$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer (raw, json) Hash identifier: ddGq9ZoNJ/GhGvD5foWor6uiRc9NOio0a/2W3TbqgNA= Subject key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0773995B0C259ED36120B830405320F5848F2EDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft caRepository: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 09:20:25 +0000 Certificate not after: Mon 30 Jun 2025 09:25:25 +0000 Subordinate resources: IP: 103.91.44.0/22 IP: 2001:df0:fb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:73:99:5b:0c:25:9e:d3:61:20:b8:30:40:53:20:f5:84:8f:2e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 09:20:25 2024 GMT Not After : Jun 30 09:25:25 2025 GMT Subject: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:44:a6:fe:6d:5a:a1:bf:56:af:8b:b4:ea: cc:04:1d:1b:c5:c1:ee:a5:45:56:93:8c:07:92:e4: 36:cb:6d:fd:55:df:d4:f3:b4:3a:e6:1c:15:aa:14: 5c:96:bd:6c:fc:83:fe:d7:f8:86:7d:9f:4e:0f:a3: cb:79:1d:3d:34:aa:c5:95:c4:45:4a:26:cf:79:de: 33:65:45:4b:65:a5:ff:e2:79:d0:26:9e:fb:67:db: 91:6b:0f:7d:60:00:fe:3f:20:41:5b:5c:09:f6:a0: c1:37:84:80:99:b5:33:e7:6b:f9:25:07:f5:65:8a: 27:3d:75:d4:5c:93:63:a4:89:95:53:58:91:57:ee: 42:7f:67:db:90:24:e8:1b:2c:dc:d5:1e:22:e1:63: e7:4c:b1:ae:c6:4f:2d:e9:46:51:dd:86:6b:97:6f: 5a:ce:5d:52:7e:b3:c7:dd:12:c8:73:67:e3:ad:7f: 8b:5c:11:00:ab:67:78:be:f5:90:97:61:03:e7:3f: b5:06:c7:0e:8d:1a:60:43:fd:c8:94:3a:19:da:97: ef:e5:a4:f0:bb:45:d3:b7:a5:f4:7d:43:60:c1:d2: 10:e3:e9:cf:14:2e:f4:e2:fa:2f:ba:61:17:6a:eb: 55:f9:c1:38:e2:3a:1e:fd:fa:90:00:62:22:0f:24: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.44.0/22 IPv6: 2001:df0:fb00::/48 Signature Algorithm: sha256WithRSAEncryption 65:d6:a2:ad:fa:4c:2d:1e:73:5b:6c:8a:fb:c8:f6:33:f2:09: 06:59:fe:53:40:2c:88:da:07:00:4d:2b:64:8b:75:da:c2:2d: 39:5c:51:91:28:a5:36:63:93:0c:0c:37:ab:16:d5:14:75:3f: e6:8b:e0:d0:ff:3c:10:a5:70:00:cf:a2:6c:c0:4b:d6:46:e6: 73:f1:10:16:58:4b:71:d2:9b:4b:4b:48:bf:29:d7:3d:45:9d: 2a:65:a6:fd:11:10:2c:82:95:a9:52:ac:5d:eb:4d:98:fb:96: ad:84:b8:4b:87:5f:44:96:fd:b0:b8:69:d3:4f:08:2e:ee:6c: 9c:36:01:d4:3b:b8:d1:de:21:f9:7c:03:b2:e2:2b:e0:c9:fe: 54:94:4e:61:7a:fa:72:f5:3d:c1:0d:a0:42:79:14:f6:c4:3e: 46:74:42:19:94:c7:f6:65:83:a2:95:94:85:33:44:3e:96:59: d2:82:a4:d3:d6:e2:06:82:9d:9c:e0:24:7a:5b:88:50:7d:03: d5:8d:0a:d0:6a:ae:b3:fb:2a:66:e6:23:75:6e:3b:c0:7c:c4: 75:fa:a6:34:6d:22:bc:8f:ce:38:2e:9a:6e:eb:d3:bc:b3:7c: 0a:a1:3f:46:5f:d2:cb:7f:e9:bf:17:23:d1:a4:8c:60:77:d1: 30:4e:bd:4c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUB3OZWwwlntNhILgwQFMg9YSPLt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA5MjAyNVoX DTI1MDYzMDA5MjUyNVowMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2 OEYzRkFGMjM1RTM4RjZDMTE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8bRKb+bVqhv1avi7TqzAQdG8XB7qVFVpOMB5LkNstt/VXf1PO0OuYcFaoU XJa9bPyD/tf4hn2fTg+jy3kdPTSqxZXERUomz3neM2VFS2Wl/+J50Cae+2fbkWsP fWAA/j8gQVtcCfagwTeEgJm1M+dr+SUH9WWKJz111FyTY6SJlVNYkVfuQn9n25Ak 6Bss3NUeIuFj50yxrsZPLelGUd2Ga5dvWs5dUn6zx90SyHNn461/i1wRAKtneL71 kJdhA+c/tQbHDo0aYEP9yJQ6GdqX7+Wk8LtF07el9H1DYMHSEOPpzxQu9OL6L7ph F2rrVfnBOOI6Hv36kABiIg8kXgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4M0TU6QqCpnudo8/ryNeOPbBGJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNzNiYzYx LWM1ZjktNDE1OS05OGJjLWEwNTMwYjRkZDhiNC8wL0NFMENEMTM1M0E0MkEwQTk5 RUU3NjhGM0ZBRjIzNUUzOEY2QzExODkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnWywwDwQCAAIwCQMHACABDfD7ADANBgkqhkiG9w0BAQsFAAOCAQEAZdairfpM LR5zW2yK+8j2M/IJBln+U0AsiNoHAE0rZIt12sItOVxRkSilNmOTDAw3qxbVFHU/ 5ovg0P88EKVwAM+ibMBL1kbmc/EQFlhLcdKbS0tIvynXPUWdKmWm/REQLIKVqVKs XetNmPuWrYS4S4dfRJb9sLhp008ILu5snDYB1Du40d4h+XwDsuIr4Mn+VJROYXr6 cvU9wQ2gQnkU9sQ+RnRCGZTH9mWDopWUhTNEPpZZ0oKk09biBoKdnOAkeluIUH0D 1Y0K0Gqus/sqZuYjdW47wHzEdfqmNG0ivI/OOC6abuvTvLN8CqE/Rl/Sy3/pvxcj 0aSMYHfRME69TA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org