$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer File: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer (raw, json) Hash identifier: HzZS9SGYMfOwMaY7r+Si5efxkaGrLqZAilmn9hP4eQo= Subject key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D4849D4702F361AFC4682F63F95BB8B10C92CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Oct 2024 15:11:14 +0000 Certificate not after: Mon 06 Oct 2025 15:16:14 +0000 Subordinate resources: IP: 175.111.96.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:48:49:d4:70:2f:36:1a:fc:46:82:f6:3f:95:bb:8b:10:c9:2c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 7 15:11:14 2024 GMT Not After : Oct 6 15:16:14 2025 GMT Subject: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:31:be:83:c6:36:33:2a:e8:3b:d7:ab:d7: fe:69:3a:fd:7d:88:32:a3:8b:3d:b0:50:c7:78:68: 8a:22:22:bb:c2:b3:e9:4d:c9:0b:69:8c:0f:4b:6f: 3f:b1:18:f7:15:37:c8:a0:98:1a:d1:32:d7:c5:ef: 8a:72:9a:c1:2d:5d:ee:85:00:b1:fa:76:c1:27:15: b3:4f:fe:00:a4:2d:a0:40:90:68:6b:1c:09:3d:fb: e0:4b:93:1b:08:61:0a:42:e5:d5:d8:dc:60:16:b1: 15:6f:cb:6a:32:3a:27:2f:dc:d8:a5:d5:7b:32:65: 0c:29:82:43:e7:53:c5:3f:93:ec:e4:8d:d6:5b:46: 53:df:5e:d7:3f:bc:a2:f0:af:ed:59:92:47:04:7f: d7:bd:41:77:e5:9f:2a:b1:ce:52:9a:b5:07:46:a5: f2:79:57:45:e1:d9:5a:77:e9:67:87:67:26:a7:65: 23:18:80:d5:18:02:8d:18:4f:22:21:a5:59:2f:d9: f5:90:8b:ed:62:b6:ef:87:d9:0c:13:8c:ed:28:f5: b4:0f:3d:3f:71:36:d7:75:16:96:96:c5:cd:1a:5e: 70:f5:b6:8f:eb:3e:a0:0e:f7:9d:ee:85:78:45:e9: f7:8d:f1:94:3b:3f:a3:a2:a8:2e:78:82:e5:55:6b: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.96.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6e:65:b4:68:fb:6c:80:c2:f9:87:41:16:cb:12:ab:2c:27: b9:d1:6c:5e:c4:17:5a:00:ec:e6:b6:ff:fa:58:16:01:60:cc: f6:f1:4c:28:04:92:59:96:c1:70:c2:8d:06:49:5a:d4:54:17: c7:8d:7c:b3:a9:89:4c:a2:53:b6:31:80:ed:7f:3f:b5:1e:16: 7e:cf:39:1b:86:f6:90:d8:b3:de:d4:eb:5e:7d:08:a9:02:97: 83:ff:39:0a:84:82:3e:ef:99:ea:43:6e:4d:cf:72:81:13:d0: 0e:c8:ae:9c:b5:70:50:3b:cf:96:af:e2:56:18:d3:5f:db:80: ec:51:b6:62:d1:06:f8:61:45:fa:20:49:3c:de:52:7c:07:53: 60:ed:70:b7:34:56:8d:78:b0:64:f8:92:ce:81:35:32:17:74: de:a7:2d:57:f3:86:d9:34:17:7c:28:a3:32:82:c7:76:13:47: 66:42:88:01:39:71:c2:25:73:52:38:c6:a0:bb:5a:d0:e9:8a: 77:7a:fc:db:a0:e9:43:ce:47:e5:a6:86:3d:55:ff:8b:1e:41: 74:fb:39:f4:e2:f6:83:f2:8b:15:13:0d:96:30:83:17:67:2d: 1d:47:ea:97:84:71:46:aa:2e:e5:f0:02:c3:f9:03:8e:b3:47: da:6f:73:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDUhJ1HAvNhr8RoL2P5W7ixDJLL0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwNzE1MTExNFoX DTI1MTAwNjE1MTYxNFowMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0Mz MERCMzNDM0JCRDhGMDUxODM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsIMb6DxjYzKug716vX/mk6/X2IMqOLPbBQx3hoiiIiu8Kz6U3JC2mMD0tv P7EY9xU3yKCYGtEy18XvinKawS1d7oUAsfp2wScVs0/+AKQtoECQaGscCT374EuT GwhhCkLl1djcYBaxFW/LajI6Jy/c2KXVezJlDCmCQ+dTxT+T7OSN1ltGU99e1z+8 ovCv7VmSRwR/171Bd+WfKrHOUpq1B0al8nlXReHZWnfpZ4dnJqdlIxiA1RgCjRhP IiGlWS/Z9ZCL7WK274fZDBOM7Sj1tA89P3E213UWlpbFzRpecPW2j+s+oA73ne6F eEXp943xlDs/o6KoLniC5VVrUYUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCeyzpb66OF2Ojww2zPDu9jwUYOLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1NTExYThh LTMwZGEtNDY3MC1hMDEwLTc5MjZkN2NkNTEwYi8wLzI3QjJDRTk2RkFFOEUxNzYz QTNDMzBEQjMzQzNCQkQ4RjA1MTgzOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACvb2AwDQYJKoZIhvcNAQELBQADggEBAAluZbRo+2yAwvmHQRbLEqssJ7nRbF7E F1oA7Oa2//pYFgFgzPbxTCgEklmWwXDCjQZJWtRUF8eNfLOpiUyiU7YxgO1/P7Ue Fn7PORuG9pDYs97U6159CKkCl4P/OQqEgj7vmepDbk3PcoET0A7Irpy1cFA7z5av 4lYY01/bgOxRtmLRBvhhRfogSTzeUnwHU2DtcLc0Vo14sGT4ks6BNTIXdN6nLVfz htk0F3woozKCx3YTR2ZCiAE5ccIlc1I4xqC7WtDpind6/Nug6UPOR+Wmhj1V/4se QXT7OfTi9oPyixUTDZYwgxdnLR1H6peEcUaqLuXwAsP5A46zR9pvc/c= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org