$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer File: E07D333345CD7D30F1DC10D98F6E73457739DF18.cer (raw, json) Hash identifier: NPV3UmfNQKga6yBKWMZLAv+Zu9SugdxiQJQZaohHSDs= Subject key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BEE4FE9FC07340FD8B9F643ECD9DFA8FBD2CDF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Oct 2023 09:49:56 +0000 Certificate not after: Sat 12 Oct 2024 09:54:56 +0000 Subordinate resources: IP: 103.175.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ee:4f:e9:fc:07:34:0f:d8:b9:f6:43:ec:d9:df:a8:fb:d2:cd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 14 09:49:56 2023 GMT Not After : Oct 12 09:54:56 2024 GMT Subject: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:02:03:eb:59:30:72:bc:b2:df:b8:5e:fa: 2a:91:4f:fb:33:1b:9d:c2:25:f4:c8:c9:af:35:8c: 08:a9:be:e1:f9:43:ed:06:66:0c:42:9b:53:a2:73: 8e:8c:a5:45:04:67:43:ab:25:9d:b1:c5:bd:69:02: 11:96:96:fe:ac:33:ef:66:bd:bf:17:1a:7c:e2:4f: 1e:aa:7f:6c:12:b0:bd:ba:ab:c9:bc:3d:1d:21:93: d2:0e:28:75:de:2d:7f:13:12:76:d0:e3:8a:af:c2: aa:99:f9:26:88:45:22:a8:6f:2a:2c:c2:82:3c:32: 58:f4:74:af:15:f7:e7:10:d8:f1:d7:1f:6b:ec:22: 3b:49:a7:4d:fd:23:da:aa:ad:bd:b8:02:61:ba:4d: 84:29:e2:4e:56:ea:40:e4:c5:8a:da:05:82:18:01: 33:f6:0c:0c:c1:d6:a8:a0:da:4d:02:ac:b6:1f:f4: 60:e1:75:03:b9:a4:70:d6:3b:0b:7a:f8:1b:0e:d7: 46:d8:04:3a:fe:2f:7b:7e:22:c3:7d:d5:05:b4:ff: cf:38:2c:55:c3:2a:95:7b:ac:a6:35:fb:d0:d3:0f: 4f:97:a8:4f:03:d9:43:5b:28:68:b4:bb:f3:6f:7c: 46:7f:f5:1d:a7:d7:d3:74:6e:28:d3:5c:cb:ca:3f: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.24.0/23 Signature Algorithm: sha256WithRSAEncryption 95:49:cc:a1:44:a5:d4:25:a0:94:ba:7d:35:d2:04:eb:a5:ca: be:48:6d:b7:80:f2:93:6d:1c:d4:0e:2c:91:00:04:54:bb:38: 0b:57:ce:4f:95:f5:0c:72:e1:2a:91:32:c6:78:50:85:5c:60: 1d:7a:f0:19:51:a5:0d:92:e9:1a:12:13:db:d9:24:b7:2f:fc: 12:07:bd:5b:34:fe:ee:9f:a5:21:c2:a1:ad:ed:52:7a:07:3d: eb:b6:f7:ad:32:30:6c:61:8c:fd:2e:3b:c9:95:f6:b6:85:20: 4c:9d:5f:bf:ff:ac:81:0a:cd:bc:11:e2:1c:60:f0:7a:1c:a0: ff:38:01:35:99:0c:82:f5:62:3b:a6:87:5e:42:1b:7d:3a:30: 7c:4f:ea:80:b2:42:d4:d9:1d:38:f9:4d:5f:3d:78:5e:fb:0b: b5:a0:2b:9d:8d:09:14:fd:2d:70:8d:cf:de:ef:5f:74:cd:97: 6e:d4:7a:d4:9a:4d:8e:33:7b:4e:80:84:28:6d:37:f2:3d:5d: 68:93:53:0b:a5:7a:03:b9:9d:29:d0:88:02:2b:72:6f:12:e7: 4c:71:f3:6e:35:4e:59:6a:3b:59:39:4d:ce:68:ca:99:3b:c6: c8:c3:6d:db:41:a7:5c:0a:14:0e:ec:fd:d6:f7:ae:2a:26:28: 1c:79:06:58 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa+5P6fwHNA/YufZD7NnfqPvSzfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNDA5NDk1NloX DTI0MTAxMjA5NTQ1NlowMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMx MEQ5OEY2RTczNDU3NzM5REYxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzjAgPrWTByvLLfuF76KpFP+zMbncIl9MjJrzWMCKm+4flD7QZmDEKbU6Jz joylRQRnQ6slnbHFvWkCEZaW/qwz72a9vxcafOJPHqp/bBKwvbqrybw9HSGT0g4o dd4tfxMSdtDjiq/Cqpn5JohFIqhvKizCgjwyWPR0rxX35xDY8dcfa+wiO0mnTf0j 2qqtvbgCYbpNhCniTlbqQOTFitoFghgBM/YMDMHWqKDaTQKsth/0YOF1A7mkcNY7 C3r4Gw7XRtgEOv4ve34iw33VBbT/zzgsVcMqlXuspjX70NMPT5eoTwPZQ1soaLS7 8298Rn/1HafX03RuKNNcy8o/e48CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOB9MzNFzX0w8dwQ2Y9uc0V3Od8YMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNjI4ODBl LWQ1ZjItNDA2OS04OGZmLTEyNjdiN2NjMDFjNS8wL0UwN0QzMzMzNDVDRDdEMzBG MURDMTBEOThGNkU3MzQ1NzczOURGMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrxgwDQYJKoZIhvcNAQELBQADggEBAJVJzKFEpdQloJS6fTXSBOulyr5IbbeA 8pNtHNQOLJEABFS7OAtXzk+V9Qxy4SqRMsZ4UIVcYB168BlRpQ2S6RoSE9vZJLcv /BIHvVs0/u6fpSHCoa3tUnoHPeu2960yMGxhjP0uO8mV9raFIEydX7//rIEKzbwR 4hxg8HocoP84ATWZDIL1Yjumh15CG306MHxP6oCyQtTZHTj5TV89eF77C7WgK52N CRT9LXCNz97vX3TNl27UetSaTY4ze06AhChtN/I9XWiTUwulegO5nSnQiAIrcm8S 50xx8241TllqO1k5Tc5oypk7xsjDbdtBp1wKFA7s/db3riomKBx5Blg= -----END CERTIFICATE-----Generated at Thu May 9 00:37:11 2024 by rpki-client on console-fra.rpki-client.org