$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer (raw, json) Hash identifier: wRM4qJGS92YVvHe/eP8j4mr7P4hfwjQYS22F2zi64vM= Subject key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E5E13F0FE4E3D0CE6EB7716142B1519BA002E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Apr 2024 11:20:24 +0000 Certificate not after: Tue 01 Apr 2025 11:25:24 +0000 Subordinate resources: IP: 103.91.32.0/22 IP: 123.253.252.0/22 IP: 2001:df0:f900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5e:13:f0:fe:4e:3d:0c:e6:eb:77:16:14:2b:15:19:ba:00:2e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 11:20:24 2024 GMT Not After : Apr 1 11:25:24 2025 GMT Subject: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:c6:10:5b:c3:34:a4:f7:fa:08:a3:14:81: 6c:5d:29:76:63:9c:cf:12:6f:2b:c8:85:ca:1a:fc: 00:d2:83:01:d3:98:c1:19:fb:ec:c5:19:fc:bc:5e: 9f:06:ac:f5:e3:75:4f:0a:c4:b8:a3:ce:95:85:16: 26:fa:8d:34:0b:61:25:52:aa:14:fc:b2:85:a9:91: bd:b8:d7:8a:e7:d3:eb:37:b1:90:75:ad:09:24:fb: 2f:10:d7:d5:d0:f6:ab:43:f6:95:4e:c0:fb:71:f3: 1e:ef:f6:84:fc:60:46:c8:47:3f:52:9b:24:9a:70: 3f:21:60:cb:83:b1:07:39:5b:9b:83:93:c6:8f:b2: 2b:00:89:2c:67:b1:b8:41:6e:b3:68:40:3f:5e:3e: 2f:35:7e:08:9d:06:0c:73:96:90:5b:6c:e4:c9:30: a9:2a:58:2e:f8:42:f9:7d:83:56:82:52:aa:60:2d: e4:68:c5:6e:85:06:7f:78:f8:bd:56:a6:02:52:ab: 11:bb:07:88:bd:88:9b:d4:94:4a:62:d7:3f:d4:a2: b2:46:0c:ba:fd:dd:85:20:b0:a7:c6:9c:ad:45:c4: 81:65:4c:9e:13:9d:45:f6:ed:cd:11:68:36:54:bb: b2:81:26:6d:0b:5f:9c:c4:58:63:9f:34:a5:34:e6: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.32.0/22 123.253.252.0/22 IPv6: 2001:df0:f900::/48 Signature Algorithm: sha256WithRSAEncryption 27:16:4d:f9:96:8e:68:c8:45:93:69:b3:ac:b4:66:c0:48:3e: 37:88:c2:1a:3e:4e:73:68:dc:75:cd:5d:9c:d8:f1:f4:3d:b0: 8a:bf:0c:af:3e:31:ec:63:7a:46:c6:ef:60:d6:68:f8:8f:cd: e6:54:fc:ea:67:fe:4c:d3:9a:d7:7e:b7:45:67:e9:a9:ca:78: 3e:2e:ce:1e:98:98:68:eb:7b:3d:e2:4f:ad:17:84:0d:46:59: 06:5b:62:6a:01:1b:4b:0a:30:58:3b:c7:ca:73:dd:a5:82:f7: c7:cd:f0:bf:81:d4:d9:c4:a1:2e:ea:a7:94:91:48:5a:0f:d2: 96:d7:a2:33:20:2c:9d:ab:dd:06:88:1e:e8:81:0d:f1:da:d1: 7f:e3:85:a5:d8:8b:8a:a4:b7:1e:e5:a5:79:91:2f:a9:7f:09: 06:61:12:3a:f3:63:51:50:a0:4d:d6:a0:da:e6:04:e9:e6:9a: 07:c9:df:c7:27:c2:a7:a9:f1:84:d9:71:f6:42:a9:2f:07:60: 9b:1b:14:c4:c1:dc:47:cf:b0:26:4c:01:d8:f5:4d:6e:7c:40: fb:9a:08:2c:fb:bb:a2:17:93:0a:0c:98:ea:17:d1:ef:a9:95: 4a:4c:e4:aa:1d:f2:ae:55:59:78:1a:47:be:25:c8:48:4b:bf: b8:80:0b:12 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUTl4T8P5OPQzm63cWFCsVGboALi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwMjExMjAyNFoX DTI1MDQwMTExMjUyNFowMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdB NjZBMDkyMTYzRjVEQUJENDVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEoxhBbwzSk9/oIoxSBbF0pdmOczxJvK8iFyhr8ANKDAdOYwRn77MUZ/Lxe nwas9eN1TwrEuKPOlYUWJvqNNAthJVKqFPyyhamRvbjXiufT6zexkHWtCST7LxDX 1dD2q0P2lU7A+3HzHu/2hPxgRshHP1KbJJpwPyFgy4OxBzlbm4OTxo+yKwCJLGex uEFus2hAP14+LzV+CJ0GDHOWkFts5MkwqSpYLvhC+X2DVoJSqmAt5GjFboUGf3j4 vVamAlKrEbsHiL2Im9SUSmLXP9SiskYMuv3dhSCwp8acrUXEgWVMnhOdRfbtzRFo NlS7soEmbQtfnMRYY580pTTmHnMCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC6DsXk/ouGKQTemagkhY/XavUXwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZWNiMDAy LTI0YTQtNDk1NS1hMzMzLTAwMmZkYjc0NTUzZi8wLzJFODNCMTc5M0ZBMkUxOEE0 MTM3QTY2QTA5MjE2M0Y1REFCRDQ1RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnWyADBAJ7/fwwDwQCAAIwCQMHACABDfD5ADANBgkqhkiG9w0BAQsFAAOCAQEA JxZN+ZaOaMhFk2mzrLRmwEg+N4jCGj5Oc2jcdc1dnNjx9D2wir8Mrz4x7GN6Rsbv YNZo+I/N5lT86mf+TNOa1363RWfpqcp4Pi7OHpiYaOt7PeJPrReEDUZZBltiagEb SwowWDvHynPdpYL3x83wv4HU2cShLuqnlJFIWg/SlteiMyAsnavdBoge6IEN8drR f+OFpdiLiqS3HuWleZEvqX8JBmESOvNjUVCgTdag2uYE6eaaB8nfxyfCp6nxhNlx 9kKpLwdgmxsUxMHcR8+wJkwB2PVNbnxA+5oILPu7oheTCgyY6hfR76mVSkzkqh3y rlVZeBpHviXISEu/uIALEg== -----END CERTIFICATE-----Generated at Wed May 8 10:06:46 2024 by rpki-client on console-ams.rpki-client.org