$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer File: E380AA52674666F5E074BF511BB72FA0713E5270.cer (raw, json) Hash identifier: GznFrf4803wy7sTWVTGWnIpMLS2u12W68AvX0BKw7WA= Subject key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 359369D8D86A991BF666C26C1E3E53615974097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft caRepository: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 08 Apr 2024 02:02:05 +0000 Certificate not after: Mon 07 Apr 2025 02:07:05 +0000 Subordinate resources: IP: 36.50.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:93:69:d8:d8:6a:99:1b:f6:66:c2:6c:1e:3e:53:61:59:74:09:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 02:02:05 2024 GMT Not After : Apr 7 02:07:05 2025 GMT Subject: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:fa:a8:8b:9e:f2:03:de:9e:76:07:56:85: cc:6b:fd:81:b4:6c:6e:d9:85:58:23:b1:5b:0c:9f: 6b:e8:94:50:49:27:38:92:69:e9:12:76:2f:d3:30: 4e:1e:46:b3:c8:89:31:b4:0d:4e:80:f4:1f:6e:ff: b4:1d:6c:33:e3:bc:5c:52:35:e2:47:5f:2f:ef:6e: 2b:cc:14:35:ef:da:8a:e1:83:ef:ca:0b:f4:91:79: c8:c8:c4:8a:fc:6b:5f:aa:ca:7e:ff:2c:f7:17:7d: ac:fd:e5:47:7e:f0:dd:ad:cf:1b:de:0f:85:1e:26: 83:f5:18:4d:77:d3:5c:a2:ab:67:91:70:c7:49:40: d0:08:f3:94:1a:af:7c:d3:e6:da:c4:9b:8e:3d:26: 2e:d5:e2:38:82:43:86:d1:40:82:27:92:d7:d6:a1: b5:33:e8:c1:45:b8:a7:dc:cd:cf:1b:8e:f7:e5:f8: f4:82:7d:f5:4f:64:a8:a3:e3:ac:42:df:e8:f7:70: 46:30:73:71:03:73:09:02:c0:90:b9:ad:38:83:be: d0:e1:90:95:e1:3c:1a:50:1c:88:db:bc:6d:49:ad: bc:76:97:2a:33:e9:06:91:c0:65:a3:03:2e:18:b5: 0a:79:9e:ac:e5:28:f8:8d:8f:37:de:4c:b0:14:bf: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.46.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:cb:84:7a:b9:19:be:62:dd:ce:75:c6:71:8d:aa:71:f4:e6: 7f:d0:aa:01:9f:c6:09:24:6d:d1:ae:14:d9:a7:52:bf:5a:5b: ad:7e:3b:1f:c8:37:f7:c4:2d:af:8f:32:1a:bc:1d:01:1a:42: ab:d1:56:e9:15:73:47:06:c2:d8:90:52:a7:aa:b1:34:31:f1: e4:13:01:f4:6d:00:f4:e8:86:82:5b:55:fa:04:1c:80:89:b1: a6:4c:81:a2:17:fb:dc:53:f8:4c:8a:43:ec:b9:42:36:63:bc: 96:c8:96:ff:d0:8a:33:e8:a8:92:e7:23:92:16:c7:06:34:59: 1c:2f:26:58:9e:63:2b:f6:9e:48:28:09:d8:4e:59:df:8d:cf: c8:57:42:75:80:62:fd:80:4c:e6:7b:27:a9:37:a7:96:81:1b: e7:db:fc:9b:a3:4a:45:d0:ff:36:6e:fb:7f:0d:1b:c4:98:08: f2:81:9a:c5:44:35:2e:11:eb:b0:ae:ee:2d:cf:57:0c:07:b8: 6c:49:8a:33:86:e1:a6:76:91:77:de:ec:25:b4:8f:8d:53:f5: 13:2a:93:08:2a:d4:fa:fe:8a:9f:31:ec:dd:29:b2:eb:13:dc: 4f:2b:6d:9e:ac:14:15:72:5c:75:f2:0f:89:b3:d5:fc:55:2b: 35:11:ed:f9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNZNp2NhqmRv2ZsJsHj5TYVl0CX8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwODAyMDIwNVoX DTI1MDQwNzAyMDcwNVowMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRC RjUxMUJCNzJGQTA3MTNFNTI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALS6+qiLnvID3p52B1aFzGv9gbRsbtmFWCOxWwyfa+iUUEknOJJp6RJ2L9Mw Th5Gs8iJMbQNToD0H27/tB1sM+O8XFI14kdfL+9uK8wUNe/aiuGD78oL9JF5yMjE ivxrX6rKfv8s9xd9rP3lR37w3a3PG94PhR4mg/UYTXfTXKKrZ5Fwx0lA0AjzlBqv fNPm2sSbjj0mLtXiOIJDhtFAgieS19ahtTPowUW4p9zNzxuO9+X49IJ99U9kqKPj rELf6PdwRjBzcQNzCQLAkLmtOIO+0OGQleE8GlAciNu8bUmtvHaXKjPpBpHAZaMD Lhi1CnmerOUo+I2PN95MsBS/TJcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOOAqlJnRmb14HS/URu3L6BxPlJwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyNjg0NjJl LWJmYTUtNDMzNy05MTUzLWM1NTZkOWQ3NzFmYS8wL0UzODBBQTUyNjc0NjY2RjVF MDc0QkY1MTFCQjcyRkEwNzEzRTUyNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEkMi4wDQYJKoZIhvcNAQELBQADggEBAD3LhHq5Gb5i3c51xnGNqnH05n/QqgGf xgkkbdGuFNmnUr9aW61+Ox/IN/fELa+PMhq8HQEaQqvRVukVc0cGwtiQUqeqsTQx 8eQTAfRtAPTohoJbVfoEHICJsaZMgaIX+9xT+EyKQ+y5QjZjvJbIlv/QijPoqJLn I5IWxwY0WRwvJlieYyv2nkgoCdhOWd+Nz8hXQnWAYv2ATOZ7J6k3p5aBG+fb/Juj SkXQ/zZu+38NG8SYCPKBmsVENS4R67Cu7i3PVwwHuGxJijOG4aZ2kXfe7CW0j41T 9RMqkwgq1Pr+ip8x7N0psusT3E8rbZ6sFBVyXHXyD4mz1fxVKzUR7fk= -----END CERTIFICATE-----Generated at Wed May 8 15:17:49 2024 by rpki-client on console-fra.rpki-client.org