$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer File: E94D4099064713F1C3A5E211E817CFC2A40E6370.cer (raw, json) Hash identifier: n5Evuoh2uKxFRNPKHv7uMwC8A8KbCQxK2pRq2kLUhCI= Subject key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7084EFCF185085607FA3EDCE0374532A43C2462B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Oct 2024 20:28:57 +0000 Certificate not after: Thu 23 Oct 2025 20:33:57 +0000 Subordinate resources: IP: 27.131.248.0/22 IP: 49.0.24.0/23 IP: 103.164.14.0/23 IP: 110.92.72.0/23 IP: 116.254.96.0/22 IP: 121.50.32.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:84:ef:cf:18:50:85:60:7f:a3:ed:ce:03:74:53:2a:43:c2:46:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 24 20:28:57 2024 GMT Not After : Oct 23 20:33:57 2025 GMT Subject: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:fe:27:70:17:db:1d:eb:ce:09:df:46:e9: c7:a4:5f:5d:15:07:47:66:b5:cc:bf:c3:62:ab:78: de:fd:68:5f:97:3e:3e:bc:d6:49:60:6f:dc:13:82: 3a:97:45:61:24:16:a1:bf:2a:5d:38:9f:b7:67:a7: fe:7e:a8:43:16:09:9f:9f:8d:be:c9:c6:ea:a4:bb: ef:b1:12:ce:cd:48:12:53:a9:29:42:4e:5d:8b:01: c2:65:a5:43:9a:49:ab:45:c1:8d:d3:d0:f4:59:5f: a7:22:ac:d5:f0:35:d9:b2:ce:45:3c:d5:50:7c:fd: 0a:ae:19:b1:eb:99:71:da:fb:a9:f6:3f:ef:30:35: ff:81:8d:6c:96:fe:93:a5:52:0e:26:1c:f7:a3:34: d3:29:98:42:96:42:67:1a:04:c2:78:f2:47:91:2d: c6:db:29:3d:79:b7:e6:28:c8:43:1e:97:b7:39:70: 01:aa:97:66:16:da:6e:9a:0b:06:13:ea:a2:3f:83: 78:92:a7:5f:90:49:9d:b8:e2:72:81:65:3b:82:c1: 5d:bb:29:77:fd:a6:77:ab:b2:f0:7e:0f:37:9a:f1: f3:9e:1d:6c:b0:77:53:1a:cf:8a:7a:0d:90:e7:a9: bd:ec:98:9d:cc:33:14:bf:c1:12:02:b0:26:0e:14: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.248.0/22 49.0.24.0/23 103.164.14.0/23 110.92.72.0/23 116.254.96.0/22 121.50.32.0/21 Signature Algorithm: sha256WithRSAEncryption 62:37:12:0a:de:f8:3c:5e:93:be:f5:61:1f:93:a6:50:48:d3: d9:b8:4b:d4:83:9a:e3:25:04:49:50:36:d9:a4:9f:30:eb:86: 57:81:02:43:89:dd:70:59:f8:3d:ae:51:d6:64:4f:64:e1:98: e3:82:a5:cb:27:05:8b:10:c8:2e:32:ac:8c:10:cc:e1:be:8e: 41:ff:4e:97:b4:9f:7c:4a:60:ef:b3:a1:64:5e:bd:51:d5:39: fb:79:ef:29:51:e8:86:2b:aa:4f:85:f9:59:15:63:06:7a:ea: 95:cf:96:08:47:66:27:f8:da:d2:2c:da:e4:6d:6b:f8:a5:bc: 38:23:cb:c4:33:24:a9:d4:a6:9f:13:39:bf:79:6e:f6:f0:5f: 5f:90:4e:a9:03:28:08:39:ff:ea:a4:ae:02:f0:7f:ba:81:99: 72:3f:a6:27:56:c9:23:6a:ae:8c:be:10:bc:b7:e8:e6:15:0d: d2:d0:9f:6c:22:e8:c9:e5:b5:94:b1:76:1e:53:97:3a:78:db: aa:5f:6f:6c:28:e6:71:29:d6:82:f5:d1:57:6b:4e:85:6c:46: 01:a6:4b:b3:16:68:34:ff:67:3b:b3:27:98:85:60:85:44:4d: 4b:3e:c4:e2:3e:c8:cd:41:95:90:23:aa:dd:64:1e:37:37:ed: d5:2b:64:12 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUcITvzxhQhWB/o+3OA3RTKkPCRiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNDIwMjg1N1oX DTI1MTAyMzIwMzM1N1owMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVF MjExRTgxN0NGQzJBNDBFNjM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/u/idwF9sd684J30bpx6RfXRUHR2a1zL/DYqt43v1oX5c+PrzWSWBv3BOC OpdFYSQWob8qXTift2en/n6oQxYJn5+NvsnG6qS777ESzs1IElOpKUJOXYsBwmWl Q5pJq0XBjdPQ9FlfpyKs1fA12bLORTzVUHz9Cq4ZseuZcdr7qfY/7zA1/4GNbJb+ k6VSDiYc96M00ymYQpZCZxoEwnjyR5EtxtspPXm35ijIQx6XtzlwAaqXZhbabpoL BhPqoj+DeJKnX5BJnbjicoFlO4LBXbspd/2md6uy8H4PN5rx854dbLB3UxrPinoN kOepveyYncwzFL/BEgKwJg4UPt8CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOlNQJkGRxPxw6XiEegXz8KkDmNwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2FlODJm LTUzN2UtNDYyNi1iZTllLTMzMzk0YTJkYzk2OS8wL0U5NEQ0MDk5MDY0NzEzRjFD M0E1RTIxMUU4MTdDRkMyQTQwRTYzNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQD BAIbg/gDBAExABgDBAFnpA4DBAFuXEgDBAJ0/mADBAN5MiAwDQYJKoZIhvcNAQEL BQADggEBAGI3Egre+Dxek771YR+TplBI09m4S9SDmuMlBElQNtmknzDrhleBAkOJ 3XBZ+D2uUdZkT2ThmOOCpcsnBYsQyC4yrIwQzOG+jkH/Tpe0n3xKYO+zoWRevVHV Oft57ylR6IYrqk+F+VkVYwZ66pXPlghHZif42tIs2uRta/ilvDgjy8QzJKnUpp8T Ob95bvbwX1+QTqkDKAg5/+qkrgLwf7qBmXI/pidWySNqroy+ELy36OYVDdLQn2wi 6MnltZSxdh5Tlzp426pfb2wo5nEp1oL10VdrToVsRgGmS7MWaDT/ZzuzJ5iFYIVE TUs+xOI+yM1BlZAjqt1kHjc37dUrZBI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org