$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer File: E377371E82C6C53C7A5796B49B085190AFB64B4C.cer (raw, json) Hash identifier: rc1jy7EYPuINzAKU8WrYhilglzs9KvGv2cjhBFA2SrI= Subject key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 230B026DE7A51ED8BAE2E336022FD3FB4B6182CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 Feb 2024 11:24:22 +0000 Certificate not after: Wed 05 Feb 2025 11:29:22 +0000 Subordinate resources: IP: 103.89.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0b:02:6d:e7:a5:1e:d8:ba:e2:e3:36:02:2f:d3:fb:4b:61:82:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 11:24:22 2024 GMT Not After : Feb 5 11:29:22 2025 GMT Subject: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3e:b2:e7:94:dc:ca:c1:a6:6a:73:ca:54:fb: a8:fd:7c:aa:e1:fd:38:6d:c9:ba:88:3d:35:9f:08: de:a4:47:07:f5:2c:08:2a:7a:01:ba:23:64:7f:88: 82:b0:2c:37:4c:59:bd:e3:97:bd:75:b9:a7:10:15: da:65:b0:9c:2a:18:94:e5:15:c6:3f:a6:fa:69:35: 23:c4:d2:b5:06:3f:d8:da:d4:4d:f3:10:24:6a:f3: cf:85:9d:1f:4c:f6:22:87:79:67:db:8d:5d:5a:12: bf:cb:25:24:13:6e:a4:91:ea:a5:6f:ba:25:3d:37: f9:c7:57:a9:c1:83:76:29:87:dc:ef:c0:7a:42:02: 67:f2:91:26:5e:ba:73:b6:7a:95:eb:86:89:87:6f: 3a:6d:4d:9c:59:aa:1a:ef:b3:8d:4b:a9:52:f7:79: 66:48:4b:1e:ce:14:9d:0a:a7:bc:43:49:68:5d:b7: 56:ce:d3:68:66:06:d5:4b:76:77:41:71:fd:13:bb: 56:9f:8d:17:e6:85:36:03:a7:97:85:7f:c0:75:cf: e4:e5:87:fc:3e:43:0e:f2:30:ea:6e:3e:e3:70:3e: d0:49:11:ef:c5:8e:16:0f:f1:23:9e:58:6a:61:72: 77:bf:56:0f:8b:c0:fb:16:90:21:96:97:0c:38:aa: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.242.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:89:6b:b4:5e:b0:08:26:9a:9c:01:d4:21:a9:5d:a3:ff:ae: 9f:9c:5b:e1:f0:59:5d:32:db:06:6d:c1:dd:f3:81:a3:61:44: d2:4e:85:59:27:28:87:9c:c3:6f:73:23:cd:85:9f:6e:6f:07: 8a:30:8b:f0:28:d7:07:0d:01:e2:a9:55:46:73:0d:a5:af:56: 03:31:2e:0d:e4:08:ae:2a:0c:e3:11:81:c5:8d:69:85:48:c8: b8:27:09:0e:a9:34:5e:92:be:31:2e:02:60:d9:69:5a:10:4c: ec:76:3a:06:02:d0:26:a2:4b:7c:19:94:11:eb:4b:7a:96:df: 77:e4:91:89:fb:4c:ea:38:1b:29:77:17:31:6a:83:e0:8d:c8: ba:4e:20:e6:9d:f9:4c:e0:11:3a:68:27:31:2e:d8:7c:9d:60: 6d:83:e7:23:0f:d8:07:de:07:09:84:93:9c:1f:eb:d1:38:fb: 7a:31:ba:0f:a3:8c:f9:83:0a:1e:be:cf:14:7c:83:cb:78:9c: 6e:49:a5:ad:82:75:7c:45:ce:a8:d6:59:e8:23:ea:4d:9c:34: a3:c7:0f:2c:33:c0:6a:97:d9:ac:6c:b8:ff:95:53:ee:3d:d7: 4c:df:45:8b:86:8a:79:72:c9:25:6c:d5:c8:84:bf:dd:29:9c: 64:39:78:fb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIwsCbeelHti64uM2Ai/T+0thgs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNzExMjQyMloX DTI1MDIwNTExMjkyMlowMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5 NkI0OUIwODUxOTBBRkI2NEI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPI+sueU3MrBpmpzylT7qP18quH9OG3Juog9NZ8I3qRHB/UsCCp6AbojZH+I grAsN0xZveOXvXW5pxAV2mWwnCoYlOUVxj+m+mk1I8TStQY/2NrUTfMQJGrzz4Wd H0z2Iod5Z9uNXVoSv8slJBNupJHqpW+6JT03+cdXqcGDdimH3O/AekICZ/KRJl66 c7Z6leuGiYdvOm1NnFmqGu+zjUupUvd5ZkhLHs4UnQqnvENJaF23Vs7TaGYG1Ut2 d0Fx/RO7Vp+NF+aFNgOnl4V/wHXP5OWH/D5DDvIw6m4+43A+0EkR78WOFg/xI55Y amFyd79WD4vA+xaQIZaXDDiq3qkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFON3Nx6CxsU8eleWtJsIUZCvtktMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlMzMwODc2 LTdlNjgtNDcwNy1hNTNkLTkyYmJmZGIyZjIzYy8wL0UzNzczNzFFODJDNkM1M0M3 QTU3OTZCNDlCMDg1MTkwQUZCNjRCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnWfIwDQYJKoZIhvcNAQELBQADggEBAFqJa7ResAgmmpwB1CGpXaP/rp+cW+Hw WV0y2wZtwd3zgaNhRNJOhVknKIecw29zI82Fn25vB4owi/Ao1wcNAeKpVUZzDaWv VgMxLg3kCK4qDOMRgcWNaYVIyLgnCQ6pNF6SvjEuAmDZaVoQTOx2OgYC0CaiS3wZ lBHrS3qW33fkkYn7TOo4Gyl3FzFqg+CNyLpOIOad+UzgETpoJzEu2HydYG2D5yMP 2AfeBwmEk5wf69E4+3oxug+jjPmDCh6+zxR8g8t4nG5Jpa2CdXxFzqjWWegj6k2c NKPHDywzwGqX2axsuP+VU+4910zfRYuGinlyySVs1ciEv90pnGQ5ePs= -----END CERTIFICATE-----Generated at Wed May 8 10:06:57 2024 by rpki-client on console-ams.rpki-client.org