$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer File: E07D333345CD7D30F1DC10D98F6E73457739DF18.cer (raw, json) Hash identifier: 0KElqpErB5zAcQlQ2SbVp8YC8r8DgfnRUoE1Q0Ojzq4= Subject key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E35B85BFC720440A4FD97AB41621EE8D8D2D074 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Sep 2024 12:12:12 +0000 Certificate not after: Sat 13 Sep 2025 12:17:12 +0000 Subordinate resources: IP: 103.175.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:35:b8:5b:fc:72:04:40:a4:fd:97:ab:41:62:1e:e8:d8:d2:d0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 14 12:12:12 2024 GMT Not After : Sep 13 12:17:12 2025 GMT Subject: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:02:03:eb:59:30:72:bc:b2:df:b8:5e:fa: 2a:91:4f:fb:33:1b:9d:c2:25:f4:c8:c9:af:35:8c: 08:a9:be:e1:f9:43:ed:06:66:0c:42:9b:53:a2:73: 8e:8c:a5:45:04:67:43:ab:25:9d:b1:c5:bd:69:02: 11:96:96:fe:ac:33:ef:66:bd:bf:17:1a:7c:e2:4f: 1e:aa:7f:6c:12:b0:bd:ba:ab:c9:bc:3d:1d:21:93: d2:0e:28:75:de:2d:7f:13:12:76:d0:e3:8a:af:c2: aa:99:f9:26:88:45:22:a8:6f:2a:2c:c2:82:3c:32: 58:f4:74:af:15:f7:e7:10:d8:f1:d7:1f:6b:ec:22: 3b:49:a7:4d:fd:23:da:aa:ad:bd:b8:02:61:ba:4d: 84:29:e2:4e:56:ea:40:e4:c5:8a:da:05:82:18:01: 33:f6:0c:0c:c1:d6:a8:a0:da:4d:02:ac:b6:1f:f4: 60:e1:75:03:b9:a4:70:d6:3b:0b:7a:f8:1b:0e:d7: 46:d8:04:3a:fe:2f:7b:7e:22:c3:7d:d5:05:b4:ff: cf:38:2c:55:c3:2a:95:7b:ac:a6:35:fb:d0:d3:0f: 4f:97:a8:4f:03:d9:43:5b:28:68:b4:bb:f3:6f:7c: 46:7f:f5:1d:a7:d7:d3:74:6e:28:d3:5c:cb:ca:3f: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.24.0/23 Signature Algorithm: sha256WithRSAEncryption 91:02:71:83:0c:dc:f8:1d:b3:96:cf:76:70:54:ec:24:0b:e1: b7:6e:fe:74:72:ef:8e:49:61:c7:95:6c:31:9e:c2:6c:ab:84: 29:38:8c:93:1b:32:81:3c:07:7b:dc:ee:54:45:a9:c8:9a:12: 2f:76:33:32:87:cb:03:e2:85:6c:02:df:87:b6:29:c4:29:a3: 02:ba:5b:cc:03:e4:38:07:cd:fb:a2:a8:58:bf:f6:71:cf:44: 43:7c:98:54:a8:ee:cb:1e:aa:03:c8:91:ff:f3:b9:2d:57:c8: 1e:10:bf:6b:2a:80:83:4a:9f:19:10:ef:0e:b5:e0:23:f0:2d: 94:87:72:53:f8:1f:8c:c6:89:c0:df:f1:a4:2e:47:1a:68:28: e6:bc:5e:4e:64:5a:8b:26:a4:34:12:12:ad:f2:48:e0:66:fc: 1c:f9:9d:c2:3b:76:18:a2:02:d8:f3:7a:66:a3:c2:d0:d0:0b: 2c:b3:49:58:5e:35:b8:64:e6:02:86:ea:88:cb:b8:f1:ae:72: 23:9f:3c:e3:34:8b:fd:6a:7f:58:9e:d3:da:57:ad:62:36:f0: f9:0a:76:4e:78:35:34:5f:d1:a1:53:67:f9:88:49:26:f8:77: 1e:fe:5a:9b:a6:ee:e7:97:65:e3:12:d5:f6:d0:b1:33:39:27: 2f:a1:35:b5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXjW4W/xyBECk/ZerQWIe6NjS0HQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNDEyMTIxMloX DTI1MDkxMzEyMTcxMlowMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMx MEQ5OEY2RTczNDU3NzM5REYxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzjAgPrWTByvLLfuF76KpFP+zMbncIl9MjJrzWMCKm+4flD7QZmDEKbU6Jz joylRQRnQ6slnbHFvWkCEZaW/qwz72a9vxcafOJPHqp/bBKwvbqrybw9HSGT0g4o dd4tfxMSdtDjiq/Cqpn5JohFIqhvKizCgjwyWPR0rxX35xDY8dcfa+wiO0mnTf0j 2qqtvbgCYbpNhCniTlbqQOTFitoFghgBM/YMDMHWqKDaTQKsth/0YOF1A7mkcNY7 C3r4Gw7XRtgEOv4ve34iw33VBbT/zzgsVcMqlXuspjX70NMPT5eoTwPZQ1soaLS7 8298Rn/1HafX03RuKNNcy8o/e48CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOB9MzNFzX0w8dwQ2Y9uc0V3Od8YMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNjI4ODBl LWQ1ZjItNDA2OS04OGZmLTEyNjdiN2NjMDFjNS8wL0UwN0QzMzMzNDVDRDdEMzBG MURDMTBEOThGNkU3MzQ1NzczOURGMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrxgwDQYJKoZIhvcNAQELBQADggEBAJECcYMM3Pgds5bPdnBU7CQL4bdu/nRy 745JYceVbDGewmyrhCk4jJMbMoE8B3vc7lRFqciaEi92MzKHywPihWwC34e2KcQp owK6W8wD5DgHzfuiqFi/9nHPREN8mFSo7sseqgPIkf/zuS1XyB4Qv2sqgINKnxkQ 7w614CPwLZSHclP4H4zGicDf8aQuRxpoKOa8Xk5kWosmpDQSEq3ySOBm/Bz5ncI7 dhiiAtjzemajwtDQCyyzSVheNbhk5gKG6ojLuPGuciOfPOM0i/1qf1ie09pXrWI2 8PkKdk54NTRf0aFTZ/mISSb4dx7+Wpum7ueXZeMS1fbQsTM5Jy+hNbU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org