$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer File: CE118685D363E20B6D3B3955972062D9581B9E43.cer (raw, json) Hash identifier: C3zGLdXXXkCf2O8NKzn4qBQYM/4eIFCHgqzmi1/KsKk= Subject key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 277431F88EC391E13F9D260CB507AFB00BAC4850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft caRepository: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 06 Aug 2024 08:11:39 +0000 Certificate not after: Tue 05 Aug 2025 08:16:39 +0000 Subordinate resources: IP: 103.224.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:74:31:f8:8e:c3:91:e1:3f:9d:26:0c:b5:07:af:b0:0b:ac:48:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 6 08:11:39 2024 GMT Not After : Aug 5 08:16:39 2025 GMT Subject: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:f5:82:82:62:18:d7:3e:40:98:61:ed:71: e6:ea:20:2b:94:7c:de:c1:db:03:4d:9c:df:6b:c7: b1:04:b9:45:01:42:99:17:17:ad:9b:d2:12:27:c3: 1b:4c:d8:90:6c:b8:ba:4a:47:d4:01:d0:25:2a:fd: 15:7d:c8:43:4b:3a:41:d9:e3:70:69:b1:fa:39:be: c1:45:e3:7c:7e:b9:2d:1b:53:99:86:ba:d0:70:7c: c3:f2:db:11:a8:fa:06:68:87:2f:1e:57:3c:b0:9f: b1:35:56:9b:89:cc:ae:e2:41:f6:5b:32:79:02:62: ee:94:d6:2b:45:1c:fa:55:b0:8b:fc:39:23:b4:f3: 02:6a:3a:cc:99:2a:29:95:42:3d:df:97:59:34:4d: d7:3a:fa:42:fb:0e:2f:04:77:63:14:9d:6d:bb:23: b1:ad:98:ef:3a:ac:d6:7f:00:a9:7c:13:e2:d4:4a: bc:b7:85:5e:53:01:0f:b0:85:ba:38:8e:e5:24:1d: a0:a1:bb:e2:ad:b0:db:e8:26:85:29:e6:4b:3a:37: 12:e0:0e:58:15:d4:19:ea:53:f6:1f:1c:8d:8b:b6: 35:d6:26:85:98:fe:35:ba:5e:15:9a:8f:9c:fe:2b: b8:19:c7:3f:f9:81:68:ca:9d:e0:08:ec:98:5a:03: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.124.0/23 Signature Algorithm: sha256WithRSAEncryption 53:bf:d5:f0:40:21:94:90:fa:53:75:19:0b:1b:09:90:8d:67: f4:49:38:b3:cc:9c:f7:f5:1d:37:82:71:2c:92:81:ae:19:c8: ac:42:4a:c3:2d:8b:70:e5:86:4c:ed:91:fb:38:55:67:9b:7d: 57:d5:a5:6c:82:dd:3b:3b:d8:2d:9c:72:d9:70:9c:35:12:39: 2a:9c:67:1e:77:d7:88:c5:ce:a6:a1:5e:08:4b:6c:4a:9f:88: 6c:aa:d0:0a:0e:55:1c:28:d7:da:cf:2a:b9:97:90:6f:20:c5: cb:2b:31:ab:31:14:41:fb:b0:4f:c5:66:b7:1c:d0:aa:3a:53: d7:0d:02:6b:03:4a:b7:36:5a:4b:59:fc:8f:af:37:87:e0:53: f2:08:82:de:a0:d3:5d:64:a3:cd:57:ca:83:35:84:58:42:70: 74:92:3a:a5:8a:da:9c:53:24:de:71:7c:2b:76:f9:1c:8a:70: 57:7f:40:d9:6a:21:25:b3:d6:a2:7f:00:5d:7c:cf:77:95:e0: 65:59:40:cc:28:2d:2a:f3:a9:9c:24:52:90:93:2a:b4:ac:0d: f9:f7:bf:20:41:60:b4:fa:4a:e3:b7:bb:4d:bb:a5:d7:a9:11: c0:27:99:28:3e:e2:fa:8f:f7:96:0b:da:5e:ff:d9:14:24:f9: b4:d8:4a:98 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJ3Qx+I7DkeE/nSYMtQevsAusSFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwNjA4MTEzOVoX DTI1MDgwNTA4MTYzOVowMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0Iz OTU1OTcyMDYyRDk1ODFCOUU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF19YKCYhjXPkCYYe1x5uogK5R83sHbA02c32vHsQS5RQFCmRcXrZvSEifD G0zYkGy4ukpH1AHQJSr9FX3IQ0s6QdnjcGmx+jm+wUXjfH65LRtTmYa60HB8w/Lb Eaj6BmiHLx5XPLCfsTVWm4nMruJB9lsyeQJi7pTWK0Uc+lWwi/w5I7TzAmo6zJkq KZVCPd+XWTRN1zr6QvsOLwR3YxSdbbsjsa2Y7zqs1n8AqXwT4tRKvLeFXlMBD7CF ujiO5SQdoKG74q2w2+gmhSnmSzo3EuAOWBXUGepT9h8cjYu2NdYmhZj+NbpeFZqP nP4ruBnHP/mBaMqd4AjsmFoD1R0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4RhoXTY+ILbTs5VZcgYtlYG55DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkODA4ZjY3 LTlhYmMtNDZkZC05ODE3LWI5MzM5MDkzZjg4ZS8wL0NFMTE4Njg1RDM2M0UyMEI2 RDNCMzk1NTk3MjA2MkQ5NTgxQjlFNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn4HwwDQYJKoZIhvcNAQELBQADggEBAFO/1fBAIZSQ+lN1GQsbCZCNZ/RJOLPM nPf1HTeCcSySga4ZyKxCSsMti3Dlhkztkfs4VWebfVfVpWyC3Ts72C2cctlwnDUS OSqcZx5314jFzqahXghLbEqfiGyq0AoOVRwo19rPKrmXkG8gxcsrMasxFEH7sE/F Zrcc0Ko6U9cNAmsDSrc2WktZ/I+vN4fgU/IIgt6g011ko81XyoM1hFhCcHSSOqWK 2pxTJN5xfCt2+RyKcFd/QNlqISWz1qJ/AF18z3eV4GVZQMwoLSrzqZwkUpCTKrSs Dfn3vyBBYLT6SuO3u027pdepEcAnmSg+4vqP95YL2l7/2RQk+bTYSpg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:00 2024 by rpki-client on console-fra.rpki-client.org