$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer (raw, json) Hash identifier: Pqhii+7iRQJmu4elFi6cdE1aRH8TvIEOFx2gojVx/j4= Subject key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02E84E754B30111D82E6179F460F82956E9746FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Sep 2024 23:05:54 +0000 Certificate not after: Tue 16 Sep 2025 23:10:54 +0000 Subordinate resources: IP: 203.3.90.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e8:4e:75:4b:30:11:1d:82:e6:17:9f:46:0f:82:95:6e:97:46:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 23:05:54 2024 GMT Not After : Sep 16 23:10:54 2025 GMT Subject: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:10:b6:04:f5:41:8c:2b:3b:6e:7b:eb:c0: 0f:c2:c2:73:67:f8:5a:fc:3f:39:00:57:8a:3a:c9: 87:f5:7c:b7:ae:ad:93:41:7c:a7:c6:97:22:66:23: 43:ed:56:a5:1b:47:7b:3a:e0:b9:03:66:fe:ff:9d: b3:df:67:9d:29:45:36:90:db:3a:35:09:6a:91:6a: c1:7d:1b:da:1b:42:9e:9e:e6:69:21:1e:f4:fb:dd: c0:cb:29:e7:79:0b:02:8e:d5:60:f1:58:3b:32:28: e5:1f:37:62:d5:6a:18:11:d2:07:9a:8e:67:63:33: 71:66:6e:2e:40:9c:3c:5b:b5:8d:35:04:08:26:e2: 2b:93:58:bd:f9:07:fd:70:94:f5:18:33:f7:c7:7b: f2:c2:66:49:91:ca:73:e3:cb:34:81:f8:15:4a:1e: 45:8d:0c:78:cd:59:03:1b:45:fe:70:fe:5d:0e:e5: 0f:9e:07:90:80:a0:57:2e:33:ab:d8:dd:5d:47:0c: 17:b0:e5:36:e5:ec:ff:9b:9f:0f:98:82:76:b4:a5: bd:3d:32:68:cb:83:ec:c8:67:06:d1:e2:07:1a:be: 2d:fe:ed:96:9e:8c:b5:fd:0c:a6:55:8e:5b:e5:34: 13:ab:26:5d:f3:7a:19:d9:cd:69:82:ff:8d:bc:a0: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.3.90.0/24 Signature Algorithm: sha256WithRSAEncryption 66:0b:df:20:41:97:48:ab:6f:f6:97:0f:81:03:85:b1:f4:ed: 98:ca:2a:5a:31:4c:11:6a:18:a1:a1:84:05:09:c1:40:5f:2a: fa:b7:2a:df:d3:0a:f4:55:cd:76:2e:4d:62:96:0a:48:20:c5: 96:a2:d5:1e:80:16:31:31:4c:2f:31:fa:41:25:51:f0:5f:82: c3:a0:5a:6a:f7:dd:06:b5:99:ef:0c:d4:6c:a6:83:b3:c6:84: 35:00:11:00:9f:18:64:3c:6b:16:9e:e2:9f:9c:d2:30:bd:3d: ce:e2:6e:6c:48:a2:59:6e:60:cf:6b:30:e1:a4:e7:c2:47:31: 09:2c:a0:c9:75:b5:71:b7:ab:3c:3e:a0:a8:86:da:72:90:0c: 07:df:56:a6:3f:38:83:53:d0:25:47:33:f1:3d:f6:91:a5:13: 0e:36:0b:68:48:12:7b:3f:1c:af:2f:c3:66:08:cb:b0:66:91: f9:31:23:f1:33:2c:c1:cd:73:26:7e:e0:34:b4:b1:be:12:fc: f9:82:ab:07:05:a2:20:65:83:07:23:22:0a:2f:5f:2e:6b:d5: 4b:9d:80:17:b4:95:71:41:7e:83:ef:b7:ed:e6:c7:fc:ee:2e: 5e:5c:09:ad:b1:b4:2a:6d:a7:48:60:cd:3c:c8:f2:bb:76:36: 95:7d:19:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAuhOdUswER2C5hefRg+ClW6XRv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNzIzMDU1NFoX DTI1MDkxNjIzMTA1NFowMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhB RDdENjBBMDk2NDJCNjI2Q0E0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMMELYE9UGMKztue+vAD8LCc2f4Wvw/OQBXijrJh/V8t66tk0F8p8aXImYj Q+1WpRtHezrguQNm/v+ds99nnSlFNpDbOjUJapFqwX0b2htCnp7maSEe9PvdwMsp 53kLAo7VYPFYOzIo5R83YtVqGBHSB5qOZ2MzcWZuLkCcPFu1jTUECCbiK5NYvfkH /XCU9Rgz98d78sJmSZHKc+PLNIH4FUoeRY0MeM1ZAxtF/nD+XQ7lD54HkICgVy4z q9jdXUcMF7DlNuXs/5ufD5iCdrSlvT0yaMuD7MhnBtHiBxq+Lf7tlp6Mtf0MplWO W+U0E6smXfN6GdnNaYL/jbyghHMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKzi2rqiSdVq2WitfWCglkK2JspNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkODcxMzAz LTAyMWEtNGEwYi05ZWZiLWFlMmRiNmM5MGQ4NC8wL0FDRTJEQUJBQTI0OUQ1NkFE OTY4QUQ3RDYwQTA5NjQyQjYyNkNBNEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLA1owDQYJKoZIhvcNAQELBQADggEBAGYL3yBBl0irb/aXD4EDhbH07ZjKKlox TBFqGKGhhAUJwUBfKvq3Kt/TCvRVzXYuTWKWCkggxZai1R6AFjExTC8x+kElUfBf gsOgWmr33Qa1me8M1Gymg7PGhDUAEQCfGGQ8axae4p+c0jC9Pc7ibmxIolluYM9r MOGk58JHMQksoMl1tXG3qzw+oKiG2nKQDAffVqY/OINT0CVHM/E99pGlEw42C2hI Ens/HK8vw2YIy7BmkfkxI/EzLMHNcyZ+4DS0sb4S/PmCqwcFoiBlgwcjIgovXy5r 1UudgBe0lXFBfoPvt+3mx/zuLl5cCa2xtCptp0hgzTzI8rt2NpV9GbE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org