$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer File: CEE21891B6F5736FAA7D9BED383243F3DF381781.cer (raw, json) Hash identifier: kJHuoyZui5Gf1oQnOMtR6kVLX2tsHtaluh2eY2PHc74= Subject key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DEFE3165FA633F10E60B8BF259C4874873329C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft caRepository: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Jun 2023 18:19:17 +0000 Certificate not after: Wed 19 Jun 2024 18:24:17 +0000 Subordinate resources: IP: 103.168.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ef:e3:16:5f:a6:33:f1:0e:60:b8:bf:25:9c:48:74:87:33:29:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 18:19:17 2023 GMT Not After : Jun 19 18:24:17 2024 GMT Subject: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:62:ff:75:22:86:0c:02:84:8c:1e:94:22: d1:55:f2:89:5e:47:cb:cb:95:cf:31:f5:44:7c:0f: 87:8c:c1:96:c1:f7:48:95:59:59:5c:07:f7:b1:0f: d9:c6:8e:d3:81:50:ac:78:8f:fe:1d:24:19:4c:d8: 03:99:44:02:44:50:19:a8:7e:84:b7:36:92:7a:cf: 69:57:ed:aa:7d:c7:ca:a2:e6:39:eb:b7:ca:a0:ec: 63:76:77:97:21:b8:f1:e7:d3:14:c0:19:f7:f1:f4: d4:83:4c:f3:a5:c3:b0:af:60:ec:4b:40:4d:a7:67: 43:fe:f6:8b:1f:ff:2d:02:30:14:d2:0f:1f:41:66: 4e:76:c8:0c:53:d3:dd:d6:43:78:72:4a:81:8f:96: 97:4f:ec:d5:1d:67:7e:23:2a:3c:97:dd:1c:ff:bd: 49:de:ba:4b:b2:60:98:45:93:60:3a:2f:54:77:c5: d5:b7:d7:b5:cb:7e:3a:ed:b1:4f:2c:92:f7:ac:f0: 2d:95:54:7a:3f:c7:9d:c7:fe:fb:48:24:b6:4a:7a: b2:70:dd:b7:6e:18:4d:8f:4a:3e:8b:1e:36:e0:ae: ce:29:ef:20:21:67:6e:26:33:b9:96:1b:9e:f6:d2: 72:6e:76:2b:00:dc:87:b9:79:bd:9f:de:71:c5:bd: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:62:ac:a7:cb:8a:33:06:33:92:b9:96:62:0e:57:1d:dd:e3: 57:ae:ff:26:31:1e:46:eb:ed:5d:a6:7e:f4:b0:3b:3e:e4:0a: bc:ef:1c:a7:2e:0d:d7:c3:4b:0f:4f:b6:be:40:56:e5:85:70: ae:5b:aa:b0:f7:78:5f:32:1f:13:c6:da:dd:45:77:d1:28:b6: 2b:c2:1d:55:48:c1:8b:a4:e2:f0:38:ad:30:58:c1:f7:c9:b1: 61:43:00:3b:bc:5b:c8:3b:0e:01:6c:5e:75:96:b8:c1:18:75: eb:34:63:f2:82:d1:df:a8:d4:59:cf:a0:ce:36:7d:17:e3:c2: 10:19:82:60:98:6d:b9:42:6a:43:ea:ad:d2:5d:9e:1e:a4:5b: 7b:b6:8c:6c:44:20:14:fd:02:f9:2d:ab:b5:96:df:bc:05:64: da:25:c6:7f:a3:13:c3:9a:0d:17:01:f9:cc:b9:55:57:bd:88: 47:cc:11:17:ca:2b:4a:12:0a:76:5f:9f:a1:4d:54:43:b0:2b: 37:bb:64:10:13:35:1e:1d:17:d3:bf:b6:69:c4:88:a3:71:35: 95:c8:8a:47:77:1e:7e:15:5c:51:e4:1e:5d:34:e6:ef:fe:19: 48:a1:f1:bb:28:df:4a:5b:39:dc:e1:11:80:01:a1:a1:c2:3b: 4a:b9:fa:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbe/jFl+mM/EOYLi/JZxIdIczKccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMTE4MTkxN1oX DTI0MDYxOTE4MjQxN1owMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5 QkVEMzgzMjQzRjNERjM4MTc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTPYv91IoYMAoSMHpQi0VXyiV5Hy8uVzzH1RHwPh4zBlsH3SJVZWVwH97EP 2caO04FQrHiP/h0kGUzYA5lEAkRQGah+hLc2knrPaVftqn3HyqLmOeu3yqDsY3Z3 lyG48efTFMAZ9/H01INM86XDsK9g7EtATadnQ/72ix//LQIwFNIPH0FmTnbIDFPT 3dZDeHJKgY+Wl0/s1R1nfiMqPJfdHP+9Sd66S7JgmEWTYDovVHfF1bfXtct+Ou2x TyyS96zwLZVUej/Hncf++0gktkp6snDdt24YTY9KPoseNuCuzinvICFnbiYzuZYb nvbScm52KwDch7l5vZ/eccW9Wa8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7iGJG29XNvqn2b7TgyQ/PfOBeBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZjAwMzFl LTJhOWUtNDdjYS05MjgzLTQwZTkyN2UzNTk5My8wL0NFRTIxODkxQjZGNTczNkZB QTdEOUJFRDM4MzI0M0YzREYzODE3ODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLowDQYJKoZIhvcNAQELBQADggEBAF9irKfLijMGM5K5lmIOVx3d41eu/yYx Hkbr7V2mfvSwOz7kCrzvHKcuDdfDSw9Ptr5AVuWFcK5bqrD3eF8yHxPG2t1Fd9Eo tivCHVVIwYuk4vA4rTBYwffJsWFDADu8W8g7DgFsXnWWuMEYdes0Y/KC0d+o1FnP oM42fRfjwhAZgmCYbblCakPqrdJdnh6kW3u2jGxEIBT9Avktq7WW37wFZNolxn+j E8OaDRcB+cy5VVe9iEfMERfKK0oSCnZfn6FNVEOwKze7ZBATNR4dF9O/tmnEiKNx NZXIikd3Hn4VXFHkHl005u/+GUih8bso30pbOdzhEYABoaHCO0q5+pI= -----END CERTIFICATE-----Generated at Wed May 8 09:50:44 2024 by rpki-client on console-fra.rpki-client.org