$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer (raw, json) Hash identifier: 9y2ujc47e8YKTFK0bFnDtDgBfIMAz++D5wThetO6jEM= Subject key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07A99518267CFCF570940722907D1F67497884F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft caRepository: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Sep 2023 11:37:23 +0000 Certificate not after: Tue 24 Sep 2024 11:42:23 +0000 Subordinate resources: IP: 103.166.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a9:95:18:26:7c:fc:f5:70:94:07:22:90:7d:1f:67:49:78:84:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 11:37:23 2023 GMT Not After : Sep 24 11:42:23 2024 GMT Subject: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:ec:8f:1c:4d:08:2c:15:3b:53:ed:ab:96: f8:f0:65:2b:84:f2:94:8a:a8:6e:90:4d:3f:00:75: 67:b3:a9:6f:54:eb:e0:b0:b9:5f:0a:09:55:60:74: da:1b:db:87:df:81:46:6f:45:1e:f4:d5:b5:14:fe: 55:ba:24:57:1f:a2:10:9f:b2:3c:f6:51:c5:cf:45: b1:b6:78:03:ad:34:c1:dc:76:70:db:25:65:f4:ec: 51:46:6e:89:be:dc:80:df:fa:dd:df:34:87:fb:af: b1:08:0c:e4:af:25:43:43:50:8f:47:2c:e6:d3:66: e8:16:e0:a5:b2:dd:64:4c:90:ae:26:2e:da:cd:3e: 85:1b:d4:d5:3c:8f:76:f1:80:bf:25:0c:ac:5d:78: 5d:83:ef:f5:49:dc:ad:f9:25:f6:ca:cf:5d:d7:df: 52:fe:fe:3f:ac:29:3a:81:e0:92:12:04:ef:96:d9: d0:ee:e8:fa:74:3e:39:09:33:1c:28:e5:f1:ec:5d: c3:76:f5:99:c2:d6:3c:07:4e:6e:36:19:b7:d1:dc: 34:e2:c3:42:6a:5e:b3:f6:eb:85:e3:18:e8:27:0e: c6:4b:c3:c5:d2:14:30:37:e7:93:09:59:ef:49:6c: 65:06:a2:8f:85:02:35:f7:a7:1e:5b:8f:d3:a7:8d: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.8.0/23 Signature Algorithm: sha256WithRSAEncryption 31:9a:21:36:1a:40:0f:3b:dd:42:d5:45:d4:4a:64:e7:5a:7c: 04:ca:54:21:4c:d8:2a:9b:3c:1e:f8:64:b2:26:fe:75:27:00: f2:eb:09:69:4e:ed:db:b9:cb:4d:01:8d:c4:f7:94:8e:ae:7d: 0c:12:30:41:2d:1a:8b:2d:f8:89:84:97:45:6e:78:27:5d:38: 52:66:64:17:19:97:14:ef:95:b7:3a:2c:63:15:39:b4:c3:6d: b3:f9:b0:49:32:c2:7e:74:00:df:9f:a3:f9:44:a6:83:83:a7: c9:af:62:25:72:25:e0:03:c9:cb:e8:30:d6:6d:c1:b9:e9:0e: e0:72:74:a1:cb:cd:de:39:0f:cb:7f:83:f8:7d:03:ae:dc:dd: 6f:06:26:f0:5e:24:47:d2:64:d4:79:f0:cf:7c:b4:a9:f0:05: 2c:75:03:c7:b2:70:be:73:5d:d2:f2:0a:2f:6f:c7:ed:29:c5: 59:e4:b4:df:6e:5c:4b:6c:a4:46:1b:16:2d:c5:7e:59:f0:e6: ee:6e:69:ee:fb:b8:03:d8:65:3c:4b:bc:5b:43:b0:fa:e1:26: 2b:9b:50:7a:3e:9c:59:f1:dd:62:7a:8d:bf:2f:be:0b:be:21: ee:a0:86:01:36:a6:7d:3d:84:77:c1:52:34:7e:92:eb:34:1f: 6d:a5:c6:ca -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUB6mVGCZ8/PVwlAcikH0fZ0l4hPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNjExMzcyM1oX DTI0MDkyNDExNDIyM1owMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2 Q0U2ODI4QUMzMDIxN0U2M0JBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrC7I8cTQgsFTtT7auW+PBlK4TylIqobpBNPwB1Z7Opb1Tr4LC5XwoJVWB0 2hvbh9+BRm9FHvTVtRT+VbokVx+iEJ+yPPZRxc9FsbZ4A600wdx2cNslZfTsUUZu ib7cgN/63d80h/uvsQgM5K8lQ0NQj0cs5tNm6BbgpbLdZEyQriYu2s0+hRvU1TyP dvGAvyUMrF14XYPv9Uncrfkl9srPXdffUv7+P6wpOoHgkhIE75bZ0O7o+nQ+OQkz HCjl8exdw3b1mcLWPAdObjYZt9HcNOLDQmpes/brheMY6CcOxkvDxdIUMDfnkwlZ 70lsZQaij4UCNfenHluP06eNOEMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCHkb+4DoaTLlE9s5oKKwwIX5juhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4MjIxMmMy LTNkNjgtNDg2Ny1iOTljLWZjNWNmNGQwZGJmMS8wLzIxRTQ2RkVFMDNBMUE0Q0I5 NDRGNkNFNjgyOEFDMzAyMTdFNjNCQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpggwDQYJKoZIhvcNAQELBQADggEBADGaITYaQA873ULVRdRKZOdafATKVCFM 2CqbPB74ZLIm/nUnAPLrCWlO7du5y00BjcT3lI6ufQwSMEEtGost+ImEl0VueCdd OFJmZBcZlxTvlbc6LGMVObTDbbP5sEkywn50AN+fo/lEpoODp8mvYiVyJeADycvo MNZtwbnpDuBydKHLzd45D8t/g/h9A67c3W8GJvBeJEfSZNR58M98tKnwBSx1A8ey cL5zXdLyCi9vx+0pxVnktN9uXEtspEYbFi3Fflnw5u5uae77uAPYZTxLvFtDsPrh JiubUHo+nFnx3WJ6jb8vvgu+Ie6ghgE2pn09hHfBUjR+kus0H22lxso= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org