$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer (raw, json) Hash identifier: y3o6bKl3kH2fCqxX1AM98dKpX5IurZDOr1cmCRGLugM= Subject key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66863C2B9598AA520F6AA980089D09E600974A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Nov 2023 13:31:51 +0000 Certificate not after: Tue 19 Nov 2024 13:36:51 +0000 Subordinate resources: IP: 103.178.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:86:3c:2b:95:98:aa:52:0f:6a:a9:80:08:9d:09:e6:00:97:4a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 13:31:51 2023 GMT Not After : Nov 19 13:36:51 2024 GMT Subject: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:c8:8f:09:30:3a:17:3c:8f:06:db:73:23: 3d:9c:14:f0:54:5e:8e:6b:2c:2a:88:90:d4:aa:78: d5:5b:c9:6e:6e:8e:41:6b:2a:b6:d2:87:a7:0a:cd: d6:11:c1:ae:01:c7:c9:7e:a6:74:cd:c7:df:c1:6e: 2b:29:ba:fa:69:ee:fe:7c:e2:62:4b:e8:8a:dc:32: 9f:7b:aa:96:13:fe:13:80:ce:7d:35:02:74:e7:7b: e8:33:95:10:28:30:ba:48:3d:53:7d:ab:24:c8:e7: aa:a5:f3:f6:31:07:aa:1a:1a:99:0e:3a:3c:b7:f6: fe:39:45:fe:06:68:e1:82:80:1e:bf:85:8d:07:06: 0f:55:37:3d:8f:34:03:ff:83:3b:8c:62:43:bf:fd: a0:3c:71:b4:fe:0b:6b:8d:80:d1:e6:50:99:9b:99: 5e:c3:84:0f:f8:02:7f:a7:a9:3b:9f:2c:5b:95:8c: 09:3f:8c:c8:99:75:23:6d:21:87:52:1e:ef:9f:19: 42:fc:38:1a:99:74:75:25:b6:9c:b3:96:c1:ce:ec: 7e:30:d0:47:a3:37:a7:63:9e:c9:7f:78:f8:0c:da: f1:b6:e9:27:0e:a1:a1:39:34:94:62:f7:bb:cf:0c: 61:a2:9e:25:8c:89:36:f2:e4:47:ca:c2:ad:73:c7: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.170.0/23 Signature Algorithm: sha256WithRSAEncryption 15:b9:4e:78:d7:69:7d:a0:1a:e2:50:5e:7b:dc:75:3e:72:b8: 10:32:38:77:50:9c:5e:db:99:42:12:75:b0:2a:86:bd:6a:a2: 96:46:28:01:10:4a:31:18:6d:7b:d1:1e:fe:d3:45:dc:95:8b: 9c:f7:1d:55:c1:79:a7:fe:48:51:cd:d9:4a:f9:88:57:22:ae: 70:b0:5c:50:03:af:9c:9a:bc:f0:01:40:62:e0:46:87:3d:f4: 19:67:98:20:16:73:88:2c:de:69:a3:d4:d8:90:08:24:53:be: 1c:34:31:83:b5:17:0a:21:c9:e9:55:6f:25:b6:7c:68:9f:0a: cc:21:5f:98:bc:d2:55:25:e7:a6:ae:1b:63:b1:53:dd:60:c6: ac:31:a3:dc:9e:1f:2d:b9:8a:71:0b:37:10:82:d3:1f:20:4e: 15:c2:16:3f:a9:a7:c3:48:df:3c:b3:8c:cd:0a:0b:ca:34:1e: 16:97:61:7d:43:5a:4f:7c:e2:de:81:52:75:e0:3c:d3:33:81: 72:d1:b4:89:c0:9c:2f:93:6a:78:23:fd:56:0b:e5:6a:b8:80: 60:94:53:0c:ea:cc:c1:6f:71:45:53:bd:9f:a0:e1:5e:8e:37: 63:e1:8a:85:58:c1:ae:4d:eb:bb:c9:21:9b:03:9d:dc:38:48: d9:81:d2:ee -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZoY8K5WYqlIPaqmACJ0J5gCXSpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMTEzMzE1MVoX DTI0MTExOTEzMzY1MVowMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0 RTBDQUE3RTVFNTBEMDIyNDZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD8yI8JMDoXPI8G23MjPZwU8FRejmssKoiQ1Kp41VvJbm6OQWsqttKHpwrN 1hHBrgHHyX6mdM3H38FuKym6+mnu/nziYkvoitwyn3uqlhP+E4DOfTUCdOd76DOV ECgwukg9U32rJMjnqqXz9jEHqhoamQ46PLf2/jlF/gZo4YKAHr+FjQcGD1U3PY80 A/+DO4xiQ7/9oDxxtP4La42A0eZQmZuZXsOED/gCf6epO58sW5WMCT+MyJl1I20h h1Ie758ZQvw4Gpl0dSW2nLOWwc7sfjDQR6M3p2OeyX94+Aza8bbpJw6hoTk0lGL3 u88MYaKeJYyJNvLkR8rCrXPHcT8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCdDh0mPb2RTQxODKp+XlDQIkbxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDFmZDQ0 LThjZDYtNGQ5Zi05YmQxLTgzNjdhZDljZDllYS8wL0UwOUQwRTFEMjYzREJEOTE0 RDBDNEUwQ0FBN0U1RTUwRDAyMjQ2RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsqowDQYJKoZIhvcNAQELBQADggEBABW5TnjXaX2gGuJQXnvcdT5yuBAyOHdQ nF7bmUISdbAqhr1qopZGKAEQSjEYbXvRHv7TRdyVi5z3HVXBeaf+SFHN2Ur5iFci rnCwXFADr5yavPABQGLgRoc99BlnmCAWc4gs3mmj1NiQCCRTvhw0MYO1FwohyelV byW2fGifCswhX5i80lUl56auG2OxU91gxqwxo9yeHy25inELNxCC0x8gThXCFj+p p8NI3zyzjM0KC8o0HhaXYX1DWk984t6BUnXgPNMzgXLRtInAnC+Tangj/VYL5Wq4 gGCUUwzqzMFvcUVTvZ+g4V6ON2PhioVYwa5N67vJIZsDndw4SNmB0u4= -----END CERTIFICATE-----Generated at Thu May 9 00:29:18 2024 by rpki-client on console-ams.rpki-client.org