$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer (raw, json) Hash identifier: po9ViQ2qQXP+LLhzf1LW1fhyXMBdm99LVipUW/VfWj4= Subject key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B1189ECFFE567DE06BE9F92EFA060A079D71CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft caRepository: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:04:34 +0000 Certificate not after: Mon 29 Jul 2024 09:09:34 +0000 Subordinate resources: IP: 103.129.220.0/22 IP: 2001:df6:8900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:11:89:ec:ff:e5:67:de:06:be:9f:92:ef:a0:60:a0:79:d7:1c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:04:34 2023 GMT Not After : Jul 29 09:09:34 2024 GMT Subject: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:f1:ad:79:b6:b8:1e:ee:a3:35:1e:ed:59: 1c:0b:02:73:ca:41:34:49:ac:84:e2:0c:43:a4:e9: 92:bd:97:e4:23:a7:9a:25:ec:01:0b:0e:b3:2d:6c: 11:9d:0d:7c:9b:ba:87:99:73:a6:68:f0:8f:28:d5: 5e:a2:f1:6a:45:f7:07:84:39:9e:24:87:aa:77:f6: dc:a9:b4:6f:25:05:b5:99:94:9e:9b:c1:3f:c8:d3: 0d:c2:4c:96:7b:6d:53:b4:9a:58:27:5f:31:66:24: e1:f3:12:f9:75:df:8b:11:4c:06:9f:f6:21:ae:4f: 2c:ba:56:e3:80:56:f0:8e:c4:63:92:77:3e:38:5e: e7:3e:1d:65:42:fd:17:2b:85:95:3c:62:0c:26:8b: b5:b5:96:4a:a9:e6:c3:69:9a:6b:12:2c:07:e1:26: e9:5c:d4:ea:18:c3:1b:62:8e:17:2d:e2:93:93:df: 14:4a:db:c5:b9:44:7f:18:0d:6d:79:ee:d7:a0:d6: 97:5f:02:22:78:c2:74:ad:db:e7:76:32:b7:29:4e: 50:49:eb:8c:3f:14:7a:42:3d:2c:af:f7:e3:c5:ff: 96:45:93:ff:8d:f6:60:21:5b:a1:4c:7b:f1:4f:70: 8b:b4:32:9d:b0:05:c1:48:d6:59:e1:34:5c:2a:92: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.220.0/22 IPv6: 2001:df6:8900::/48 Signature Algorithm: sha256WithRSAEncryption 77:10:2b:4c:42:f5:c2:a2:43:b1:10:75:ac:08:9b:d5:4e:60: 5b:03:20:07:9e:b1:b0:90:66:78:0c:89:af:35:21:83:60:ea: 77:c9:2d:15:a4:d1:6b:ac:ab:23:9f:3d:fe:2d:57:a2:f3:ee: 87:4e:f1:f2:81:0a:26:b1:10:1e:2f:af:30:ca:2a:66:8c:0c: ef:db:2f:fc:6c:50:37:cb:0b:1a:62:fd:35:98:4e:51:2c:ed: d9:7a:6d:86:ca:b7:16:c8:89:cd:03:7c:e6:2e:71:ad:9f:21: 45:2b:e8:9c:be:86:77:59:ba:c4:af:ab:5e:32:3e:97:40:62: 34:5c:ed:57:84:31:29:a3:9e:c6:01:f3:8c:cf:3c:44:d2:b5: c3:4f:98:b5:fd:6a:61:d4:af:05:07:93:40:20:f2:db:f5:50: 77:32:99:d5:05:f6:02:24:2c:5e:09:ab:5d:31:e9:b1:12:3a: 03:0d:e0:56:6a:39:89:83:10:71:fe:df:6f:d4:d3:3e:61:b8: a4:be:3c:2c:74:e4:fb:4b:f4:77:27:70:57:fc:03:e7:01:98: 08:fc:6c:5b:77:00:a3:45:1d:7b:8c:38:ac:ac:38:25:b8:9a: 7f:fe:fe:9a:d9:c9:24:cb:49:5a:a4:16:e0:c1:83:e0:6c:6d: 00:41:66:bb -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUaxGJ7P/lZ94Gvp+S76BgoHnXHP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5MDQzNFoX DTI0MDcyOTA5MDkzNFowMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1 MjNGMUExQUNEN0QwMThEMEFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA/8a15trge7qM1Hu1ZHAsCc8pBNEmshOIMQ6Tpkr2X5COnmiXsAQsOsy1s EZ0NfJu6h5lzpmjwjyjVXqLxakX3B4Q5niSHqnf23Km0byUFtZmUnpvBP8jTDcJM lnttU7SaWCdfMWYk4fMS+XXfixFMBp/2Ia5PLLpW44BW8I7EY5J3Pjhe5z4dZUL9 FyuFlTxiDCaLtbWWSqnmw2maaxIsB+Em6VzU6hjDG2KOFy3ik5PfFErbxblEfxgN bXnu16DWl18CInjCdK3b53YytylOUEnrjD8UekI9LK/348X/lkWT/432YCFboUx7 8U9wi7QynbAFwUjWWeE0XCqSVysCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOJ/Bwsn6rCW4rNSPxoazX0BjQrdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2YTAwMmRl LTBjZGUtNDYyZS05NDA0LTQ2YmM2MjcwZTA0Zi8wL0UyN0YwNzBCMjdFQUIwOTZF MkIzNTIzRjFBMUFDRDdEMDE4RDBBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJngdwwDwQCAAIwCQMHACABDfaJADANBgkqhkiG9w0BAQsFAAOCAQEAdxArTEL1 wqJDsRB1rAib1U5gWwMgB56xsJBmeAyJrzUhg2Dqd8ktFaTRa6yrI589/i1XovPu h07x8oEKJrEQHi+vMMoqZowM79sv/GxQN8sLGmL9NZhOUSzt2Xpthsq3FsiJzQN8 5i5xrZ8hRSvonL6Gd1m6xK+rXjI+l0BiNFztV4QxKaOexgHzjM88RNK1w0+Ytf1q YdSvBQeTQCDy2/VQdzKZ1QX2AiQsXgmrXTHpsRI6Aw3gVmo5iYMQcf7fb9TTPmG4 pL48LHTk+0v0dydwV/wD5wGYCPxsW3cAo0Ude4w4rKw4Jbiaf/7+mtnJJMtJWqQW 4MGD4GxtAEFmuw== -----END CERTIFICATE-----Generated at Fri May 3 04:42:32 2024 by rpki-client on console-fra.rpki-client.org