$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer File: E118E8E6144A59677DB6D05BDF713DB23BC61342.cer (raw, json) Hash identifier: O5jc3K99VqZM0hKmOv5Zuh0xob+vJqSg5teQFyfq3NI= Subject key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 485B8F01B45C1A9401851A4C8EA70F7AA306FD4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft caRepository: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Aug 2023 13:37:22 +0000 Certificate not after: Thu 29 Aug 2024 13:42:22 +0000 Subordinate resources: IP: 103.174.18.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5b:8f:01:b4:5c:1a:94:01:85:1a:4c:8e:a7:0f:7a:a3:06:fd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 31 13:37:22 2023 GMT Not After : Aug 29 13:42:22 2024 GMT Subject: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:ca:e6:64:74:c1:60:55:aa:80:69:c6:9d: f0:7c:06:53:3b:a6:77:af:2e:7c:1f:26:8c:00:2f: 0c:51:c8:69:fd:26:46:53:f6:ce:0b:9a:cf:bd:c4: df:15:7c:3a:c7:bc:b9:00:44:5e:d6:97:e2:61:5a: 2a:bb:bc:69:44:5c:6a:28:65:df:9f:86:b3:80:49: 15:b8:d5:c5:25:f1:62:a7:ef:15:ce:12:06:c9:79: d9:d1:93:c0:9b:f3:2d:43:ce:b0:0c:b0:7e:fa:6e: df:22:ce:29:70:26:82:ca:e9:41:a3:04:eb:f4:10: 68:ee:48:a5:8d:fb:52:47:cd:4a:82:d5:5a:c0:26: bd:ab:78:65:ac:d9:20:7b:ae:04:8f:96:34:a1:71: 38:5b:46:df:f3:32:6f:47:24:38:f3:ac:cb:27:47: 30:a8:6d:dd:13:6d:7f:54:cf:63:c6:b5:3e:90:d7: 97:9e:58:09:63:6d:9a:1d:b3:69:b8:20:76:92:3f: 44:12:c3:3a:4c:cb:e3:d2:ec:72:59:92:07:08:9a: f0:59:58:19:62:cb:63:af:c0:cb:fa:f4:71:1b:34: c8:22:42:0c:f4:13:53:52:28:a0:92:bf:1b:09:8f: a5:fb:9f:48:1f:71:5a:33:5c:c1:25:52:6e:3d:51: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.18.0/23 Signature Algorithm: sha256WithRSAEncryption 04:7a:fb:3b:ee:4d:60:c9:e3:98:bd:f5:0d:26:43:da:d6:f6: d3:50:96:5a:33:1a:4a:79:b3:18:56:ab:5e:b1:7b:88:88:77: 2e:b2:d7:8b:c1:a7:80:39:a4:54:e1:09:85:07:ec:4c:df:11: 13:45:97:b6:17:04:bd:1a:53:a5:8d:7b:e7:ab:03:4e:54:e1: cb:dd:0d:01:82:fe:18:a2:dd:44:da:94:2a:de:05:44:b7:37: 05:a6:17:5a:03:9f:05:60:62:c0:75:29:c6:a1:dc:c9:e3:3e: a1:02:52:5c:06:c1:bc:ad:d1:fc:6a:4d:e1:e1:a7:45:35:5a: c8:99:86:cb:23:7a:c9:7f:3e:9e:82:0c:36:79:c9:72:06:0a: 65:a3:ba:72:80:ea:de:1d:82:33:32:a3:02:a4:d0:20:3d:c6: 53:a2:22:1e:56:3a:9e:8d:1d:8a:3f:b2:5b:39:26:22:08:2c: ef:f7:c3:96:6f:f0:35:dd:e9:20:05:27:b2:a7:6a:19:14:38: 65:9c:e0:bb:70:3c:8e:0f:00:b1:dd:c3:e2:e5:10:e7:86:55: 0e:af:1f:93:8e:4e:26:43:7c:7a:d9:1c:99:38:e3:60:e4:b4: c8:37:1f:75:e8:c4:9a:78:12:10:16:b4:8b:50:d4:95:96:61: f5:d1:87:c9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSFuPAbRcGpQBhRpMjqcPeqMG/U8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgzMTEzMzcyMloX DTI0MDgyOTEzNDIyMlowMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZE MDVCREY3MTNEQjIzQkM2MTM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqAyuZkdMFgVaqAacad8HwGUzumd68ufB8mjAAvDFHIaf0mRlP2zguaz73E 3xV8Ose8uQBEXtaX4mFaKru8aURcaihl35+Gs4BJFbjVxSXxYqfvFc4SBsl52dGT wJvzLUPOsAywfvpu3yLOKXAmgsrpQaME6/QQaO5IpY37UkfNSoLVWsAmvat4ZazZ IHuuBI+WNKFxOFtG3/Myb0ckOPOsyydHMKht3RNtf1TPY8a1PpDXl55YCWNtmh2z abggdpI/RBLDOkzL49LsclmSBwia8FlYGWLLY6/Ay/r0cRs0yCJCDPQTU1IooJK/ GwmPpfufSB9xWjNcwSVSbj1R6jkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOEY6OYUSllnfbbQW99xPbI7xhNCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwMWRiYWZj LWMwY2MtNDk2YS1iNWUwLTRmNDhiYTk0NmNkMy8wL0UxMThFOEU2MTQ0QTU5Njc3 REI2RDA1QkRGNzEzREIyM0JDNjEzNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhIwDQYJKoZIhvcNAQELBQADggEBAAR6+zvuTWDJ45i99Q0mQ9rW9tNQlloz Gkp5sxhWq16xe4iIdy6y14vBp4A5pFThCYUH7EzfERNFl7YXBL0aU6WNe+erA05U 4cvdDQGC/hii3UTalCreBUS3NwWmF1oDnwVgYsB1Kcah3MnjPqECUlwGwbyt0fxq TeHhp0U1WsiZhssjesl/Pp6CDDZ5yXIGCmWjunKA6t4dgjMyowKk0CA9xlOiIh5W Op6NHYo/sls5JiIILO/3w5Zv8DXd6SAFJ7KnahkUOGWc4LtwPI4PALHdw+LlEOeG VQ6vH5OOTiZDfHrZHJk442DktMg3H3XoxJp4EhAWtItQ1JWWYfXRh8k= -----END CERTIFICATE-----Generated at Fri May 3 03:08:34 2024 by rpki-client on console-ams.rpki-client.org