$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer File: E118E8E6144A59677DB6D05BDF713DB23BC61342.cer (raw, json) Hash identifier: +ma4wJz5sSz65QBQPnqQ5pm/mwunsx3mzIYCVRbWtTw= Subject key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E306473334D55FA5B5DA381F809CFE2BA7A48CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft caRepository: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 14:10:25 +0000 Certificate not after: Thu 31 Jul 2025 14:15:25 +0000 Subordinate resources: IP: 103.174.18.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:30:64:73:33:4d:55:fa:5b:5d:a3:81:f8:09:cf:e2:ba:7a:48:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 14:10:25 2024 GMT Not After : Jul 31 14:15:25 2025 GMT Subject: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:ca:e6:64:74:c1:60:55:aa:80:69:c6:9d: f0:7c:06:53:3b:a6:77:af:2e:7c:1f:26:8c:00:2f: 0c:51:c8:69:fd:26:46:53:f6:ce:0b:9a:cf:bd:c4: df:15:7c:3a:c7:bc:b9:00:44:5e:d6:97:e2:61:5a: 2a:bb:bc:69:44:5c:6a:28:65:df:9f:86:b3:80:49: 15:b8:d5:c5:25:f1:62:a7:ef:15:ce:12:06:c9:79: d9:d1:93:c0:9b:f3:2d:43:ce:b0:0c:b0:7e:fa:6e: df:22:ce:29:70:26:82:ca:e9:41:a3:04:eb:f4:10: 68:ee:48:a5:8d:fb:52:47:cd:4a:82:d5:5a:c0:26: bd:ab:78:65:ac:d9:20:7b:ae:04:8f:96:34:a1:71: 38:5b:46:df:f3:32:6f:47:24:38:f3:ac:cb:27:47: 30:a8:6d:dd:13:6d:7f:54:cf:63:c6:b5:3e:90:d7: 97:9e:58:09:63:6d:9a:1d:b3:69:b8:20:76:92:3f: 44:12:c3:3a:4c:cb:e3:d2:ec:72:59:92:07:08:9a: f0:59:58:19:62:cb:63:af:c0:cb:fa:f4:71:1b:34: c8:22:42:0c:f4:13:53:52:28:a0:92:bf:1b:09:8f: a5:fb:9f:48:1f:71:5a:33:5c:c1:25:52:6e:3d:51: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.18.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:75:b7:20:ec:3f:38:18:d5:1d:84:d3:a4:45:a4:78:4a:5b: 4c:36:e7:f1:8e:18:7e:60:a8:db:85:bd:cb:4a:03:f3:89:2f: 8b:d2:d5:e3:6a:2c:bc:a8:e7:eb:7d:a6:7c:04:34:77:ff:90: c8:09:ae:0a:6c:c3:62:ac:6a:3b:19:9f:bf:b5:13:1e:1f:96: dd:cf:f9:f4:ca:7f:fa:5c:1b:21:8d:91:05:09:8e:fb:51:c5: 34:6b:67:62:24:13:41:8d:df:88:ce:e0:91:f1:c5:33:73:7d: 62:3e:4f:a7:21:41:b9:4b:15:a2:51:5d:f1:05:25:3f:df:7f: 9d:41:72:6f:01:c2:4a:d8:63:d3:a9:c7:b7:64:51:7b:1a:d5: 27:e1:29:9e:82:10:ca:92:75:ff:0a:64:20:a4:9f:41:ca:e8: 14:4e:e9:2e:57:53:17:31:f7:45:d5:bd:85:4f:ba:cf:24:e7: b5:46:92:56:a5:9d:1b:f5:5d:5b:eb:92:4d:4c:a8:8d:e1:e1: b5:19:11:c8:b8:78:91:95:72:6c:4f:c3:62:a9:92:e7:de:5e: 85:28:16:37:87:d8:33:55:ae:56:5e:d4:8e:43:52:d3:75:f1: 64:3a:f9:74:61:2b:f8:c1:ec:f6:b8:f6:04:d2:d6:65:0e:47: f1:eb:b4:30 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXjBkczNNVfpbXaOB+AnP4rp6SMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwMTE0MTAyNVoX DTI1MDczMTE0MTUyNVowMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZE MDVCREY3MTNEQjIzQkM2MTM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqAyuZkdMFgVaqAacad8HwGUzumd68ufB8mjAAvDFHIaf0mRlP2zguaz73E 3xV8Ose8uQBEXtaX4mFaKru8aURcaihl35+Gs4BJFbjVxSXxYqfvFc4SBsl52dGT wJvzLUPOsAywfvpu3yLOKXAmgsrpQaME6/QQaO5IpY37UkfNSoLVWsAmvat4ZazZ IHuuBI+WNKFxOFtG3/Myb0ckOPOsyydHMKht3RNtf1TPY8a1PpDXl55YCWNtmh2z abggdpI/RBLDOkzL49LsclmSBwia8FlYGWLLY6/Ay/r0cRs0yCJCDPQTU1IooJK/ GwmPpfufSB9xWjNcwSVSbj1R6jkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOEY6OYUSllnfbbQW99xPbI7xhNCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwMWRiYWZj LWMwY2MtNDk2YS1iNWUwLTRmNDhiYTk0NmNkMy8wL0UxMThFOEU2MTQ0QTU5Njc3 REI2RDA1QkRGNzEzREIyM0JDNjEzNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhIwDQYJKoZIhvcNAQELBQADggEBAIx1tyDsPzgY1R2E06RFpHhKW0w25/GO GH5gqNuFvctKA/OJL4vS1eNqLLyo5+t9pnwENHf/kMgJrgpsw2KsajsZn7+1Ex4f lt3P+fTKf/pcGyGNkQUJjvtRxTRrZ2IkE0GN34jO4JHxxTNzfWI+T6chQblLFaJR XfEFJT/ff51Bcm8BwkrYY9Opx7dkUXsa1SfhKZ6CEMqSdf8KZCCkn0HK6BRO6S5X Uxcx90XVvYVPus8k57VGklalnRv1XVvrkk1MqI3h4bUZEci4eJGVcmxPw2Kpkufe XoUoFjeH2DNVrlZe1I5DUtN18WQ6+XRhK/jB7Pa49gTS1mUOR/HrtDA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org