$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer File: EC1B9BE63137230F6756E222019318C640EBE42E.cer (raw, json) Hash identifier: bW7DuI/8BMhD1s9BmsnaTuCeaTnu7ufcu/JyPQj6QZU= Subject key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3C0DA56AA8C417485828C19C61E5FBDD3B47A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft caRepository: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Feb 2024 01:44:46 +0000 Certificate not after: Tue 18 Feb 2025 01:49:46 +0000 Subordinate resources: IP: 157.15.166.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0d:a5:6a:a8:c4:17:48:58:28:c1:9c:61:e5:fb:dd:3b:47:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 20 01:44:46 2024 GMT Not After : Feb 18 01:49:46 2025 GMT Subject: CN=EC1B9BE63137230F6756E222019318C640EBE42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:6a:6c:a4:78:7b:08:1b:8f:43:10:26:46: 8e:1b:20:d3:fe:cf:b7:1e:14:c0:db:3b:a5:3f:5c: db:1b:fb:f2:af:19:9c:19:d4:d9:56:9b:2b:72:6d: 83:78:cd:89:f6:95:e6:aa:ae:3d:9d:8a:6f:63:1a: 33:50:b1:8f:b0:e5:19:78:1c:64:e7:89:53:ec:a5: 7b:f9:83:34:3b:70:72:0a:fd:17:60:12:1e:33:1b: b5:51:f0:27:2b:86:cb:f3:e7:9b:a4:cf:79:b9:dc: 96:4a:c8:2e:26:0d:02:c1:4e:98:ef:da:e6:cb:f3: 5a:2d:75:9f:b9:bf:40:6c:c7:b8:0a:4b:a4:25:18: 85:1e:65:14:96:a2:4d:a6:13:3c:78:69:e3:26:7d: bc:66:a7:26:e9:97:79:fe:e4:d5:10:62:51:da:e6: 8d:16:4d:0b:f2:e9:7e:c0:fc:4a:62:9f:37:f5:30: 22:ed:f3:c8:58:94:07:c5:92:ce:43:2b:0d:78:59: af:db:13:84:2b:d5:5e:03:a4:1e:94:42:33:89:34: b6:86:a6:2f:09:f2:95:0c:88:a3:fe:50:0c:31:06: 1d:9f:d9:7e:46:37:c0:72:14:75:95:de:0b:eb:ad: 7e:50:41:e8:97:e2:c5:ee:e8:8e:97:aa:0d:52:32: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.166.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d4:8c:16:b8:c4:1d:7b:68:c9:15:9b:e5:02:f9:77:00:c7: 36:56:ef:a7:3b:a8:42:e1:de:53:be:3a:1d:1b:3b:5a:37:3d: 2f:43:c0:35:72:d3:67:64:65:59:af:19:9c:ff:b5:39:b5:66: c6:77:58:15:2c:57:17:be:ea:26:80:d0:54:3a:f8:62:1b:15: b1:aa:77:bd:a6:89:20:f5:04:e3:cd:10:07:4c:ce:d7:d2:fb: 2f:18:ae:c3:e0:fc:77:bf:f4:84:88:f4:b5:95:b5:09:b8:dc: 7a:b0:ad:04:99:ad:7c:03:98:68:bf:86:30:b3:0f:e2:5c:fa: c7:52:35:47:7f:a4:34:a9:7c:a0:6b:83:15:75:aa:c4:30:c5: c3:83:63:c5:e2:7a:e9:95:d6:9f:01:0a:4a:10:07:e5:19:ee: 16:60:53:6e:41:69:ab:f1:08:b1:e0:f9:c3:86:3f:d8:d3:a2: cb:f4:86:90:4f:fa:d2:b7:7b:11:9c:2f:9f:88:4c:f0:01:5e: 2d:2d:80:06:b1:e6:66:46:78:fd:9f:bf:fd:5f:f1:db:37:53: 2c:84:e3:7b:a6:13:21:78:f3:00:ee:01:29:de:d0:2a:fd:c1: 9e:1d:04:94:26:30:b9:ee:6b:d5:1a:a2:6e:ed:c6:e5:57:c4: 94:bc:34:87 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITPA2laqjEF0hYKMGcYeX73TtHpDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDYwRjhCRTlDMTY2 MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQwHhcNMjQwMjIwMDE0NDQ2WhcN MjUwMjE4MDE0OTQ2WjAzMTEwLwYDVQQDEyhFQzFCOUJFNjMxMzcyMzBGNjc1NkUy MjIwMTkzMThDNjQwRUJFNDJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4k1qbKR4ewgbj0MQJkaOGyDT/s+3HhTA2zulP1zbG/vyrxmcGdTZVpsrcm2D eM2J9pXmqq49nYpvYxozULGPsOUZeBxk54lT7KV7+YM0O3ByCv0XYBIeMxu1UfAn K4bL8+ebpM95udyWSsguJg0CwU6Y79rmy/NaLXWfub9AbMe4CkukJRiFHmUUlqJN phM8eGnjJn28Zqcm6Zd5/uTVEGJR2uaNFk0L8ul+wPxKYp839TAi7fPIWJQHxZLO QysNeFmv2xOEK9VeA6QelEIziTS2hqYvCfKVDIij/lAMMQYdn9l+RjfAchR1ld4L 661+UEHol+LF7uiOl6oNUjIwJQIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wHwYDVR0jBBgwFoAUYPi+ nBZiXEJLJp7gbGSoO6uFBtQwDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEv NjBGOEJFOUMxNjYyNUM0MjRCMjY5RUUwNkM2NEE4M0JBQjg1MDZENC5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvWVBp LW5CWmlYRUpMSnA3Z2JHU29PNnVGQnRRLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzQ1M2FjNjY3LTRkOWUtNDhkNy1hZmQ2LTgyZTk4ZmE3NmMxZS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2Njct NGQ5ZS00OGQ3LWFmZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3 NTZFMjIyMDE5MzE4QzY0MEVCRTQyRS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AJ0PpjANBgkqhkiG9w0BAQsFAAOCAQEAQtSMFrjEHXtoyRWb5QL5dwDHNlbvpzuo QuHeU746HRs7Wjc9L0PANXLTZ2RlWa8ZnP+1ObVmxndYFSxXF77qJoDQVDr4YhsV sap3vaaJIPUE480QB0zO19L7Lxiuw+D8d7/0hIj0tZW1CbjcerCtBJmtfAOYaL+G MLMP4lz6x1I1R3+kNKl8oGuDFXWqxDDFw4NjxeJ66ZXWnwEKShAH5RnuFmBTbkFp q/EIseD5w4Y/2NOiy/SGkE/60rd7EZwvn4hM8AFeLS2ABrHmZkZ4/Z+//V/x2zdT LITje6YTIXjzAO4BKd7QKv3Bnh0ElCYwue5r1Rqibu3G5VfElLw0hw== -----END CERTIFICATE-----Generated at Fri Jun 21 22:04:32 2024 by rpki-client on console-fra.rpki-client.org