$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer (raw, json) Hash identifier: 3AcAa7n1IHj0h3M+/W9BeqxQ8W/PtWASucmEdacyoxc= Subject key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BBD89D9A1D66C5D4586DF8BA8A4004F0E3AE8B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 23 Oct 2024 04:01:58 +0000 Certificate not after: Wed 22 Oct 2025 04:06:58 +0000 Subordinate resources: IP: 103.178.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bd:89:d9:a1:d6:6c:5d:45:86:df:8b:a8:a4:00:4f:0e:3a:e8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 23 04:01:58 2024 GMT Not After : Oct 22 04:06:58 2025 GMT Subject: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:c8:8f:09:30:3a:17:3c:8f:06:db:73:23: 3d:9c:14:f0:54:5e:8e:6b:2c:2a:88:90:d4:aa:78: d5:5b:c9:6e:6e:8e:41:6b:2a:b6:d2:87:a7:0a:cd: d6:11:c1:ae:01:c7:c9:7e:a6:74:cd:c7:df:c1:6e: 2b:29:ba:fa:69:ee:fe:7c:e2:62:4b:e8:8a:dc:32: 9f:7b:aa:96:13:fe:13:80:ce:7d:35:02:74:e7:7b: e8:33:95:10:28:30:ba:48:3d:53:7d:ab:24:c8:e7: aa:a5:f3:f6:31:07:aa:1a:1a:99:0e:3a:3c:b7:f6: fe:39:45:fe:06:68:e1:82:80:1e:bf:85:8d:07:06: 0f:55:37:3d:8f:34:03:ff:83:3b:8c:62:43:bf:fd: a0:3c:71:b4:fe:0b:6b:8d:80:d1:e6:50:99:9b:99: 5e:c3:84:0f:f8:02:7f:a7:a9:3b:9f:2c:5b:95:8c: 09:3f:8c:c8:99:75:23:6d:21:87:52:1e:ef:9f:19: 42:fc:38:1a:99:74:75:25:b6:9c:b3:96:c1:ce:ec: 7e:30:d0:47:a3:37:a7:63:9e:c9:7f:78:f8:0c:da: f1:b6:e9:27:0e:a1:a1:39:34:94:62:f7:bb:cf:0c: 61:a2:9e:25:8c:89:36:f2:e4:47:ca:c2:ad:73:c7: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.170.0/23 Signature Algorithm: sha256WithRSAEncryption 02:87:4a:2d:35:33:35:d4:47:e8:c5:9f:a4:36:4c:e8:4b:1c: 6b:3d:2c:4a:44:8e:73:87:33:de:39:64:da:83:5b:6c:da:34: 8b:b8:8f:80:37:dc:6d:16:3a:f1:be:65:f1:16:81:76:bd:9c: 17:4f:6c:fc:57:1f:4d:ad:02:33:35:3d:c3:46:0c:57:36:75: e6:93:89:7a:d3:39:ca:d5:a6:a2:69:85:37:d0:8b:27:9d:d4: 6b:e1:71:80:10:32:b6:17:be:f4:95:58:c0:04:16:c7:67:e3: d1:a0:8e:89:dd:0f:dd:65:2e:38:26:85:a1:13:28:d5:e6:30: 79:26:05:e6:52:8d:2c:dd:69:2c:0e:4c:96:85:43:b6:a8:88: 8e:ca:e0:0f:15:21:6e:77:96:95:44:fe:11:7d:14:17:6b:e5: 9d:42:6f:5c:75:50:6b:5a:bb:39:61:0a:26:34:0e:ce:7e:98: 74:b1:95:1e:a5:71:12:88:89:65:48:ce:91:b6:86:42:00:6b: f6:ed:7d:45:82:1d:d1:56:eb:57:46:47:44:cb:56:d2:8a:b8: dc:3a:f7:ef:f4:27:e8:f6:2a:31:36:eb:ca:09:26:98:47:52: 3f:2c:5f:5a:9b:23:61:b2:99:fa:f9:fc:a6:66:a6:cc:59:81: a5:6d:63:d2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG72J2aHWbF1Fht+LqKQATw466LAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMzA0MDE1OFoX DTI1MTAyMjA0MDY1OFowMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0 RTBDQUE3RTVFNTBEMDIyNDZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD8yI8JMDoXPI8G23MjPZwU8FRejmssKoiQ1Kp41VvJbm6OQWsqttKHpwrN 1hHBrgHHyX6mdM3H38FuKym6+mnu/nziYkvoitwyn3uqlhP+E4DOfTUCdOd76DOV ECgwukg9U32rJMjnqqXz9jEHqhoamQ46PLf2/jlF/gZo4YKAHr+FjQcGD1U3PY80 A/+DO4xiQ7/9oDxxtP4La42A0eZQmZuZXsOED/gCf6epO58sW5WMCT+MyJl1I20h h1Ie758ZQvw4Gpl0dSW2nLOWwc7sfjDQR6M3p2OeyX94+Aza8bbpJw6hoTk0lGL3 u88MYaKeJYyJNvLkR8rCrXPHcT8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCdDh0mPb2RTQxODKp+XlDQIkbxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDFmZDQ0 LThjZDYtNGQ5Zi05YmQxLTgzNjdhZDljZDllYS8wL0UwOUQwRTFEMjYzREJEOTE0 RDBDNEUwQ0FBN0U1RTUwRDAyMjQ2RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsqowDQYJKoZIhvcNAQELBQADggEBAAKHSi01MzXUR+jFn6Q2TOhLHGs9LEpE jnOHM945ZNqDW2zaNIu4j4A33G0WOvG+ZfEWgXa9nBdPbPxXH02tAjM1PcNGDFc2 deaTiXrTOcrVpqJphTfQiyed1GvhcYAQMrYXvvSVWMAEFsdn49GgjondD91lLjgm haETKNXmMHkmBeZSjSzdaSwOTJaFQ7aoiI7K4A8VIW53lpVE/hF9FBdr5Z1Cb1x1 UGtauzlhCiY0Ds5+mHSxlR6lcRKIiWVIzpG2hkIAa/btfUWCHdFW61dGR0TLVtKK uNw69+/0J+j2KjE268oJJphHUj8sX1qbI2Gymfr5/KZmpsxZgaVtY9I= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:16 2025 by rpki-client