$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer (raw, json) Hash identifier: upaey5tXi4KaYA4+Hl7FeKchsFOBx9q+/d1GG1T/fhc= Subject key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D0D6F04C5C6AB1483D7A21B7D7C2876D974C07A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft caRepository: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Aug 2024 16:02:24 +0000 Certificate not after: Tue 26 Aug 2025 16:07:24 +0000 Subordinate resources: IP: 103.166.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0d:6f:04:c5:c6:ab:14:83:d7:a2:1b:7d:7c:28:76:d9:74:c0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 27 16:02:24 2024 GMT Not After : Aug 26 16:07:24 2025 GMT Subject: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:ec:8f:1c:4d:08:2c:15:3b:53:ed:ab:96: f8:f0:65:2b:84:f2:94:8a:a8:6e:90:4d:3f:00:75: 67:b3:a9:6f:54:eb:e0:b0:b9:5f:0a:09:55:60:74: da:1b:db:87:df:81:46:6f:45:1e:f4:d5:b5:14:fe: 55:ba:24:57:1f:a2:10:9f:b2:3c:f6:51:c5:cf:45: b1:b6:78:03:ad:34:c1:dc:76:70:db:25:65:f4:ec: 51:46:6e:89:be:dc:80:df:fa:dd:df:34:87:fb:af: b1:08:0c:e4:af:25:43:43:50:8f:47:2c:e6:d3:66: e8:16:e0:a5:b2:dd:64:4c:90:ae:26:2e:da:cd:3e: 85:1b:d4:d5:3c:8f:76:f1:80:bf:25:0c:ac:5d:78: 5d:83:ef:f5:49:dc:ad:f9:25:f6:ca:cf:5d:d7:df: 52:fe:fe:3f:ac:29:3a:81:e0:92:12:04:ef:96:d9: d0:ee:e8:fa:74:3e:39:09:33:1c:28:e5:f1:ec:5d: c3:76:f5:99:c2:d6:3c:07:4e:6e:36:19:b7:d1:dc: 34:e2:c3:42:6a:5e:b3:f6:eb:85:e3:18:e8:27:0e: c6:4b:c3:c5:d2:14:30:37:e7:93:09:59:ef:49:6c: 65:06:a2:8f:85:02:35:f7:a7:1e:5b:8f:d3:a7:8d: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.8.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:31:9d:1f:4f:96:f2:63:5c:54:ad:b3:18:a0:21:18:91:fe: f1:28:6f:fa:98:ac:c9:45:3e:a1:bf:b7:46:cc:be:70:7b:58: 7e:79:1b:74:0b:4c:61:eb:c9:33:76:75:fc:5c:f2:36:bf:27: 93:78:52:9f:c6:8f:b2:29:b6:1e:6f:3d:90:f3:23:a9:68:e1: 6d:93:20:fc:83:ab:3a:81:1a:f9:84:c3:2a:97:b1:be:72:f9: 04:74:da:da:85:9d:9c:cb:61:fc:6e:ea:a2:54:a5:32:bf:b8: 30:1f:b3:bc:64:4c:21:89:c8:10:b7:22:2b:42:86:14:d9:fd: 7e:63:31:58:13:58:1c:e5:61:35:4d:64:65:78:d1:eb:87:e0: 00:1a:9a:21:7b:a6:47:6f:41:f8:e4:ce:6f:e4:3d:2b:f2:fe: ac:8c:6d:29:f1:17:ea:07:25:a5:dd:83:c8:f0:1a:df:98:aa: 69:32:10:52:37:3e:e8:15:c7:c7:8b:62:4d:9a:04:b7:17:61: 05:c7:3a:65:9d:ac:79:c9:68:a5:0f:d5:da:d3:bd:19:29:29: 2a:ec:1d:c4:bb:e1:23:88:dc:5b:8e:5f:50:50:77:c6:f0:8d: 97:bf:a0:53:37:07:b3:b6:31:f6:6f:b3:d8:c0:dd:04:3c:09: 58:df:6f:79 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDQ1vBMXGqxSD16IbfXwodtl0wHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyNzE2MDIyNFoX DTI1MDgyNjE2MDcyNFowMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2 Q0U2ODI4QUMzMDIxN0U2M0JBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrC7I8cTQgsFTtT7auW+PBlK4TylIqobpBNPwB1Z7Opb1Tr4LC5XwoJVWB0 2hvbh9+BRm9FHvTVtRT+VbokVx+iEJ+yPPZRxc9FsbZ4A600wdx2cNslZfTsUUZu ib7cgN/63d80h/uvsQgM5K8lQ0NQj0cs5tNm6BbgpbLdZEyQriYu2s0+hRvU1TyP dvGAvyUMrF14XYPv9Uncrfkl9srPXdffUv7+P6wpOoHgkhIE75bZ0O7o+nQ+OQkz HCjl8exdw3b1mcLWPAdObjYZt9HcNOLDQmpes/brheMY6CcOxkvDxdIUMDfnkwlZ 70lsZQaij4UCNfenHluP06eNOEMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCHkb+4DoaTLlE9s5oKKwwIX5juhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4MjIxMmMy LTNkNjgtNDg2Ny1iOTljLWZjNWNmNGQwZGJmMS8wLzIxRTQ2RkVFMDNBMUE0Q0I5 NDRGNkNFNjgyOEFDMzAyMTdFNjNCQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpggwDQYJKoZIhvcNAQELBQADggEBAEsxnR9PlvJjXFStsxigIRiR/vEob/qY rMlFPqG/t0bMvnB7WH55G3QLTGHryTN2dfxc8ja/J5N4Up/Gj7Ipth5vPZDzI6lo 4W2TIPyDqzqBGvmEwyqXsb5y+QR02tqFnZzLYfxu6qJUpTK/uDAfs7xkTCGJyBC3 IitChhTZ/X5jMVgTWBzlYTVNZGV40euH4AAamiF7pkdvQfjkzm/kPSvy/qyMbSnx F+oHJaXdg8jwGt+YqmkyEFI3PugVx8eLYk2aBLcXYQXHOmWdrHnJaKUP1drTvRkp KSrsHcS74SOI3FuOX1BQd8bwjZe/oFM3B7O2MfZvs9jA3QQ8CVjfb3k= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org