$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer File: E94D4099064713F1C3A5E211E817CFC2A40E6370.cer (raw, json) Hash identifier: PIlmt7BBeaVpsRRcQNhrv/6WHBxg29YoO2+md6i4nt4= Subject key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22597E01C5EC3D34FE0E2E7F526F04317A301A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 23 Nov 2023 19:48:06 +0000 Certificate not after: Thu 21 Nov 2024 19:53:06 +0000 Subordinate resources: IP: 27.131.248.0/22 IP: 49.0.24.0/23 IP: 103.164.14.0/23 IP: 110.92.72.0/23 IP: 116.254.96.0/22 IP: 121.50.32.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:59:7e:01:c5:ec:3d:34:fe:0e:2e:7f:52:6f:04:31:7a:30:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 23 19:48:06 2023 GMT Not After : Nov 21 19:53:06 2024 GMT Subject: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:fe:27:70:17:db:1d:eb:ce:09:df:46:e9: c7:a4:5f:5d:15:07:47:66:b5:cc:bf:c3:62:ab:78: de:fd:68:5f:97:3e:3e:bc:d6:49:60:6f:dc:13:82: 3a:97:45:61:24:16:a1:bf:2a:5d:38:9f:b7:67:a7: fe:7e:a8:43:16:09:9f:9f:8d:be:c9:c6:ea:a4:bb: ef:b1:12:ce:cd:48:12:53:a9:29:42:4e:5d:8b:01: c2:65:a5:43:9a:49:ab:45:c1:8d:d3:d0:f4:59:5f: a7:22:ac:d5:f0:35:d9:b2:ce:45:3c:d5:50:7c:fd: 0a:ae:19:b1:eb:99:71:da:fb:a9:f6:3f:ef:30:35: ff:81:8d:6c:96:fe:93:a5:52:0e:26:1c:f7:a3:34: d3:29:98:42:96:42:67:1a:04:c2:78:f2:47:91:2d: c6:db:29:3d:79:b7:e6:28:c8:43:1e:97:b7:39:70: 01:aa:97:66:16:da:6e:9a:0b:06:13:ea:a2:3f:83: 78:92:a7:5f:90:49:9d:b8:e2:72:81:65:3b:82:c1: 5d:bb:29:77:fd:a6:77:ab:b2:f0:7e:0f:37:9a:f1: f3:9e:1d:6c:b0:77:53:1a:cf:8a:7a:0d:90:e7:a9: bd:ec:98:9d:cc:33:14:bf:c1:12:02:b0:26:0e:14: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.248.0/22 49.0.24.0/23 103.164.14.0/23 110.92.72.0/23 116.254.96.0/22 121.50.32.0/21 Signature Algorithm: sha256WithRSAEncryption 36:cf:42:3a:f2:30:df:4a:d8:4c:82:c9:2f:d3:13:cc:9d:00: b6:e3:e4:5a:8a:44:8f:67:79:d1:72:94:45:dc:8b:c0:f3:80: 32:27:ee:c2:7d:4e:23:4f:0c:46:d9:ac:d5:c1:d1:61:93:af: d6:36:58:f7:c0:4d:79:18:60:59:27:26:f2:64:b3:d8:2b:ec: 2a:f6:51:c8:59:6c:17:18:a2:81:ee:7d:4f:56:f1:75:88:01: c0:28:be:3c:a1:ed:9f:a3:49:d2:b4:a8:4c:bc:a8:7e:14:29: ed:4a:2e:5a:14:0a:de:d1:93:e9:e4:b2:27:19:c8:8b:10:90: f7:9b:dc:5a:c4:05:de:dd:7e:17:a5:bc:61:de:08:c7:8b:96: 9c:83:ca:35:7c:fb:79:eb:49:b7:a2:77:43:5f:8f:08:c8:0e: 41:81:e2:6f:b0:a4:a8:c6:32:87:2b:b2:3e:a1:10:3c:8b:61: da:9e:bc:4d:ca:ed:db:7f:d2:2e:1f:dc:17:7d:10:a7:5f:72: b0:dc:d3:c4:86:05:a4:44:50:7f:57:a6:7e:03:ea:cd:56:d5: 8f:41:b1:d1:f2:1f:13:22:85:67:ec:dc:92:8d:43:2f:fb:42: 00:2a:f0:95:66:5f:d6:15:f5:c6:f3:dd:df:25:75:de:91:56: 6b:29:a7:3d -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUIll+AcXsPTT+Di5/Um8EMXowGmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMzE5NDgwNloX DTI0MTEyMTE5NTMwNlowMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVF MjExRTgxN0NGQzJBNDBFNjM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/u/idwF9sd684J30bpx6RfXRUHR2a1zL/DYqt43v1oX5c+PrzWSWBv3BOC OpdFYSQWob8qXTift2en/n6oQxYJn5+NvsnG6qS777ESzs1IElOpKUJOXYsBwmWl Q5pJq0XBjdPQ9FlfpyKs1fA12bLORTzVUHz9Cq4ZseuZcdr7qfY/7zA1/4GNbJb+ k6VSDiYc96M00ymYQpZCZxoEwnjyR5EtxtspPXm35ijIQx6XtzlwAaqXZhbabpoL BhPqoj+DeJKnX5BJnbjicoFlO4LBXbspd/2md6uy8H4PN5rx854dbLB3UxrPinoN kOepveyYncwzFL/BEgKwJg4UPt8CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOlNQJkGRxPxw6XiEegXz8KkDmNwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2FlODJm LTUzN2UtNDYyNi1iZTllLTMzMzk0YTJkYzk2OS8wL0U5NEQ0MDk5MDY0NzEzRjFD M0E1RTIxMUU4MTdDRkMyQTQwRTYzNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQD BAIbg/gDBAExABgDBAFnpA4DBAFuXEgDBAJ0/mADBAN5MiAwDQYJKoZIhvcNAQEL BQADggEBADbPQjryMN9K2EyCyS/TE8ydALbj5FqKRI9nedFylEXci8DzgDIn7sJ9 TiNPDEbZrNXB0WGTr9Y2WPfATXkYYFknJvJks9gr7Cr2UchZbBcYooHufU9W8XWI AcAovjyh7Z+jSdK0qEy8qH4UKe1KLloUCt7Rk+nksicZyIsQkPeb3FrEBd7dfhel vGHeCMeLlpyDyjV8+3nrSbeid0NfjwjIDkGB4m+wpKjGMocrsj6hEDyLYdqevE3K 7dt/0i4f3Bd9EKdfcrDc08SGBaREUH9Xpn4D6s1W1Y9BsdHyHxMihWfs3JKNQy/7 QgAq8JVmX9YV9cbz3d8ldd6RVmsppz0= -----END CERTIFICATE-----Generated at Wed May 8 04:38:02 2024 by rpki-client on console-fra.rpki-client.org