$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer File: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer (raw, json) Hash identifier: UGx38myGCVKRU07Xnd6JIWtFFiGJ/7fwsNmLSerKZbw= Subject key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22C175FA8876EBA9D2F80EF26C24776B58064C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft caRepository: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Sep 2023 08:47:59 +0000 Certificate not after: Wed 25 Sep 2024 08:52:59 +0000 Subordinate resources: IP: 103.5.50.0/23 IP: 103.20.90.0/23 IP: 163.53.192.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c1:75:fa:88:76:eb:a9:d2:f8:0e:f2:6c:24:77:6b:58:06:4c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 27 08:47:59 2023 GMT Not After : Sep 25 08:52:59 2024 GMT Subject: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:b5:c0:70:bd:86:37:99:be:8d:70:d7:63: ea:83:43:e9:2a:9b:32:fd:29:74:54:40:04:90:d9: cf:00:f3:a1:4c:6b:33:7c:b4:88:1a:d5:c5:ad:40: 68:a9:35:f7:b7:17:ff:16:28:f6:f4:e7:90:ad:c6: 1f:4c:6f:6e:b1:59:60:1f:b4:d6:a2:f6:ab:57:86: b8:d6:47:7b:79:ce:c1:e7:f8:12:8d:29:34:9e:7b: ec:f9:bb:04:ec:ad:b2:87:66:dc:37:56:8e:33:4d: 55:ca:42:d9:e1:56:f5:35:4e:fe:3b:f7:c1:24:25: d7:91:18:95:00:bb:73:13:6d:a8:3d:6b:a1:1a:44: 81:fc:d4:0e:d4:09:ab:8e:b8:7b:45:23:7c:34:12: 7d:b6:14:69:d3:c7:1e:2f:48:f0:2d:61:ce:b2:7d: b2:da:01:dc:cf:61:22:fb:0c:ff:c5:1e:84:d1:dd: 0b:89:09:8e:01:e8:12:79:43:26:96:98:89:6c:86: 70:f8:ac:74:48:13:22:91:8f:3c:7e:87:c4:91:0f: 66:e3:26:a2:48:00:cd:11:6b:73:68:94:f0:c9:93: 39:5e:77:80:f7:39:7d:e8:9a:8d:14:0e:17:24:71: fb:d7:2d:1f:c0:b9:c6:b3:71:67:cd:95:ba:0b:77: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.5.50.0/23 103.20.90.0/23 163.53.192.0/22 Signature Algorithm: sha256WithRSAEncryption 13:8c:68:67:80:dd:d0:3b:9f:9d:0f:b5:44:39:e8:01:dd:76: 2c:cd:b7:c9:0f:53:d7:89:12:74:55:7e:d1:04:c7:24:59:04: fa:a1:b0:f9:ae:8b:96:42:cc:96:39:1b:69:08:4c:7f:0d:73: e6:65:8c:04:c1:e9:be:bc:19:a2:c8:19:6f:6f:7f:98:da:b7: 2a:c9:8d:f1:4a:90:0b:d3:22:ca:24:d1:08:fc:8c:fd:70:72: c7:c9:01:57:4a:fa:16:1d:21:37:d1:cb:b0:02:80:79:78:d0: f8:7a:b8:39:7c:ba:10:13:54:f8:39:4e:13:33:ef:df:dc:db: 3a:34:fe:40:4f:c1:0d:5d:ad:6d:5f:ff:c4:4d:fa:e6:6b:f3: 9a:d7:48:fd:69:c5:fd:07:df:95:eb:35:55:2d:85:08:ee:42: 92:ad:ac:38:4d:66:29:f5:6f:cc:f7:60:06:b8:a3:dd:99:63: fd:f7:3f:63:e4:22:97:1a:ab:d1:1f:8f:47:52:ba:14:7d:3f: a6:a3:4d:51:d8:73:77:c9:7b:71:c6:e5:2f:38:44:ae:bc:86: f2:41:70:85:37:ec:16:08:7e:63:54:76:c8:0c:74:ab:63:91: 41:d6:a8:9a:4c:1b:f0:e8:30:cb:d4:9c:00:68:a6:0a:9d:91: 72:be:79:02 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUIsF1+oh266nS+A7ybCR3a1gGTJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNzA4NDc1OVoX DTI0MDkyNTA4NTI1OVowMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYx MzI4MENDQUYyNkU5OERCRUI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKSOtcBwvYY3mb6NcNdj6oND6SqbMv0pdFRABJDZzwDzoUxrM3y0iBrVxa1A aKk197cX/xYo9vTnkK3GH0xvbrFZYB+01qL2q1eGuNZHe3nOwef4Eo0pNJ577Pm7 BOytsodm3DdWjjNNVcpC2eFW9TVO/jv3wSQl15EYlQC7cxNtqD1roRpEgfzUDtQJ q464e0UjfDQSfbYUadPHHi9I8C1hzrJ9stoB3M9hIvsM/8UehNHdC4kJjgHoEnlD JpaYiWyGcPisdEgTIpGPPH6HxJEPZuMmokgAzRFrc2iU8MmTOV53gPc5feiajRQO FyRx+9ctH8C5xrNxZ82Vugt3F5MCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOWpB8TsbabZNCYTKAzK8m6Y2+uYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1 LTM4MGQtNDc3ZS1iZjI1LTBhZjI5MDI2YmQ3MC8wL0U1QTkwN0M0RUM2REE2RDkz NDI2MTMyODBDQ0FGMjZFOThEQkVCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAFnBTIDBAFnFFoDBAKjNcAwDQYJKoZIhvcNAQELBQADggEBABOMaGeA3dA7n50P tUQ56AHddizNt8kPU9eJEnRVftEExyRZBPqhsPmui5ZCzJY5G2kITH8Nc+ZljATB 6b68GaLIGW9vf5jatyrJjfFKkAvTIsok0Qj8jP1wcsfJAVdK+hYdITfRy7ACgHl4 0Ph6uDl8uhATVPg5ThMz79/c2zo0/kBPwQ1drW1f/8RN+uZr85rXSP1pxf0H35Xr NVUthQjuQpKtrDhNZin1b8z3YAa4o92ZY/33P2PkIpcaq9Efj0dSuhR9P6ajTVHY c3fJe3HG5S84RK68hvJBcIU37BYIfmNUdsgMdKtjkUHWqJpMG/DoMMvUnABopgqd kXK+eQI= -----END CERTIFICATE-----Generated at Thu Apr 25 10:23:11 2024 by rpki-client on console-fra.rpki-client.org