e8:8b:a5:88:ca:7a:89:09:b1:26:25:db:a6: c1:7a:ea:8c:94:30:8f:6e:a6:f9:e3:02:ab:ea:41:37:5c:52: 02:b4:9b:06:7e:7d:8e:73:46:ea:0f:19:aa:f8:dc:5d:69:30: ee:58:4e:0e:db:89:16:8e:4e:5f:70:04:e0:cf:f7:b7:4b:6e: dd:8f:72:0a:98:3a:db:72:3d:c4:b1:8e:81:f8:53:60:89:8b: 34:e7:86:72:87:5e:18:b6:d7:ed:3e:9f:49:95:2b:50:eb:d9: c1:8b:e0:52:ee:d7:17:dd:9c:dc:3e:47:cd:e7:86:e6:10:87: 77:5b:43:61:60:93:bb:5a:a9:9b:39:12:b8:50:76:0a:3d:c5: cf:3f:8d:f6:b1:17:01:62:75:1a:73:80:f9:3b:1a:b5:76:ec: d9:da:9d:d2:a6:6a:3e:5c:49:3a:49:89:c6:0a:20:f0:45:ed: c5:0b:74:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSgY4sdpAYuwcMXhUJK4IXKRSmXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwODEyMDY0OFoX DTI0MTEwNjEyMTE0OFowMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVC RDg2NTYyOTczMjlGN0VGNDc4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkQLNgxxjrardheIjv9zKcT4UyEWPYnSwn6fjy9WHdwjmZvA2dz40jPBPmu BpwBNbUF8py0ejnxZdQ3xpBzphL5NFEfzLh5+u8OIvrpJHMGKxcLb/RnZvHcbQP1 UltMyLF38XFpkFuVFI0wOXY416XVPMSgADUeK29YoRAXBWrIkkg4vfto/DLTTv7F 0F2is0cz/tb4pSh3X+wVHa2nXnC5PI2fHaqdkZjFFMFvgUlsf0Luqecr024mD7KC vm5r9KJkhzkKQmMtpqsCZI8ZGOKCNyCYYKwJReyOElo+Wde940SCLm1cf/o3zx1d ps/wX5UGzNJX3ez1GE5/qnCXMT0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP7YVd1QXSS2/iW9hlYpcyn370eFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjFkN2E3 LWExMWUtNDAwYi05MTcwLWM3OTdlZDg4ZDcwMi8wL0ZFRDg1NURENTA1RDI0QjZG RTI1QkQ4NjU2Mjk3MzI5RjdFRjQ3ODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnaYAwDQYJKoZIhvcNAQELBQADggEBAFBlsOYHVv4/bWv1gefbAdj9ShOET40A Q0gMorRweI5Sc85xK8qlmEgTXsvaizebJ/PQIAIoJgNzt/GUBgAetRKtlssKbFCq uhDFOP/56IuliMp6iQmxJiXbpsF66oyUMI9upvnjAqvqQTdcUgK0mwZ+fY5zRuoP Gar43F1pMO5YTg7biRaOTl9wBODP97dLbt2PcgqYOttyPcSxjoH4U2CJizTnhnKH Xhi21+0+n0mVK1Dr2cGL4FLu1xfdnNw+R83nhuYQh3dbQ2Fgk7taqZs5ErhQdgo9 xc8/jfaxFwFidRpzgPk7GrV27NnandKmaj5cSTpJicYKIPBF7cULdEQ= -----END CERTIFICATE-----Generated at Wed May 8 05:33:25 2024 by rpki-client on console-ams.rpki-client.org