$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer (raw, json) Hash identifier: Cbfhq8cZNb0omOpxKWQGDajYXCtpSAPfIGsYubCXOPg= Subject key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 17EED33814B739EB8F5E58E0FAAC8A5935A7F05F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft caRepository: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Sep 2024 15:03:44 +0000 Certificate not after: Fri 12 Sep 2025 15:08:44 +0000 Subordinate resources: IP: 103.141.234.0/24 IP: 103.169.200.0/24 IP: 2001:df1:1b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ee:d3:38:14:b7:39:eb:8f:5e:58:e0:fa:ac:8a:59:35:a7:f0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 15:03:44 2024 GMT Not After : Sep 12 15:08:44 2025 GMT Subject: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:bf:7c:aa:27:6d:89:91:11:a9:42:f5:c3: cd:f7:ba:c8:2b:2f:a4:86:12:b4:87:ef:06:dd:f9: e3:2e:d3:72:e2:3a:d9:6f:79:b2:c8:44:18:d9:67: f7:88:fe:c2:1d:b5:f0:c4:4d:0d:cf:26:df:fc:6c: c2:82:fc:fb:74:8f:03:35:ab:c4:9d:2d:65:d7:15: 59:74:8b:24:dc:46:a6:e4:05:73:b7:4a:dc:92:b4: 5b:df:ab:98:6f:35:20:d1:f7:c9:33:31:1f:3a:ed: 0c:cb:a6:79:c3:2d:d9:2f:e3:94:f4:91:81:1b:31: a1:b8:a5:8b:55:8c:c8:24:6e:98:a6:bc:59:23:f7: ef:e1:f9:51:55:51:38:c0:5b:5e:bc:e4:a3:a0:e8: 24:08:b0:2b:fb:99:f7:99:24:c8:e4:f7:b9:a9:d4: ad:bb:ea:b4:8f:90:2d:be:9c:ea:3e:9f:0f:5b:4d: 94:01:3a:8a:d9:50:57:fa:ba:2c:56:c4:f2:9b:8e: f3:40:be:23:66:1f:c0:40:ee:13:d6:f6:31:61:1b: a2:a7:bc:01:e7:72:89:23:1f:37:24:68:4d:b7:f8: 96:8c:d6:1c:20:3c:78:3c:ef:a3:4f:ab:20:c0:49: a4:9d:29:ce:2d:6e:ee:49:c6:5f:59:ac:2e:d2:bd: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.234.0/24 103.169.200.0/24 IPv6: 2001:df1:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 22:df:16:fe:2a:f5:94:b0:06:c6:92:41:e6:4c:4c:73:05:1a: ad:8b:ba:89:2b:b5:6e:60:02:c0:b6:4b:11:ab:00:19:35:6f: a1:d2:8d:3c:11:da:88:69:b1:c6:fd:a8:d5:03:f6:a4:13:9d: f5:2c:4c:2a:02:9f:8a:f3:6c:89:2e:5d:eb:63:ab:2f:3e:45: 53:17:58:f2:f0:8f:28:1b:1e:37:7d:7a:db:94:ad:bd:a2:b3: a3:da:3c:2d:ae:ec:7c:95:9b:17:0a:ad:19:e8:8c:8b:44:cc: ce:af:f1:35:7d:6b:7e:2a:8e:d8:b8:ac:16:45:10:a0:9e:3f: 7f:ce:5f:35:5b:f8:7b:5d:d3:5c:53:f8:3e:60:cc:62:7f:f8: 33:4e:0c:88:8b:a4:29:6e:75:f8:70:11:60:ac:61:3e:4e:9f: 8d:1a:d9:ba:3e:b0:8a:13:29:10:34:84:8e:64:06:09:ec:e4: 13:b1:b5:e9:97:66:18:23:8d:26:20:4a:3e:ce:2c:75:ca:c3: ed:e1:d9:43:d3:90:85:b0:1a:b4:5d:0a:ba:12:3f:f6:57:05: 55:c8:7e:21:4c:a2:4a:36:e1:a7:38:dc:f2:02:eb:b8:ca:a2: f3:6a:ed:fe:d0:d3:81:a5:8d:b3:0a:4d:43:ef:5c:f4:43:fb: f8:94:48:3e -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUF+7TOBS3OeuPXljg+qyKWTWn8F8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMzE1MDM0NFoX DTI1MDkxMjE1MDg0NFowMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RG OTZDMjFGOEE5QTJDMzZDRUU2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeDv3yqJ22JkRGpQvXDzfe6yCsvpIYStIfvBt354y7TcuI62W95sshEGNln 94j+wh218MRNDc8m3/xswoL8+3SPAzWrxJ0tZdcVWXSLJNxGpuQFc7dK3JK0W9+r mG81INH3yTMxHzrtDMumecMt2S/jlPSRgRsxobili1WMyCRumKa8WSP37+H5UVVR OMBbXrzko6DoJAiwK/uZ95kkyOT3uanUrbvqtI+QLb6c6j6fD1tNlAE6itlQV/q6 LFbE8puO80C+I2YfwEDuE9b2MWEboqe8AedyiSMfNyRoTbf4lozWHCA8eDzvo0+r IMBJpJ0pzi1u7knGX1msLtK98CMCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSFiiYVR6rAZc35bCH4qaLDbO5lMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzMjhhYWMz LTAwOTQtNDIxZi1hMjAxLTI0ZDgyMGUyYWIzZC8wL0U0ODU4QTI2MTU0N0FBQzA2 NUNERjk2QzIxRjhBOUEyQzM2Q0VFNjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnjeoDBABnqcgwDwQCAAIwCQMHACABDfEbgDANBgkqhkiG9w0BAQsFAAOCAQEA It8W/ir1lLAGxpJB5kxMcwUarYu6iSu1bmACwLZLEasAGTVvodKNPBHaiGmxxv2o 1QP2pBOd9SxMKgKfivNsiS5d62OrLz5FUxdY8vCPKBseN31625StvaKzo9o8La7s fJWbFwqtGeiMi0TMzq/xNX1rfiqO2LisFkUQoJ4/f85fNVv4e13TXFP4PmDMYn/4 M04MiIukKW51+HARYKxhPk6fjRrZuj6wihMpEDSEjmQGCezkE7G16ZdmGCONJiBK Ps4sdcrD7eHZQ9OQhbAatF0KuhI/9lcFVch+IUyiSjbhpzjc8gLruMqi82rt/tDT gaWNswpNQ+9c9EP7+JRIPg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org