$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer File: E2111F10F01C17C4A322DAF5076425FBD824219D.cer (raw, json) Hash identifier: 2aWx9tmWSbAByBGN23wQJPyk+EIDlWAnkkV4dDeyKkM= Subject key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DB92A70F863EF5CE1747FF3FBAF0BA06AA1C058 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft caRepository: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Aug 2024 00:23:46 +0000 Certificate not after: Mon 18 Aug 2025 00:28:46 +0000 Subordinate resources: IP: 203.161.24.0/21 IP: 2405:c9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b9:2a:70:f8:63:ef:5c:e1:74:7f:f3:fb:af:0b:a0:6a:a1:c0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 00:23:46 2024 GMT Not After : Aug 18 00:28:46 2025 GMT Subject: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:ad:20:4e:df:67:77:95:11:d9:9e:64:8a: f0:d1:ce:93:88:ec:14:c0:b1:85:b1:c3:7c:e9:a4: f9:3b:98:7d:99:0f:96:d2:ca:97:9a:e0:eb:50:03: 03:ab:c8:6f:95:70:b8:4b:de:57:c0:64:d1:27:db: 26:6c:cb:9d:09:8f:37:88:04:9f:30:e7:59:7e:49: 44:50:cf:a8:9c:b9:37:bc:bf:1a:8a:10:00:4c:77: 94:59:5c:6e:0b:18:90:d3:fe:70:bf:78:89:c9:e4: 18:bc:93:2b:f8:00:3f:57:72:47:b1:b4:4f:80:e0: 93:c5:7e:86:a6:27:55:0b:96:c4:30:6c:8a:5e:40: 2a:99:43:fb:5d:4e:d8:f0:b8:3f:54:a0:22:df:59: 26:b9:86:ac:0b:b3:c0:b6:51:e3:67:3b:f9:51:61: 4d:82:41:9a:f0:65:53:ac:bd:f8:f2:42:05:8b:66: d1:ea:b7:98:44:ee:e0:54:48:f1:d3:ec:05:37:db: 47:56:02:b1:68:2a:e6:d1:25:73:fb:a1:e9:ba:29: 2c:39:c8:1a:40:2a:dc:95:f5:18:0f:49:b7:56:a0: ca:88:f3:13:d6:12:16:d8:ba:e2:8c:1c:c3:e8:98: 5c:35:20:43:a5:d6:54:3c:76:53:20:6e:44:69:74: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.24.0/21 IPv6: 2405:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:57:b9:6c:03:9d:fb:1b:6c:76:5d:27:4e:4c:d3:93:f0:57: 24:da:2a:bb:0c:34:28:60:59:2c:ea:4a:8c:27:80:6b:b5:33: e7:63:4c:b1:bf:fb:7c:3c:b1:15:56:1a:37:19:d7:5c:65:7e: 38:af:bb:0d:f6:de:58:fe:f4:b8:07:d1:ae:e8:85:02:cc:8c: 9f:34:39:68:9f:64:50:22:2a:a8:92:92:b8:12:63:cf:ad:c0: 58:09:b2:eb:88:0d:f3:75:8a:56:fc:63:7f:79:b7:66:ba:67: 9f:45:4a:62:a4:dd:d0:d3:b9:f8:cb:cb:53:49:3e:04:59:f2: b4:5c:9b:c9:23:ed:6e:97:dd:9c:ef:50:67:31:56:6a:e3:b9: e7:81:20:a9:d1:f7:a7:c7:98:51:ef:d1:29:45:c6:8d:35:94: 68:5b:ca:bf:50:9a:57:25:06:c4:78:9d:d9:04:2e:b8:1d:a1: ab:53:59:61:df:51:ac:c4:90:4f:c2:3f:9a:ed:27:c7:bb:83: c1:c4:93:1c:e7:c0:77:31:ee:ab:0a:2a:9c:54:83:a6:fa:dc: 08:da:b0:1f:ff:e0:e7:8d:9f:5c:0e:ed:7a:88:ee:7b:37:9e: 04:ad:42:5a:81:f2:11:a4:82:5d:5a:9a:e2:3e:df:70:92:a0: 62:fb:84:d2 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbbkqcPhj71zhdH/z+68LoGqhwFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxOTAwMjM0NloX DTI1MDgxODAwMjg0NlowMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJE QUY1MDc2NDI1RkJEODI0MjE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKhrSBO32d3lRHZnmSK8NHOk4jsFMCxhbHDfOmk+TuYfZkPltLKl5rg61AD A6vIb5VwuEveV8Bk0SfbJmzLnQmPN4gEnzDnWX5JRFDPqJy5N7y/GooQAEx3lFlc bgsYkNP+cL94icnkGLyTK/gAP1dyR7G0T4Dgk8V+hqYnVQuWxDBsil5AKplD+11O 2PC4P1SgIt9ZJrmGrAuzwLZR42c7+VFhTYJBmvBlU6y9+PJCBYtm0eq3mETu4FRI 8dPsBTfbR1YCsWgq5tElc/uh6bopLDnIGkAq3JX1GA9Jt1agyojzE9YSFti64owc w+iYXDUgQ6XWVDx2UyBuRGl0GjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOIRHxDwHBfEoyLa9QdkJfvYJCGdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyMTU4YWVj LTUyODEtNDJlNi05NzliLWZjYTYxZDQ3Yzg0NS8wL0UyMTExRjEwRjAxQzE3QzRB MzIyREFGNTA3NjQyNUZCRDgyNDIxOUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLoRgwDQQCAAIwBwMFACQFycAwDQYJKoZIhvcNAQELBQADggEBADxXuWwDnfsb bHZdJ05M05PwVyTaKrsMNChgWSzqSowngGu1M+djTLG/+3w8sRVWGjcZ11xlfjiv uw323lj+9LgH0a7ohQLMjJ80OWifZFAiKqiSkrgSY8+twFgJsuuIDfN1ilb8Y395 t2a6Z59FSmKk3dDTufjLy1NJPgRZ8rRcm8kj7W6X3ZzvUGcxVmrjueeBIKnR96fH mFHv0SlFxo01lGhbyr9QmlclBsR4ndkELrgdoatTWWHfUazEkE/CP5rtJ8e7g8HE kxznwHcx7qsKKpxUg6b63AjasB//4OeNn1wO7XqI7ns3ngStQlqB8hGkgl1amuI+ 33CSoGL7hNI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org