$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer File: CE118685D363E20B6D3B3955972062D9581B9E43.cer (raw, json) Hash identifier: 3tdtE5Z0UmKL8F05dIYp9CChF1apJYieH60NIOUJmfc= Subject key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44A38FCC47A4656926DF51991611C2A39E36F988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft caRepository: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 05 Sep 2023 04:32:27 +0000 Certificate not after: Tue 03 Sep 2024 04:37:27 +0000 Subordinate resources: IP: 103.224.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a3:8f:cc:47:a4:65:69:26:df:51:99:16:11:c2:a3:9e:36:f9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 5 04:32:27 2023 GMT Not After : Sep 3 04:37:27 2024 GMT Subject: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:f5:82:82:62:18:d7:3e:40:98:61:ed:71: e6:ea:20:2b:94:7c:de:c1:db:03:4d:9c:df:6b:c7: b1:04:b9:45:01:42:99:17:17:ad:9b:d2:12:27:c3: 1b:4c:d8:90:6c:b8:ba:4a:47:d4:01:d0:25:2a:fd: 15:7d:c8:43:4b:3a:41:d9:e3:70:69:b1:fa:39:be: c1:45:e3:7c:7e:b9:2d:1b:53:99:86:ba:d0:70:7c: c3:f2:db:11:a8:fa:06:68:87:2f:1e:57:3c:b0:9f: b1:35:56:9b:89:cc:ae:e2:41:f6:5b:32:79:02:62: ee:94:d6:2b:45:1c:fa:55:b0:8b:fc:39:23:b4:f3: 02:6a:3a:cc:99:2a:29:95:42:3d:df:97:59:34:4d: d7:3a:fa:42:fb:0e:2f:04:77:63:14:9d:6d:bb:23: b1:ad:98:ef:3a:ac:d6:7f:00:a9:7c:13:e2:d4:4a: bc:b7:85:5e:53:01:0f:b0:85:ba:38:8e:e5:24:1d: a0:a1:bb:e2:ad:b0:db:e8:26:85:29:e6:4b:3a:37: 12:e0:0e:58:15:d4:19:ea:53:f6:1f:1c:8d:8b:b6: 35:d6:26:85:98:fe:35:ba:5e:15:9a:8f:9c:fe:2b: b8:19:c7:3f:f9:81:68:ca:9d:e0:08:ec:98:5a:03: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.124.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:f2:4d:06:b6:f3:3d:e0:5f:cd:38:b8:dd:f5:9d:98:69:68: fc:12:9b:b3:57:4b:d7:5e:23:f9:97:a4:5d:eb:ee:f7:dc:2d: ef:3a:f9:50:31:38:67:9e:b3:17:79:39:ca:9f:d4:1a:f4:1c: be:3e:f0:c1:7b:ed:10:f0:56:b6:ef:d8:ef:89:6a:ae:a2:83: 46:2c:11:7d:af:0a:b2:20:98:d2:e9:a1:ad:14:2f:9c:cb:33: ca:f8:3d:2c:f8:f3:14:55:92:9f:d3:55:f2:34:c0:78:4d:c3: 0d:cc:f5:02:62:58:9d:d1:a7:b2:78:d4:7d:4d:ed:dc:03:9f: ac:1a:95:6d:35:e5:5e:2f:c2:eb:46:0c:d6:7c:af:65:f9:dd: 13:92:73:5e:c5:53:00:b4:09:4e:a8:22:8e:51:c4:be:6c:02: a5:23:88:ff:24:a0:c2:80:89:aa:83:ef:04:60:07:36:97:73: 30:b9:b0:dc:84:3e:6f:c9:04:ae:f5:0b:57:9f:3c:05:6f:18: 80:5a:f2:27:1e:ec:7b:75:d5:2c:ff:f8:94:a5:db:8c:6a:89: b6:fe:8d:22:aa:18:71:9f:3b:3e:71:73:48:38:b0:ab:e0:47: 92:ef:35:81:e7:82:26:fa:b3:ca:f6:43:ba:af:05:7c:ef:9e: 49:ce:86:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURKOPzEekZWkm31GZFhHCo542+YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwNTA0MzIyN1oX DTI0MDkwMzA0MzcyN1owMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0Iz OTU1OTcyMDYyRDk1ODFCOUU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF19YKCYhjXPkCYYe1x5uogK5R83sHbA02c32vHsQS5RQFCmRcXrZvSEifD G0zYkGy4ukpH1AHQJSr9FX3IQ0s6QdnjcGmx+jm+wUXjfH65LRtTmYa60HB8w/Lb Eaj6BmiHLx5XPLCfsTVWm4nMruJB9lsyeQJi7pTWK0Uc+lWwi/w5I7TzAmo6zJkq KZVCPd+XWTRN1zr6QvsOLwR3YxSdbbsjsa2Y7zqs1n8AqXwT4tRKvLeFXlMBD7CF ujiO5SQdoKG74q2w2+gmhSnmSzo3EuAOWBXUGepT9h8cjYu2NdYmhZj+NbpeFZqP nP4ruBnHP/mBaMqd4AjsmFoD1R0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4RhoXTY+ILbTs5VZcgYtlYG55DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkODA4ZjY3 LTlhYmMtNDZkZC05ODE3LWI5MzM5MDkzZjg4ZS8wL0NFMTE4Njg1RDM2M0UyMEI2 RDNCMzk1NTk3MjA2MkQ5NTgxQjlFNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn4HwwDQYJKoZIhvcNAQELBQADggEBAEvyTQa28z3gX804uN31nZhpaPwSm7NX S9deI/mXpF3r7vfcLe86+VAxOGeesxd5Ocqf1Br0HL4+8MF77RDwVrbv2O+Jaq6i g0YsEX2vCrIgmNLpoa0UL5zLM8r4PSz48xRVkp/TVfI0wHhNww3M9QJiWJ3Rp7J4 1H1N7dwDn6walW015V4vwutGDNZ8r2X53ROSc17FUwC0CU6oIo5RxL5sAqUjiP8k oMKAiaqD7wRgBzaXczC5sNyEPm/JBK71C1efPAVvGIBa8ice7Ht11Sz/+JSl24xq ibb+jSKqGHGfOz5xc0g4sKvgR5LvNYHngib6s8r2Q7qvBXzvnknOhn4= -----END CERTIFICATE-----Generated at Wed May 8 14:59:59 2024 by rpki-client on console-ams.rpki-client.org