$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer File: E2111F10F01C17C4A322DAF5076425FBD824219D.cer (raw, json) Hash identifier: rbaErN8qlXig3tVUlBMocxP39l+6YIA9LpU+HRwDeLI= Subject key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E7601014C704AACFBA12355A0677410CCC578F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft caRepository: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 17 Sep 2023 14:11:28 +0000 Certificate not after: Sun 15 Sep 2024 14:16:28 +0000 Subordinate resources: IP: 203.161.24.0/21 IP: 2405:c9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:76:01:01:4c:70:4a:ac:fb:a1:23:55:a0:67:74:10:cc:c5:78:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 14:11:28 2023 GMT Not After : Sep 15 14:16:28 2024 GMT Subject: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:ad:20:4e:df:67:77:95:11:d9:9e:64:8a: f0:d1:ce:93:88:ec:14:c0:b1:85:b1:c3:7c:e9:a4: f9:3b:98:7d:99:0f:96:d2:ca:97:9a:e0:eb:50:03: 03:ab:c8:6f:95:70:b8:4b:de:57:c0:64:d1:27:db: 26:6c:cb:9d:09:8f:37:88:04:9f:30:e7:59:7e:49: 44:50:cf:a8:9c:b9:37:bc:bf:1a:8a:10:00:4c:77: 94:59:5c:6e:0b:18:90:d3:fe:70:bf:78:89:c9:e4: 18:bc:93:2b:f8:00:3f:57:72:47:b1:b4:4f:80:e0: 93:c5:7e:86:a6:27:55:0b:96:c4:30:6c:8a:5e:40: 2a:99:43:fb:5d:4e:d8:f0:b8:3f:54:a0:22:df:59: 26:b9:86:ac:0b:b3:c0:b6:51:e3:67:3b:f9:51:61: 4d:82:41:9a:f0:65:53:ac:bd:f8:f2:42:05:8b:66: d1:ea:b7:98:44:ee:e0:54:48:f1:d3:ec:05:37:db: 47:56:02:b1:68:2a:e6:d1:25:73:fb:a1:e9:ba:29: 2c:39:c8:1a:40:2a:dc:95:f5:18:0f:49:b7:56:a0: ca:88:f3:13:d6:12:16:d8:ba:e2:8c:1c:c3:e8:98: 5c:35:20:43:a5:d6:54:3c:76:53:20:6e:44:69:74: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.24.0/21 IPv6: 2405:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 65:18:4b:de:5b:95:d8:78:a5:bf:ce:32:2f:01:96:d5:15:47: f6:5d:25:f0:fc:d5:e1:8d:27:85:d6:b5:9d:8b:9e:d7:00:f7: 55:2d:c6:f0:ee:59:8b:ff:ed:cc:55:19:fc:6c:05:60:55:03: c4:d7:7f:b5:5f:b6:28:02:28:f8:1f:04:f9:df:16:be:22:1c: 26:68:98:4e:43:97:e7:ce:7e:60:7b:0c:9b:6d:63:4b:b4:da: cb:bb:b7:b1:53:63:46:0c:db:2a:a3:0d:30:aa:9b:fb:94:3d: f8:03:f5:1e:8f:e4:eb:c9:42:7a:42:2c:5e:f2:cd:16:c1:eb: 4c:19:4b:c4:89:7a:9a:c4:33:17:2b:fe:5b:6b:33:18:1c:10: 94:a0:5a:c9:d7:bb:65:19:d7:e0:0c:be:da:52:4d:ce:c3:c7: 31:3d:c8:3e:30:9f:37:e0:06:ba:f2:69:25:99:af:6e:6f:24: d4:e7:46:8d:07:bc:c4:12:27:b2:56:69:92:ff:f5:71:d2:05: 63:b1:16:98:62:13:73:18:f1:06:da:40:35:c4:f8:48:a6:21: 45:b2:9c:fe:fd:a8:78:0c:8d:e2:5a:58:19:47:3d:b8:ea:f8: 16:4b:e8:53:2c:6a:e8:cc:3c:51:92:e1:0c:78:66:82:ca:d4: 23:b9:bb:42 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUHnYBAUxwSqz7oSNVoGd0EMzFePEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxNzE0MTEyOFoX DTI0MDkxNTE0MTYyOFowMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJE QUY1MDc2NDI1RkJEODI0MjE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKhrSBO32d3lRHZnmSK8NHOk4jsFMCxhbHDfOmk+TuYfZkPltLKl5rg61AD A6vIb5VwuEveV8Bk0SfbJmzLnQmPN4gEnzDnWX5JRFDPqJy5N7y/GooQAEx3lFlc bgsYkNP+cL94icnkGLyTK/gAP1dyR7G0T4Dgk8V+hqYnVQuWxDBsil5AKplD+11O 2PC4P1SgIt9ZJrmGrAuzwLZR42c7+VFhTYJBmvBlU6y9+PJCBYtm0eq3mETu4FRI 8dPsBTfbR1YCsWgq5tElc/uh6bopLDnIGkAq3JX1GA9Jt1agyojzE9YSFti64owc w+iYXDUgQ6XWVDx2UyBuRGl0GjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOIRHxDwHBfEoyLa9QdkJfvYJCGdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyMTU4YWVj LTUyODEtNDJlNi05NzliLWZjYTYxZDQ3Yzg0NS8wL0UyMTExRjEwRjAxQzE3QzRB MzIyREFGNTA3NjQyNUZCRDgyNDIxOUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLoRgwDQQCAAIwBwMFACQFycAwDQYJKoZIhvcNAQELBQADggEBAGUYS95bldh4 pb/OMi8BltUVR/ZdJfD81eGNJ4XWtZ2LntcA91UtxvDuWYv/7cxVGfxsBWBVA8TX f7VftigCKPgfBPnfFr4iHCZomE5Dl+fOfmB7DJttY0u02su7t7FTY0YM2yqjDTCq m/uUPfgD9R6P5OvJQnpCLF7yzRbB60wZS8SJeprEMxcr/ltrMxgcEJSgWsnXu2UZ 1+AMvtpSTc7DxzE9yD4wnzfgBrryaSWZr25vJNTnRo0HvMQSJ7JWaZL/9XHSBWOx FphiE3MY8QbaQDXE+EimIUWynP79qHgMjeJaWBlHPbjq+BZL6FMsaujMPFGS4Qx4 ZoLK1CO5u0I= -----END CERTIFICATE-----Generated at Wed May 8 07:45:30 2024 by rpki-client on console-ams.rpki-client.org