$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer (raw, json) Hash identifier: zK4sDYMzwZVnid7Mh3oRdyXQ//tce/LiBr3buLrjoFA= Subject key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F6ACB17DFBC495EA70155D7AF5BD3D850A016E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft caRepository: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 Nov 2023 08:59:32 +0000 Certificate not after: Fri 15 Nov 2024 09:04:32 +0000 Subordinate resources: IP: 103.189.222.0/23 IP: 2001:df1:9ec0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6a:cb:17:df:bc:49:5e:a7:01:55:d7:af:5b:d3:d8:50:a0:16:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 17 08:59:32 2023 GMT Not After : Nov 15 09:04:32 2024 GMT Subject: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:15:5f:28:04:89:07:32:2b:bc:3b:03:2f: 27:96:c5:f3:05:b5:5d:ec:de:84:fa:f3:8d:0a:58: 51:d5:4e:a9:b9:dc:60:ec:78:e3:cf:dc:55:a0:e9: 7c:01:80:31:8c:d1:9e:07:a7:47:07:39:a9:0d:43: c0:05:cc:fe:1e:7b:4b:63:95:4d:28:93:2d:4f:e6: 02:6a:d2:aa:1f:93:11:38:81:f7:38:fa:c3:1b:50: e8:ec:25:f2:43:30:ec:14:92:bc:38:39:7b:83:b0: 69:a4:af:91:d1:46:6d:2f:1a:d1:47:26:6a:4a:e8: ad:ba:fd:08:91:9c:5e:f3:0c:cc:34:dd:96:16:c9: c6:33:1e:0a:19:f5:6d:8e:05:3f:97:77:5b:b0:91: bf:d6:09:c9:1b:73:0f:97:32:49:a0:36:fc:16:0b: 45:56:36:cb:2a:37:ef:86:26:a3:01:55:01:29:5a: 3f:ac:d9:f7:40:20:e9:b4:c2:9c:1d:6d:8a:b2:b3: 2d:2a:b7:7c:5e:ca:5f:d9:e1:da:08:03:3e:a3:0d: 9d:f1:a1:f5:52:98:bd:f7:9f:d7:39:a8:b5:b4:f5: cf:4c:70:06:4e:e4:49:18:7c:f5:59:42:b5:82:1a: f3:28:40:3f:44:60:9e:e8:43:8c:0e:2f:8c:60:39: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.222.0/23 IPv6: 2001:df1:9ec0::/48 Signature Algorithm: sha256WithRSAEncryption 66:55:31:7e:de:5c:c6:ee:97:58:e5:6e:62:16:12:44:1b:54: c9:a1:0f:21:77:91:78:cb:6a:fc:ee:d1:8a:31:c8:05:02:da: 35:05:56:f4:d3:10:ae:8c:0c:2b:50:46:f0:ea:8b:40:84:d5: 76:af:2f:33:15:0c:1d:94:49:33:2e:72:19:e4:a1:d1:48:6d: 70:ed:6b:da:55:31:2e:d3:82:c2:a3:93:bb:5c:60:19:8b:06: a1:be:3e:86:ee:e0:50:6a:fe:ce:fd:cc:82:7e:d8:fd:5a:13: 63:32:e6:d1:ee:0a:8a:ac:1c:bc:3c:4a:ad:34:9b:6b:b3:52: 80:d3:2d:cb:25:ca:ac:1a:89:a0:d1:7d:44:a6:ed:a3:02:ba: d8:6f:85:c1:0a:92:31:78:01:4b:93:ca:52:80:be:a5:40:74: 88:68:e0:3b:75:38:48:87:a8:cf:a2:ef:17:c8:7a:4e:89:67: 16:04:a9:56:f6:54:19:6b:e5:c1:fc:ae:ab:af:e4:a4:76:4f: f1:48:93:5a:54:49:03:fa:83:9f:ce:fe:b3:51:51:c4:61:44: af:7c:61:d4:61:73:24:4a:3b:76:fb:12:d6:a1:af:77:e4:a3: 7a:4b:6a:82:83:9c:74:93:b8:de:13:05:93:da:fe:fe:cc:c3: 89:a7:d4:d3 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUf2rLF9+8SV6nAVXXr1vT2FCgFuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNzA4NTkzMloX DTI0MTExNTA5MDQzMlowMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBG NUNFRDNBNDMwOTIzNEEwRjFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzqFV8oBIkHMiu8OwMvJ5bF8wW1XezehPrzjQpYUdVOqbncYOx448/cVaDp fAGAMYzRngenRwc5qQ1DwAXM/h57S2OVTSiTLU/mAmrSqh+TETiB9zj6wxtQ6Owl 8kMw7BSSvDg5e4OwaaSvkdFGbS8a0Ucmakrorbr9CJGcXvMMzDTdlhbJxjMeChn1 bY4FP5d3W7CRv9YJyRtzD5cySaA2/BYLRVY2yyo374YmowFVASlaP6zZ90Ag6bTC nB1tirKzLSq3fF7KX9nh2ggDPqMNnfGh9VKYvfef1zmotbT1z0xwBk7kSRh89VlC tYIa8yhAP0RgnuhDjA4vjGA53+8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOH+aaNCFsJNGHD1ztOkMJI0oPGyMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4OGUzYTE3 LTFjOTEtNDc5My04M2M0LTIxMWQ0MjEwYWVhOC8wL0UxRkU2OUEzNDIxNkMyNEQx ODcwRjVDRUQzQTQzMDkyMzRBMEYxQjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvd4wDwQCAAIwCQMHACABDfGewDANBgkqhkiG9w0BAQsFAAOCAQEAZlUxft5c xu6XWOVuYhYSRBtUyaEPIXeReMtq/O7RijHIBQLaNQVW9NMQrowMK1BG8OqLQITV dq8vMxUMHZRJMy5yGeSh0UhtcO1r2lUxLtOCwqOTu1xgGYsGob4+hu7gUGr+zv3M gn7Y/VoTYzLm0e4KiqwcvDxKrTSba7NSgNMtyyXKrBqJoNF9RKbtowK62G+FwQqS MXgBS5PKUoC+pUB0iGjgO3U4SIeoz6LvF8h6TolnFgSpVvZUGWvlwfyuq6/kpHZP 8UiTWlRJA/qDn87+s1FRxGFEr3xh1GFzJEo7dvsS1qGvd+SjektqgoOcdJO43hMF k9r+/szDiafU0w== -----END CERTIFICATE-----Generated at Thu May 9 00:37:11 2024 by rpki-client on console-fra.rpki-client.org