$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer (raw, json) Hash identifier: BtJeWJm8w7OqJ/LBP6RTy3OM5+5NG2UCZ+SbFx7Y96Q= Subject key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C0016254B9C8336707D0B664FAAE6D77C27236E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Dec 2023 08:28:41 +0000 Certificate not after: Fri 20 Dec 2024 08:33:41 +0000 Subordinate resources: IP: 202.47.184.0/23 IP: 2401:5520::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:16:25:4b:9c:83:36:70:7d:0b:66:4f:aa:e6:d7:7c:27:23:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 08:28:41 2023 GMT Not After : Dec 20 08:33:41 2024 GMT Subject: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:86:e6:cf:bd:9e:aa:a2:43:b2:62:79:dd: 7b:96:51:75:05:39:e9:02:c0:6d:dc:9d:ce:f1:0b: eb:a1:14:de:a0:71:19:ef:9c:97:5e:99:8b:e7:fe: 86:9c:37:46:7b:8d:53:90:6b:b1:f2:3d:7b:50:1d: 8b:79:32:11:7b:09:71:12:8d:b3:c0:d5:48:4e:5f: 63:66:8a:eb:d1:66:1d:5d:b4:e4:b3:8e:9c:44:d9: 6e:8c:a4:7d:c5:5f:5d:30:95:2e:05:39:ac:e6:df: 55:fb:02:24:b2:23:c7:d7:ed:5e:0a:06:5e:61:1a: 6c:27:9a:97:3c:63:5d:3b:2e:59:4e:eb:8b:c6:ae: 43:61:2e:74:47:69:6a:6d:82:e2:2e:d4:cb:29:8c: cd:ec:30:44:e4:59:96:c3:07:e7:e8:21:6d:10:0e: 0a:e9:26:31:ca:d7:0d:a1:09:89:fe:bb:eb:7e:92: 46:02:82:15:95:24:11:91:a8:a5:71:aa:be:e2:96: 7e:ab:ea:99:95:67:41:f7:29:0f:82:0f:58:95:22: 96:88:63:88:63:b4:dc:78:10:0d:d6:77:a4:b0:1c: 46:00:53:ed:0f:78:b1:d8:cb:31:d3:79:18:16:67: d0:e8:ef:93:38:69:43:c5:75:bc:68:e1:39:dd:30: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.184.0/23 IPv6: 2401:5520::/32 Signature Algorithm: sha256WithRSAEncryption 0e:25:7b:9b:13:5c:27:ae:72:52:20:86:01:6e:f2:5a:1d:e7: d5:11:d4:3c:6d:bf:b3:57:6a:e6:6b:ef:24:0e:b5:e7:af:c0: 25:9b:06:69:a7:30:8a:69:bc:01:57:52:4d:11:5e:75:7f:de: 04:ee:6c:17:54:c2:19:a1:9e:87:76:cd:0e:a7:b7:38:ac:13: 2e:4d:4c:26:3c:9f:0f:d0:54:b4:11:bf:11:ea:b3:91:67:53: 17:8b:8a:c3:01:d0:98:b7:87:c6:10:4f:fb:2a:1f:27:8f:55: 15:c1:67:11:2a:6a:cd:72:f3:64:6a:5c:c5:15:58:76:95:b9: f5:6b:d2:f1:22:07:cb:38:34:7b:22:16:16:49:df:45:cc:ff: ed:01:2e:21:88:85:15:cf:73:f8:37:37:31:67:63:83:12:d5: 6d:22:3f:25:89:44:e5:43:cb:2f:dc:63:8c:4f:30:89:76:96: d2:ea:06:27:7f:e3:71:1a:c0:9b:7f:8e:31:66:69:e0:3d:7a: 4e:6f:0c:5e:0f:c0:49:06:ee:58:35:64:43:c3:4b:4c:63:a7: 7a:e1:03:e0:b8:53:a3:ca:7d:41:be:2c:07:e0:76:ef:3e:34: 00:75:66:cb:5d:05:8c:dc:34:8b:5d:72:57:e1:bf:bd:2f:6f: bd:59:39:c6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIULAAWJUucgzZwfQtmT6rm13wnI24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMjA4Mjg0MVoX DTI0MTIyMDA4MzM0MVowMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMx RjQ3RThDREU0RjlCNEEzN0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3XhubPvZ6qokOyYnnde5ZRdQU56QLAbdydzvEL66EU3qBxGe+cl16Zi+f+ hpw3RnuNU5BrsfI9e1Adi3kyEXsJcRKNs8DVSE5fY2aK69FmHV205LOOnETZboyk fcVfXTCVLgU5rObfVfsCJLIjx9ftXgoGXmEabCealzxjXTsuWU7ri8auQ2EudEdp am2C4i7UyymMzewwRORZlsMH5+ghbRAOCukmMcrXDaEJif67636SRgKCFZUkEZGo pXGqvuKWfqvqmZVnQfcpD4IPWJUilohjiGO03HgQDdZ3pLAcRgBT7Q94sdjLMdN5 GBZn0OjvkzhpQ8V1vGjhOd0wJBsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7CZCnfMIYVhwwfR+jN5Pm0o3zoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNWZkZjZj LTBkMDEtNDkyYi04MDA0LWE0OGVlNWExMjQ3NC8wL0NFQzI2NDI5REYzMDg2MTU4 NzBDMUY0N0U4Q0RFNEY5QjRBMzdDRTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAHKL7gwDQQCAAIwBwMFACQBVSAwDQYJKoZIhvcNAQELBQADggEBAA4le5sTXCeu clIghgFu8lod59UR1Dxtv7NXauZr7yQOteevwCWbBmmnMIppvAFXUk0RXnV/3gTu bBdUwhmhnod2zQ6ntzisEy5NTCY8nw/QVLQRvxHqs5FnUxeLisMB0Ji3h8YQT/sq HyePVRXBZxEqas1y82RqXMUVWHaVufVr0vEiB8s4NHsiFhZJ30XM/+0BLiGIhRXP c/g3NzFnY4MS1W0iPyWJROVDyy/cY4xPMIl2ltLqBid/43EawJt/jjFmaeA9ek5v DF4PwEkG7lg1ZEPDS0xjp3rhA+C4U6PKfUG+LAfgdu8+NAB1ZstdBYzcNItdclfh v70vb71ZOcY= -----END CERTIFICATE-----Generated at Wed May 8 10:06:56 2024 by rpki-client on console-ams.rpki-client.org