$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer (raw, json) Hash identifier: 4cAT2R7MP4S4vPjytNIe7YWqnBlabTllXPnqIv5n6oM= Subject key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5C2E6E44F61389691BD5937D7C70FAC88079E2EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft caRepository: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Sep 2024 21:37:08 +0000 Certificate not after: Thu 18 Sep 2025 21:42:08 +0000 Subordinate resources: IP: 103.190.112.0/23 IP: 2001:df0:f9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2e:6e:44:f6:13:89:69:1b:d5:93:7d:7c:70:fa:c8:80:79:e2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 21:37:08 2024 GMT Not After : Sep 18 21:42:08 2025 GMT Subject: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:e4:2f:d0:3d:19:5e:b2:d4:25:0c:cb:3e: a4:b4:b3:dc:cd:e7:19:f1:f6:af:20:10:7d:7d:6a: 3b:41:7c:4b:43:88:ae:29:be:78:dd:f9:28:21:95: a0:a8:f3:ae:8b:35:a1:fa:a4:cc:03:97:89:b2:7f: 12:f8:8f:d6:8f:85:19:48:5d:58:27:c7:fa:a0:6b: 4d:9e:46:16:16:78:00:55:90:bc:a7:4c:71:20:40: 0f:2f:e1:0a:14:14:bd:0f:16:a3:2a:26:b5:c5:ed: bd:8b:88:99:98:99:9f:38:bb:da:9e:f7:f4:85:d2: e9:7d:ee:ef:3d:e5:1b:e5:68:f3:3d:6a:78:07:9c: 14:a9:b1:ec:0a:89:97:65:1a:1d:c0:92:b2:fc:7c: 78:ca:1b:a1:1d:33:0f:97:2d:8c:74:f6:51:ae:45: 2c:9b:f5:40:36:1a:67:68:d7:a2:1d:e8:4b:66:d8: 10:56:52:74:3e:1a:8a:49:4e:4e:4d:a1:13:3e:7d: 73:22:2c:3f:14:bc:4e:78:0f:0b:d9:73:11:e7:c5: 22:ca:a4:1a:d6:75:aa:71:85:f7:7c:8c:89:b0:31: f2:e0:d9:36:5f:cc:28:fb:dd:8b:0a:42:6a:26:4d: 4d:36:43:ce:d7:bf:f7:aa:24:40:4b:1e:b4:ae:bf: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.112.0/23 IPv6: 2001:df0:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:27:11:9f:94:34:18:a1:0c:a3:b5:08:b2:ef:ff:fd:cf:a8: 31:63:92:c2:81:1f:18:ad:df:de:25:0b:1a:27:82:1a:6e:61: c4:54:5b:0e:17:18:f3:0c:e5:c4:f5:5b:14:62:19:6c:76:0e: 66:ab:e9:25:a2:1e:9a:29:62:2d:21:89:8f:28:23:01:37:00: ee:0d:64:e4:93:32:1c:8e:e8:6b:c0:1f:b0:d8:41:31:24:29: 38:80:7d:ca:2a:04:39:e9:fc:dc:98:f1:d1:ef:04:51:7c:27: eb:cb:ef:57:88:af:1f:a0:c2:b8:94:d8:55:41:e6:79:03:87: 29:93:7e:40:83:ed:f2:7b:51:09:d0:8d:61:e4:f3:cf:53:cf: 97:bc:47:68:39:20:66:1d:b2:dc:ac:88:4a:a5:6a:32:41:70: 3f:bc:ef:a8:9a:e5:60:a3:a3:93:d4:89:53:38:39:79:4a:b8: dd:80:30:42:1c:a8:79:b3:b5:63:04:7f:9f:fd:90:c6:99:dc: 8b:9b:93:19:14:94:68:91:d6:5e:c0:c5:73:c3:1e:a8:89:97: 74:cd:1c:18:d6:31:e3:4b:96:bf:b1:38:a6:e5:ad:ca:a3:c6: e4:87:18:2c:ed:be:6b:ac:88:e4:ff:68:2f:f2:57:e6:1e:d1: c7:a4:7c:27 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXC5uRPYTiWkb1ZN9fHD6yIB54uwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxOTIxMzcwOFoX DTI1MDkxODIxNDIwOFowMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJC RDgzN0ExQTBBQ0RCN0UwQkEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUF5C/QPRlestQlDMs+pLSz3M3nGfH2ryAQfX1qO0F8S0OIrim+eN35KCGV oKjzros1ofqkzAOXibJ/EviP1o+FGUhdWCfH+qBrTZ5GFhZ4AFWQvKdMcSBADy/h ChQUvQ8WoyomtcXtvYuImZiZnzi72p739IXS6X3u7z3lG+Vo8z1qeAecFKmx7AqJ l2UaHcCSsvx8eMoboR0zD5ctjHT2Ua5FLJv1QDYaZ2jXoh3oS2bYEFZSdD4aiklO Tk2hEz59cyIsPxS8TngPC9lzEefFIsqkGtZ1qnGF93yMibAx8uDZNl/MKPvdiwpC aiZNTTZDzte/96okQEsetK6/Np0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzh4RFG4lHQzVK9g3oaCs234LoMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNTE2YTdh LTQxOTUtNDRiMy1hMjRlLWNmOGVkNTc4ZDc5MS8wLzBDRTFFMTExNDZFMjUxRDBD RDUyQkQ4MzdBMUEwQUNEQjdFMEJBMEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvnAwDwQCAAIwCQMHACABDfD5wDANBgkqhkiG9w0BAQsFAAOCAQEAlCcRn5Q0 GKEMo7UIsu///c+oMWOSwoEfGK3f3iULGieCGm5hxFRbDhcY8wzlxPVbFGIZbHYO ZqvpJaIemiliLSGJjygjATcA7g1k5JMyHI7oa8AfsNhBMSQpOIB9yioEOen83Jjx 0e8EUXwn68vvV4ivH6DCuJTYVUHmeQOHKZN+QIPt8ntRCdCNYeTzz1PPl7xHaDkg Zh2y3KyISqVqMkFwP7zvqJrlYKOjk9SJUzg5eUq43YAwQhyoebO1YwR/n/2Qxpnc i5uTGRSUaJHWXsDFc8MeqImXdM0cGNYx40uWv7E4puWtyqPG5IcYLO2+a6yI5P9o L/JX5h7Rx6R8Jw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org