$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.cer (raw, json) Hash identifier: RtzPplHDrp3GLgN9ddpTgRNOEXwtCW1DQ67+G77EqjA= Subject key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29253C4F77C78B1C14206882F34FE22772FA9EBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft caRepository: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Jun 2024 14:12:20 +0000 Certificate not after: Wed 04 Jun 2025 14:17:20 +0000 Subordinate resources: IP: 103.188.168.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:25:3c:4f:77:c7:8b:1c:14:20:68:82:f3:4f:e2:27:72:fa:9e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 14:12:20 2024 GMT Not After : Jun 4 14:17:20 2025 GMT Subject: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:70:93:f3:58:00:93:f3:b3:7e:11:32:dd: 9a:e5:5b:6a:26:99:3a:2c:de:a3:33:ef:b7:c4:c8: 74:f9:6b:c9:9d:18:94:e4:d6:a1:94:c1:70:b1:4e: 6b:53:95:92:2c:dd:da:8c:c0:9f:6e:42:d4:27:d1: c0:7e:cf:8e:68:6d:27:a2:16:bc:02:fb:cf:45:96: f9:9a:fa:5c:8c:9e:0d:ff:6b:64:06:6f:7a:79:e4: 67:7c:07:74:ee:c2:da:49:83:4d:3b:08:67:51:f9: be:4f:1e:3a:10:25:16:7a:02:c1:f8:99:7a:d2:a0: 43:a4:91:cd:25:e8:9b:e7:21:b2:72:a0:fd:4a:aa: 63:42:de:16:7e:c3:af:de:08:e1:a3:b7:52:27:db: d0:3e:8d:22:f1:88:92:40:1b:7c:3b:4c:45:5e:d4: be:a8:b6:cc:c9:f0:15:e0:6d:4e:f0:ba:80:6f:14: 92:90:29:71:0f:cc:3d:b0:c7:6e:9e:be:36:a4:7a: 2b:08:80:49:36:6b:bd:af:e9:db:b5:72:ab:52:1b: b8:47:e5:ca:b8:1a:1f:f4:27:ef:b5:32:dc:52:53: 93:2f:b7:40:b8:c5:6c:1b:03:e4:44:50:2f:be:8a: da:f2:6f:3c:c0:54:70:2c:74:07:d8:ce:dc:01:9f: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.168.0/23 Signature Algorithm: sha256WithRSAEncryption 23:b7:89:b4:5d:9d:6a:08:72:12:e5:aa:75:c4:46:63:37:4a: 76:fc:b2:28:f5:b8:ae:81:85:5e:0c:bd:b0:5b:83:3b:21:3b: ce:d3:30:36:69:e7:0e:ff:57:02:43:59:23:6c:0e:1d:df:2c: 76:5f:ed:c4:73:1f:d9:6a:54:b2:5f:93:72:6a:df:75:b3:1c: 00:35:ec:f1:75:41:45:d2:95:d7:77:57:07:9b:e3:f7:6c:0a: fd:2a:80:d4:a8:31:30:d6:10:5e:4a:6e:ce:11:b9:33:9a:16: a4:70:c6:bd:9e:f1:ed:da:ab:34:d4:2c:cd:a6:06:82:16:75: 31:57:70:a8:15:56:44:6d:79:f5:73:74:33:48:18:2f:f1:cb: 2b:63:c9:93:83:24:e4:c0:12:69:e4:1a:7c:12:55:37:00:f3: 29:fd:b7:a9:26:b2:4a:fd:74:b7:9c:2d:94:02:ed:77:99:66: dc:54:42:bc:f2:3d:d9:1a:6a:27:e2:52:9e:74:56:ae:53:73: 43:a8:86:fb:13:3d:31:cc:80:64:2b:3e:2f:7a:5a:d4:17:39: 64:cd:c5:6e:28:6c:19:f7:8c:cb:42:75:9d:67:ad:b4:89:0b: 0c:fc:84:dc:70:f2:f5:ce:7a:29:7d:cc:11:1f:b0:0a:23:02: dd:3a:26:19 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKSU8T3fHixwUIGiC80/iJ3L6nrowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYwNTE0MTIyMFoX DTI1MDYwNDE0MTcyMFowMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0 NzMyNUQ4RkRBNzZDQzQ5NzA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8acJPzWACT87N+ETLdmuVbaiaZOizeozPvt8TIdPlryZ0YlOTWoZTBcLFO a1OVkizd2ozAn25C1CfRwH7PjmhtJ6IWvAL7z0WW+Zr6XIyeDf9rZAZvennkZ3wH dO7C2kmDTTsIZ1H5vk8eOhAlFnoCwfiZetKgQ6SRzSXom+chsnKg/UqqY0LeFn7D r94I4aO3Uifb0D6NIvGIkkAbfDtMRV7Uvqi2zMnwFeBtTvC6gG8UkpApcQ/MPbDH bp6+NqR6KwiASTZrva/p27Vyq1IbuEflyrgaH/Qn77Uy3FJTky+3QLjFbBsD5ERQ L76K2vJvPMBUcCx0B9jO3AGfU6kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPvjtgeEqOeMl1HMl2P2nbMSXBAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wM2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzYWRlOWMw LWNkZTEtNDdmMC05Y2QyLTRhNTdiZGRlMTRlOC8wLzMzRUY4RUQ4MUUxMkEzOUUz MjVENDczMjVEOEZEQTc2Q0M0OTcwNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvKgwDQYJKoZIhvcNAQELBQADggEBACO3ibRdnWoIchLlqnXERmM3Snb8sij1 uK6BhV4MvbBbgzshO87TMDZp5w7/VwJDWSNsDh3fLHZf7cRzH9lqVLJfk3Jq33Wz HAA17PF1QUXSldd3Vweb4/dsCv0qgNSoMTDWEF5Kbs4RuTOaFqRwxr2e8e3aqzTU LM2mBoIWdTFXcKgVVkRtefVzdDNIGC/xyytjyZODJOTAEmnkGnwSVTcA8yn9t6km skr9dLecLZQC7XeZZtxUQrzyPdkaaifiUp50Vq5Tc0OohvsTPTHMgGQrPi96WtQX OWTNxW4obBn3jMtCdZ1nrbSJCwz8hNxw8vXOeil9zBEfsAojAt06Jhk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:15 2024 by rpki-client on console-fra.rpki-client.org