$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer (raw, json) Hash identifier: dQKue0ekSkSmywaRuX+72NNZKt0l7uK2/YyLurNU0IY= Subject key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 798F0170C3A81E3F41C3979DB4FC88B0C702C74B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Oct 2024 14:00:17 +0000 Certificate not after: Fri 10 Oct 2025 14:05:17 +0000 Subordinate resources: IP: 103.42.242.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8f:01:70:c3:a8:1e:3f:41:c3:97:9d:b4:fc:88:b0:c7:02:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 11 14:00:17 2024 GMT Not After : Oct 10 14:05:17 2025 GMT Subject: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:30:30:de:28:64:81:ad:80:cc:5c:7f:5b: 47:a1:33:5a:d4:98:d9:b0:fb:09:b0:a8:d8:5c:41: 75:f7:14:c8:3e:b9:9b:8d:8c:cb:8a:9e:3a:68:5f: 43:0a:aa:bb:ca:91:d2:1c:4f:56:50:91:b2:db:d9: 80:19:c6:45:af:b1:0d:36:68:a2:80:80:3a:bd:83: 91:9c:49:79:00:9b:9a:76:7e:f8:25:69:5b:bd:6b: 08:bb:f5:69:32:0c:69:b8:e8:e7:37:78:13:7d:f0: bb:d8:0e:cc:2f:d4:21:af:b0:e3:5a:7d:ad:0e:c5: 6c:67:a2:cd:b9:10:4d:24:e9:de:77:72:88:3a:ec: 4d:de:e6:f2:fa:d8:77:21:fd:5e:e5:fb:d7:2e:11: d8:0f:01:05:58:70:fe:33:c2:1c:06:fd:32:a1:96: 37:ef:20:8c:64:7d:f7:5c:c9:57:ee:4f:80:e1:1d: b5:62:55:c6:ab:94:59:7a:a5:99:0b:22:ad:78:6a: 91:fc:ae:b4:91:b4:2e:d4:22:b5:20:81:d5:2f:e5: bc:de:97:f4:01:eb:57:cf:c8:6b:2b:67:2d:b2:cf: 90:b5:5e:19:16:72:f8:a8:d1:f4:cf:b8:30:a0:e4: 8e:2d:64:bb:9f:d3:42:c8:49:42:da:a7:1a:95:e7: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:62:62:f1:ad:9e:20:91:63:9e:8a:b2:3a:73:93:98:7d:22: 7b:03:51:5d:66:ec:c4:ff:61:78:0a:39:31:2a:b6:31:ed:4d: 1c:e8:ae:e0:63:e7:d4:7b:76:b8:5a:86:84:22:7d:c2:64:af: 98:c9:07:ee:95:16:86:1b:ae:3b:21:d0:bd:cf:59:91:bd:eb: 55:ff:7d:66:90:7a:9e:cf:01:c0:22:88:c4:d7:f5:57:4d:d6: 7e:48:3d:1b:7b:1b:a6:11:01:03:93:08:67:29:01:e1:ac:34: 1d:a5:ed:25:88:e9:1c:15:d3:b2:05:62:1b:f1:ac:e9:54:2d: 71:9f:a4:74:b3:4f:cc:40:67:f8:e1:67:b4:9e:40:89:37:66: cd:7a:22:ec:24:f6:ea:a9:47:17:9d:4a:dc:e1:57:33:0c:8d: a9:b6:7c:7a:d5:ac:54:cf:9d:d2:17:86:90:cd:18:0e:da:ef: 7f:c3:e1:41:bd:f4:cd:81:52:6e:42:64:9d:40:af:53:93:5a: ab:2b:b8:4f:aa:23:89:36:c3:c4:76:24:16:f8:15:1b:1b:21: 31:fe:1c:56:cc:36:97:7c:a0:4d:e9:fd:36:64:41:92:ec:30: c8:2c:36:0d:9e:88:2f:6b:7b:35:7d:89:50:01:dc:17:77:91: d9:78:a8:72 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeY8BcMOoHj9Bw5edtPyIsMcCx0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxMTE0MDAxN1oX DTI1MTAxMDE0MDUxN1owMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlD QTlGREQzMkE2NDNDODhFMDVCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNEMDDeKGSBrYDMXH9bR6EzWtSY2bD7CbCo2FxBdfcUyD65m42My4qeOmhf Qwqqu8qR0hxPVlCRstvZgBnGRa+xDTZoooCAOr2DkZxJeQCbmnZ++CVpW71rCLv1 aTIMabjo5zd4E33wu9gOzC/UIa+w41p9rQ7FbGeizbkQTSTp3ndyiDrsTd7m8vrY dyH9XuX71y4R2A8BBVhw/jPCHAb9MqGWN+8gjGR991zJV+5PgOEdtWJVxquUWXql mQsirXhqkfyutJG0LtQitSCB1S/lvN6X9AHrV8/IaytnLbLPkLVeGRZy+KjR9M+4 MKDkji1ku5/TQshJQtqnGpXnaqUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC6LrH6BkR8IoYnKn90ypkPIjgW3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyODYyNmUw LTI5ZmUtNGU4Ni04NGQ2LTY4NDc4YzVjZDllZC8wLzJFOEJBQzdFODE5MTFGMDhB MTg5Q0E5RkREMzJBNjQzQzg4RTA1QjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnKvIwDQYJKoZIhvcNAQELBQADggEBAEtiYvGtniCRY56Ksjpzk5h9InsDUV1m 7MT/YXgKOTEqtjHtTRzoruBj59R7drhahoQifcJkr5jJB+6VFoYbrjsh0L3PWZG9 61X/fWaQep7PAcAiiMTX9VdN1n5IPRt7G6YRAQOTCGcpAeGsNB2l7SWI6RwV07IF YhvxrOlULXGfpHSzT8xAZ/jhZ7SeQIk3Zs16Iuwk9uqpRxedStzhVzMMjam2fHrV rFTPndIXhpDNGA7a73/D4UG99M2BUm5CZJ1Ar1OTWqsruE+qI4k2w8R2JBb4FRsb ITH+HFbMNpd8oE3p/TZkQZLsMMgsNg2eiC9rezV9iVAB3Bd3kdl4qHI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org