$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer (raw, json) Hash identifier: sYlCSnNqZqrrIN6X4eS3B8qzlKYmI1XxD0D5pqzcX/U= Subject key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3291AD4A7D711DD06B0F9BAAC768A7D22AA2F7E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft caRepository: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jul 2023 22:48:41 +0000 Certificate not after: Sun 28 Jul 2024 22:53:41 +0000 Subordinate resources: IP: 103.91.44.0/22 IP: 2001:df0:fb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:91:ad:4a:7d:71:1d:d0:6b:0f:9b:aa:c7:68:a7:d2:2a:a2:f7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 22:48:41 2023 GMT Not After : Jul 28 22:53:41 2024 GMT Subject: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:44:a6:fe:6d:5a:a1:bf:56:af:8b:b4:ea: cc:04:1d:1b:c5:c1:ee:a5:45:56:93:8c:07:92:e4: 36:cb:6d:fd:55:df:d4:f3:b4:3a:e6:1c:15:aa:14: 5c:96:bd:6c:fc:83:fe:d7:f8:86:7d:9f:4e:0f:a3: cb:79:1d:3d:34:aa:c5:95:c4:45:4a:26:cf:79:de: 33:65:45:4b:65:a5:ff:e2:79:d0:26:9e:fb:67:db: 91:6b:0f:7d:60:00:fe:3f:20:41:5b:5c:09:f6:a0: c1:37:84:80:99:b5:33:e7:6b:f9:25:07:f5:65:8a: 27:3d:75:d4:5c:93:63:a4:89:95:53:58:91:57:ee: 42:7f:67:db:90:24:e8:1b:2c:dc:d5:1e:22:e1:63: e7:4c:b1:ae:c6:4f:2d:e9:46:51:dd:86:6b:97:6f: 5a:ce:5d:52:7e:b3:c7:dd:12:c8:73:67:e3:ad:7f: 8b:5c:11:00:ab:67:78:be:f5:90:97:61:03:e7:3f: b5:06:c7:0e:8d:1a:60:43:fd:c8:94:3a:19:da:97: ef:e5:a4:f0:bb:45:d3:b7:a5:f4:7d:43:60:c1:d2: 10:e3:e9:cf:14:2e:f4:e2:fa:2f:ba:61:17:6a:eb: 55:f9:c1:38:e2:3a:1e:fd:fa:90:00:62:22:0f:24: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.44.0/22 IPv6: 2001:df0:fb00::/48 Signature Algorithm: sha256WithRSAEncryption 47:cb:a3:41:1b:2a:09:e4:86:c9:2e:b3:06:3d:47:25:dc:dd: 74:4b:87:02:00:34:2a:76:5c:44:5e:de:19:11:39:c7:73:99: e8:f2:3d:c4:46:22:43:ca:13:27:ab:23:70:05:2f:f4:3c:48: cb:ff:2c:29:e8:6a:ee:9d:fa:e9:54:c6:4c:77:85:c6:05:77: ac:ee:45:72:09:90:94:17:18:75:05:44:fe:b1:ae:12:a9:19: de:be:6c:29:55:a7:90:9f:a4:51:eb:50:6d:f2:d9:03:f8:f6: 67:61:ac:18:14:d1:77:b8:01:2d:c0:63:1e:06:d5:b0:c6:2f: 4f:ad:dc:57:a6:b6:34:2e:d5:51:bb:fd:24:23:43:31:fe:01: b4:58:c3:96:53:68:aa:3a:0f:fa:28:aa:af:11:2e:55:42:a8: 02:6d:9c:3c:b1:3d:34:90:44:ce:2f:04:38:ef:27:7a:3e:a5: 6b:9e:88:d7:eb:11:59:a0:38:91:1b:7e:cc:3f:ae:32:4a:cf: 11:e9:5d:33:70:e1:39:6c:d9:1c:b4:8d:4d:4c:d0:25:a1:bb: d7:6b:05:85:2d:f8:d9:56:da:5e:6d:bc:55:a1:ba:6b:bd:2d: 64:7a:63:37:f3:36:5b:15:82:1e:53:74:38:80:95:76:c3:25: 5e:f3:8e:42 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMpGtSn1xHdBrD5uqx2in0iqi9+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMDIyNDg0MVoX DTI0MDcyODIyNTM0MVowMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2 OEYzRkFGMjM1RTM4RjZDMTE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8bRKb+bVqhv1avi7TqzAQdG8XB7qVFVpOMB5LkNstt/VXf1PO0OuYcFaoU XJa9bPyD/tf4hn2fTg+jy3kdPTSqxZXERUomz3neM2VFS2Wl/+J50Cae+2fbkWsP fWAA/j8gQVtcCfagwTeEgJm1M+dr+SUH9WWKJz111FyTY6SJlVNYkVfuQn9n25Ak 6Bss3NUeIuFj50yxrsZPLelGUd2Ga5dvWs5dUn6zx90SyHNn461/i1wRAKtneL71 kJdhA+c/tQbHDo0aYEP9yJQ6GdqX7+Wk8LtF07el9H1DYMHSEOPpzxQu9OL6L7ph F2rrVfnBOOI6Hv36kABiIg8kXgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4M0TU6QqCpnudo8/ryNeOPbBGJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNzNiYzYx LWM1ZjktNDE1OS05OGJjLWEwNTMwYjRkZDhiNC8wL0NFMENEMTM1M0E0MkEwQTk5 RUU3NjhGM0ZBRjIzNUUzOEY2QzExODkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnWywwDwQCAAIwCQMHACABDfD7ADANBgkqhkiG9w0BAQsFAAOCAQEAR8ujQRsq CeSGyS6zBj1HJdzddEuHAgA0KnZcRF7eGRE5x3OZ6PI9xEYiQ8oTJ6sjcAUv9DxI y/8sKehq7p366VTGTHeFxgV3rO5FcgmQlBcYdQVE/rGuEqkZ3r5sKVWnkJ+kUetQ bfLZA/j2Z2GsGBTRd7gBLcBjHgbVsMYvT63cV6a2NC7VUbv9JCNDMf4BtFjDllNo qjoP+iiqrxEuVUKoAm2cPLE9NJBEzi8EOO8nej6la56I1+sRWaA4kRt+zD+uMkrP EeldM3DhOWzZHLSNTUzQJaG712sFhS342VbaXm28VaG6a70tZHpjN/M2WxWCHlN0 OICVdsMlXvOOQg== -----END CERTIFICATE-----Generated at Thu May 9 00:29:18 2024 by rpki-client on console-ams.rpki-client.org