$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer (raw, json) Hash identifier: xVwBgTJAjI4YIHzpS8xh5PUvUyUvhk/grIBzMYGz3L4= Subject key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53E090E042D819357A7DE756CF2EEF5B51A01767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft caRepository: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Oct 2023 15:19:31 +0000 Certificate not after: Thu 17 Oct 2024 15:24:31 +0000 Subordinate resources: IP: 103.190.112.0/23 IP: 2001:df0:f9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e0:90:e0:42:d8:19:35:7a:7d:e7:56:cf:2e:ef:5b:51:a0:17:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 19 15:19:31 2023 GMT Not After : Oct 17 15:24:31 2024 GMT Subject: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:e4:2f:d0:3d:19:5e:b2:d4:25:0c:cb:3e: a4:b4:b3:dc:cd:e7:19:f1:f6:af:20:10:7d:7d:6a: 3b:41:7c:4b:43:88:ae:29:be:78:dd:f9:28:21:95: a0:a8:f3:ae:8b:35:a1:fa:a4:cc:03:97:89:b2:7f: 12:f8:8f:d6:8f:85:19:48:5d:58:27:c7:fa:a0:6b: 4d:9e:46:16:16:78:00:55:90:bc:a7:4c:71:20:40: 0f:2f:e1:0a:14:14:bd:0f:16:a3:2a:26:b5:c5:ed: bd:8b:88:99:98:99:9f:38:bb:da:9e:f7:f4:85:d2: e9:7d:ee:ef:3d:e5:1b:e5:68:f3:3d:6a:78:07:9c: 14:a9:b1:ec:0a:89:97:65:1a:1d:c0:92:b2:fc:7c: 78:ca:1b:a1:1d:33:0f:97:2d:8c:74:f6:51:ae:45: 2c:9b:f5:40:36:1a:67:68:d7:a2:1d:e8:4b:66:d8: 10:56:52:74:3e:1a:8a:49:4e:4e:4d:a1:13:3e:7d: 73:22:2c:3f:14:bc:4e:78:0f:0b:d9:73:11:e7:c5: 22:ca:a4:1a:d6:75:aa:71:85:f7:7c:8c:89:b0:31: f2:e0:d9:36:5f:cc:28:fb:dd:8b:0a:42:6a:26:4d: 4d:36:43:ce:d7:bf:f7:aa:24:40:4b:1e:b4:ae:bf: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.112.0/23 IPv6: 2001:df0:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:a7:82:10:ce:d7:26:71:05:72:11:67:6a:14:51:e8:d1:83: b6:96:d5:ea:e3:85:b8:e7:63:f2:73:eb:02:20:a6:f2:a3:1c: 04:d1:3d:44:63:89:cb:7b:53:0e:4f:5d:f7:1e:66:b1:17:1e: 67:c8:15:4e:5f:80:ff:a1:21:42:6c:23:3a:03:be:2e:94:b9: c2:5a:ff:18:05:11:18:ae:e1:de:c5:90:eb:12:87:08:3f:3e: 24:71:c7:bd:f5:d2:88:92:6d:c4:2b:55:7c:e5:fc:8b:35:13: c2:41:1c:84:6a:c7:ba:7c:4d:2d:a0:f0:57:10:38:17:26:20: 6d:07:2a:51:76:ce:47:6a:2d:e6:c2:d8:77:7d:f7:d0:9b:c9: c4:6e:b1:68:6b:9d:08:48:94:4f:79:cc:12:46:2d:4c:a2:c3: f4:cb:93:d9:c3:5f:76:f9:fd:55:4f:e4:55:e2:08:19:ee:94: cf:55:e0:22:a0:41:e2:8e:25:5b:03:b7:66:8c:75:6b:f2:f3: 8c:99:51:2e:de:54:be:aa:e3:0e:14:ad:7b:6a:51:49:7e:d5: 3e:82:f2:9e:99:cd:a0:75:e5:7a:fa:81:0e:ad:9e:36:15:5f: 2e:c4:0c:b2:ad:29:a5:97:42:f7:37:d6:4a:48:e3:cb:ef:78: 55:8b:05:74 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUU+CQ4ELYGTV6fedWzy7vW1GgF2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxOTE1MTkzMVoX DTI0MTAxNzE1MjQzMVowMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJC RDgzN0ExQTBBQ0RCN0UwQkEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUF5C/QPRlestQlDMs+pLSz3M3nGfH2ryAQfX1qO0F8S0OIrim+eN35KCGV oKjzros1ofqkzAOXibJ/EviP1o+FGUhdWCfH+qBrTZ5GFhZ4AFWQvKdMcSBADy/h ChQUvQ8WoyomtcXtvYuImZiZnzi72p739IXS6X3u7z3lG+Vo8z1qeAecFKmx7AqJ l2UaHcCSsvx8eMoboR0zD5ctjHT2Ua5FLJv1QDYaZ2jXoh3oS2bYEFZSdD4aiklO Tk2hEz59cyIsPxS8TngPC9lzEefFIsqkGtZ1qnGF93yMibAx8uDZNl/MKPvdiwpC aiZNTTZDzte/96okQEsetK6/Np0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzh4RFG4lHQzVK9g3oaCs234LoMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNTE2YTdh LTQxOTUtNDRiMy1hMjRlLWNmOGVkNTc4ZDc5MS8wLzBDRTFFMTExNDZFMjUxRDBD RDUyQkQ4MzdBMUEwQUNEQjdFMEJBMEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvnAwDwQCAAIwCQMHACABDfD5wDANBgkqhkiG9w0BAQsFAAOCAQEALaeCEM7X JnEFchFnahRR6NGDtpbV6uOFuOdj8nPrAiCm8qMcBNE9RGOJy3tTDk9d9x5msRce Z8gVTl+A/6EhQmwjOgO+LpS5wlr/GAURGK7h3sWQ6xKHCD8+JHHHvfXSiJJtxCtV fOX8izUTwkEchGrHunxNLaDwVxA4FyYgbQcqUXbOR2ot5sLYd3330JvJxG6xaGud CEiUT3nMEkYtTKLD9MuT2cNfdvn9VU/kVeIIGe6Uz1XgIqBB4o4lWwO3Zox1a/Lz jJlRLt5UvqrjDhSte2pRSX7VPoLynpnNoHXlevqBDq2eNhVfLsQMsq0ppZdC9zfW Skjjy+94VYsFdA== -----END CERTIFICATE-----Generated at Wed May 8 21:02:09 2024 by rpki-client on console-fra.rpki-client.org