$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer File: D1E28E396E82778793018513BD084854BE663886.cer (raw, json) Hash identifier: Wkfs9mGulyhtyRDXRXHD2b3MESb38fNYZOeLNEj7TRw= Subject key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49A797FB980319BE2309A54CFDD6BAFE7026D0D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft caRepository: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Nov 2024 23:21:03 +0000 Certificate not after: Fri 14 Nov 2025 23:26:03 +0000 Subordinate resources: IP: 103.169.230.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a7:97:fb:98:03:19:be:23:09:a5:4c:fd:d6:ba:fe:70:26:d0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 15 23:21:03 2024 GMT Not After : Nov 14 23:26:03 2025 GMT Subject: CN=D1E28E396E82778793018513BD084854BE663886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:47:3f:18:2e:9d:9b:f2:cc:87:22:96:e0: 53:a0:60:6b:14:23:8c:f6:1e:f8:73:73:f8:2c:3b: d0:a8:f5:f2:81:46:31:44:fc:dc:c4:1f:ed:e6:84: fc:67:ce:38:fb:dc:67:d4:cd:07:94:75:47:56:01: a2:ab:f9:4d:36:09:56:4f:59:1f:01:c9:df:39:05: d3:77:5a:9f:78:1b:91:95:c5:89:40:a1:14:6c:31: 5c:9d:90:cc:11:78:c4:db:ef:b0:0c:53:70:b7:1b: 08:cd:55:b2:14:a8:4e:f8:d0:9b:b9:3a:e3:e5:82: a4:80:4b:b1:e7:37:1c:e2:e9:89:85:50:a7:40:2d: 00:7f:22:2c:7e:7b:08:f6:35:5a:db:83:cb:e7:3c: 92:bf:4c:a6:e9:fa:3d:06:7f:5e:96:f0:19:eb:f2: 23:4b:29:f3:4b:09:28:19:66:bb:34:8f:0c:82:12: 9d:d2:ec:c5:49:9c:86:96:91:ac:dc:82:f8:40:d2: 1d:2b:6c:0c:f7:ef:9b:58:d7:5c:a6:f5:c7:43:a1: d4:33:88:9d:07:1e:89:cd:f2:0a:2c:f4:cc:a2:9d: fe:d2:c8:4d:3b:22:3c:fa:be:4d:e3:29:16:b4:df: b5:b3:ee:a2:56:17:fa:78:a0:bf:46:e8:c1:f0:7f: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.230.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:43:45:53:01:7f:33:cc:ea:7e:1a:2d:b6:74:4c:a4:96:6a: 1a:0e:8f:8e:37:c3:22:74:fe:95:dd:d3:8b:1c:e1:4a:5d:0b: 6f:ad:17:55:54:d5:e5:b2:63:d7:2c:8c:c7:8d:81:3c:de:d4: 5f:17:03:01:aa:df:85:01:00:7f:cb:b8:f0:62:15:21:33:fb: f3:00:25:32:8e:a6:e7:f9:bf:4b:97:e3:d4:09:b9:5a:50:f2: 07:1d:da:cd:a7:26:ce:b9:d6:d9:d7:63:62:8a:20:b0:90:96: 98:94:c5:17:a6:23:03:c4:03:59:0c:ed:89:86:7e:25:f6:41: f0:84:62:14:68:a9:8d:0f:de:43:e4:57:c8:39:cc:e7:9b:e9: 7d:fd:bc:a6:1d:3c:63:67:73:ca:96:bd:46:de:21:d5:96:d1: 2f:d8:27:78:ba:3f:89:d2:b7:d1:b5:12:7d:16:f9:d6:41:64: 72:4b:6a:3c:13:4a:00:d8:95:a2:65:38:29:1e:40:d7:0c:e7: b0:82:82:32:fc:22:64:9e:f2:97:31:ff:4b:18:23:36:f4:b2: 4d:b1:80:68:16:57:de:94:76:ec:88:c3:81:c7:6c:55:d4:62: 3d:31:74:16:ec:b2:7d:8e:c8:92:0a:9d:70:d7:17:a3:d2:cc: 13:e8:1c:75 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSaeX+5gDGb4jCaVM/da6/nAm0NkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExNTIzMjEwM1oX DTI1MTExNDIzMjYwM1owMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4 NTEzQkQwODQ4NTRCRTY2Mzg4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJw4Rz8YLp2b8syHIpbgU6BgaxQjjPYe+HNz+Cw70Kj18oFGMUT83MQf7eaE /GfOOPvcZ9TNB5R1R1YBoqv5TTYJVk9ZHwHJ3zkF03dan3gbkZXFiUChFGwxXJ2Q zBF4xNvvsAxTcLcbCM1VshSoTvjQm7k64+WCpIBLsec3HOLpiYVQp0AtAH8iLH57 CPY1WtuDy+c8kr9Mpun6PQZ/XpbwGevyI0sp80sJKBlmuzSPDIISndLsxUmchpaR rNyC+EDSHStsDPfvm1jXXKb1x0Oh1DOInQceic3yCiz0zKKd/tLITTsiPPq+TeMp FrTftbPuolYX+nigv0bowfB/t/kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNHijjlugneHkwGFE70ISFS+ZjiGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2ZDYxMTM1 LTc1ZTQtNDZjNi1iZGRkLWZiYTY4MzRkY2U0MS8wL0QxRTI4RTM5NkU4Mjc3ODc5 MzAxODUxM0JEMDg0ODU0QkU2NjM4ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqeYwDQYJKoZIhvcNAQELBQADggEBABxDRVMBfzPM6n4aLbZ0TKSWahoOj443 wyJ0/pXd04sc4UpdC2+tF1VU1eWyY9csjMeNgTze1F8XAwGq34UBAH/LuPBiFSEz +/MAJTKOpuf5v0uX49QJuVpQ8gcd2s2nJs651tnXY2KKILCQlpiUxRemIwPEA1kM 7YmGfiX2QfCEYhRoqY0P3kPkV8g5zOeb6X39vKYdPGNnc8qWvUbeIdWW0S/YJ3i6 P4nSt9G1En0W+dZBZHJLajwTSgDYlaJlOCkeQNcM57CCgjL8ImSe8pcx/0sYIzb0 sk2xgGgWV96UduyIw4HHbFXUYj0xdBbssn2OyJIKnXDXF6PSzBPoHHU= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org