$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer (raw, json) Hash identifier: 7D0xE9yBdyeVJ5WzxUI8u4TCqQtntSB7EnLakuKfiig= Subject key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 63BAD98D54809D770F4CB5C297C7FD8698744AD1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft caRepository: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jul 2024 09:00:17 +0000 Certificate not after: Tue 15 Jul 2025 09:05:17 +0000 Subordinate resources: IP: 160.25.45.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ba:d9:8d:54:80:9d:77:0f:4c:b5:c2:97:c7:fd:86:98:74:4a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 16 09:00:17 2024 GMT Not After : Jul 15 09:05:17 2025 GMT Subject: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:5a:fa:a4:3e:d9:29:db:a9:28:fa:e1:8e: 94:a4:7d:c9:57:d8:5d:68:d8:a8:ab:55:1e:a5:a1: 0f:f7:68:7d:20:61:62:9b:db:a7:d6:42:a7:3b:28: fb:03:73:3d:b3:b0:89:c3:0a:e4:ec:39:92:10:48: b7:44:19:70:6e:60:6f:8c:35:cb:79:07:5f:ce:30: c6:85:b5:0b:d8:9a:69:45:31:bb:2b:f3:00:e1:0d: b2:31:5c:c5:22:53:c4:09:17:60:fd:79:21:50:b8: 60:b6:9f:8a:c4:3b:94:db:a6:19:a4:60:bf:b6:ae: ef:3b:cb:d4:bb:9c:a7:4f:7d:cb:f6:8d:24:f4:48: 85:38:f4:fd:77:65:bd:de:ea:68:68:51:74:db:bd: ac:2e:30:9e:c7:01:d5:b3:bb:aa:ba:86:ca:1d:f6: 07:96:cc:5f:5f:6b:38:c2:b6:ad:74:43:d8:dd:e6: 29:07:d5:20:69:31:38:84:1f:7c:38:a4:e3:46:74: f7:12:c0:26:35:10:12:4f:23:6f:d8:73:e8:88:d7: 13:3a:f6:68:61:f1:fb:07:6b:65:d3:48:7d:6d:64: e8:ef:93:75:3b:36:7e:66:ad:09:89:74:75:31:43: c4:ac:60:5c:b2:6e:fa:55:0a:64:09:5c:7f:8c:8f: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.45.0/24 Signature Algorithm: sha256WithRSAEncryption 98:fa:37:59:95:86:2f:fe:bd:5f:e0:e0:01:08:9d:2c:9d:b7: ce:e7:1f:0a:c1:82:ee:c4:b0:75:b9:92:54:c5:89:82:47:13: 3e:b0:03:b2:0a:e5:12:fa:b3:a4:4c:cb:69:a8:57:c6:ba:e5: f8:13:f9:fd:93:8c:fb:2a:27:cc:2e:74:fa:d4:56:b4:12:04: 77:7c:87:de:d9:8f:3d:d7:c6:81:25:40:12:fd:c3:32:0a:38: 63:a1:48:10:73:89:b1:14:91:ca:e7:13:45:1c:e8:9d:cf:15: dd:39:50:1c:e5:e6:29:76:25:85:4a:c9:b2:1b:7c:55:42:37: 68:93:a6:9a:fd:e2:f0:6f:ce:a7:f5:4e:86:43:4d:c6:19:1a: de:61:89:20:d4:f4:44:d2:a4:c9:bd:cd:e8:00:3d:67:62:c6: a0:7d:c1:74:f9:25:75:33:e3:1a:7b:cf:5f:80:60:ef:3e:58: 7e:d2:e4:f0:16:38:19:6b:99:61:ec:10:8a:aa:30:15:36:46: c4:13:44:69:d2:a7:99:ee:b8:39:f3:63:98:99:2a:bf:9b:64: d2:2e:df:85:a1:7f:2d:aa:be:32:39:b5:93:db:ea:15:ca:06: d4:cf:ea:b4:7b:e8:b5:a9:83:81:05:54:a7:15:10:42:cc:cb: 15:73:a2:d9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY7rZjVSAnXcPTLXCl8f9hph0StEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDcxNjA5MDAxN1oX DTI1MDcxNTA5MDUxN1owMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcx MDVFNEJCMUJCMjM2MDFERDFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4dWvqkPtkp26ko+uGOlKR9yVfYXWjYqKtVHqWhD/dofSBhYpvbp9ZCpzso +wNzPbOwicMK5Ow5khBIt0QZcG5gb4w1y3kHX84wxoW1C9iaaUUxuyvzAOENsjFc xSJTxAkXYP15IVC4YLafisQ7lNumGaRgv7au7zvL1Lucp099y/aNJPRIhTj0/Xdl vd7qaGhRdNu9rC4wnscB1bO7qrqGyh32B5bMX19rOMK2rXRD2N3mKQfVIGkxOIQf fDik40Z09xLAJjUQEk8jb9hz6IjXEzr2aGHx+wdrZdNIfW1k6O+TdTs2fmatCYl0 dTFDxKxgXLJu+lUKZAlcf4yPc2kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7Bp78tldC6/jcQXkuxuyNgHdHbMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzNjU2MWQ0 LTIzYzgtNGM5Yi04OTBlLTRmMjYzMmU1MmM5Ny8wL0VFQzFBN0JGMkQ5NUQwQkFG RTM3MTA1RTRCQjFCQjIzNjAxREQxREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGS0wDQYJKoZIhvcNAQELBQADggEBAJj6N1mVhi/+vV/g4AEInSydt87nHwrB gu7EsHW5klTFiYJHEz6wA7IK5RL6s6RMy2moV8a65fgT+f2TjPsqJ8wudPrUVrQS BHd8h97Zjz3XxoElQBL9wzIKOGOhSBBzibEUkcrnE0Uc6J3PFd05UBzl5il2JYVK ybIbfFVCN2iTppr94vBvzqf1ToZDTcYZGt5hiSDU9ETSpMm9zegAPWdixqB9wXT5 JXUz4xp7z1+AYO8+WH7S5PAWOBlrmWHsEIqqMBU2RsQTRGnSp5nuuDnzY5iZKr+b ZNIu34Whfy2qvjI5tZPb6hXKBtTP6rR76LWpg4EFVKcVEELMyxVzotk= -----END CERTIFICATE-----Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org