$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer (raw, json) Hash identifier: o/WsSpWSx5HkNVjvHwz6qsT3ps/JrJLoHPBUMjumM0A= Subject key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21C378F61493479B5FCBBCE110EAF18361707FEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Nov 2024 23:38:20 +0000 Certificate not after: Fri 21 Nov 2025 23:43:20 +0000 Subordinate resources: IP: 202.47.184.0/23 IP: 2401:5520::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:78:f6:14:93:47:9b:5f:cb:bc:e1:10:ea:f1:83:61:70:7f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 22 23:38:20 2024 GMT Not After : Nov 21 23:43:20 2025 GMT Subject: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:86:e6:cf:bd:9e:aa:a2:43:b2:62:79:dd: 7b:96:51:75:05:39:e9:02:c0:6d:dc:9d:ce:f1:0b: eb:a1:14:de:a0:71:19:ef:9c:97:5e:99:8b:e7:fe: 86:9c:37:46:7b:8d:53:90:6b:b1:f2:3d:7b:50:1d: 8b:79:32:11:7b:09:71:12:8d:b3:c0:d5:48:4e:5f: 63:66:8a:eb:d1:66:1d:5d:b4:e4:b3:8e:9c:44:d9: 6e:8c:a4:7d:c5:5f:5d:30:95:2e:05:39:ac:e6:df: 55:fb:02:24:b2:23:c7:d7:ed:5e:0a:06:5e:61:1a: 6c:27:9a:97:3c:63:5d:3b:2e:59:4e:eb:8b:c6:ae: 43:61:2e:74:47:69:6a:6d:82:e2:2e:d4:cb:29:8c: cd:ec:30:44:e4:59:96:c3:07:e7:e8:21:6d:10:0e: 0a:e9:26:31:ca:d7:0d:a1:09:89:fe:bb:eb:7e:92: 46:02:82:15:95:24:11:91:a8:a5:71:aa:be:e2:96: 7e:ab:ea:99:95:67:41:f7:29:0f:82:0f:58:95:22: 96:88:63:88:63:b4:dc:78:10:0d:d6:77:a4:b0:1c: 46:00:53:ed:0f:78:b1:d8:cb:31:d3:79:18:16:67: d0:e8:ef:93:38:69:43:c5:75:bc:68:e1:39:dd:30: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.184.0/23 IPv6: 2401:5520::/32 Signature Algorithm: sha256WithRSAEncryption 0a:d3:64:8a:29:7c:90:6c:7a:b8:d4:1b:da:ca:d1:f5:13:9f: a4:d3:c3:2a:72:a4:0d:24:76:3a:64:f2:e5:49:d6:f6:a7:9e: 68:1d:b3:e9:83:85:74:e9:91:66:90:55:98:ad:f3:44:d0:dc: 59:20:e1:df:00:04:a3:09:9d:e4:23:52:35:2a:cd:28:e3:19: 08:0c:0e:7b:44:6e:bc:f7:5e:ba:54:96:b3:7e:1e:3e:bd:6e: 5f:b0:d2:33:81:18:38:8a:4f:1f:94:c9:0a:e3:e8:ac:37:ca: 81:fe:6f:cc:31:a6:09:a3:4a:15:0e:c2:0c:06:f9:0b:fd:83: 45:04:a1:8f:ec:20:ad:4d:9f:23:da:de:e5:88:13:ad:b7:4a: 3e:d7:f3:58:45:50:5f:91:61:31:4f:f1:20:4d:7a:36:7f:1e: 4e:54:23:7c:75:52:57:25:6b:8f:72:ce:6e:6e:6c:12:76:6d: 72:94:ff:01:5d:c6:73:b0:44:fa:84:cc:fd:ff:52:40:c0:c0: df:d6:c3:e4:56:f6:d3:e4:62:a0:1f:23:44:63:a1:3b:cb:24: 2a:30:a7:a1:ec:02:4a:18:55:07:e3:d8:24:d0:d5:c8:68:34: 12:d9:7b:18:57:9d:93:de:4b:b5:7b:d5:5b:0f:22:6d:d1:94: 70:29:08:e6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUIcN49hSTR5tfy7zhEOrxg2Fwf+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMjIzMzgyMFoX DTI1MTEyMTIzNDMyMFowMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMx RjQ3RThDREU0RjlCNEEzN0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3XhubPvZ6qokOyYnnde5ZRdQU56QLAbdydzvEL66EU3qBxGe+cl16Zi+f+ hpw3RnuNU5BrsfI9e1Adi3kyEXsJcRKNs8DVSE5fY2aK69FmHV205LOOnETZboyk fcVfXTCVLgU5rObfVfsCJLIjx9ftXgoGXmEabCealzxjXTsuWU7ri8auQ2EudEdp am2C4i7UyymMzewwRORZlsMH5+ghbRAOCukmMcrXDaEJif67636SRgKCFZUkEZGo pXGqvuKWfqvqmZVnQfcpD4IPWJUilohjiGO03HgQDdZ3pLAcRgBT7Q94sdjLMdN5 GBZn0OjvkzhpQ8V1vGjhOd0wJBsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7CZCnfMIYVhwwfR+jN5Pm0o3zoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNWZkZjZj LTBkMDEtNDkyYi04MDA0LWE0OGVlNWExMjQ3NC8wL0NFQzI2NDI5REYzMDg2MTU4 NzBDMUY0N0U4Q0RFNEY5QjRBMzdDRTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAHKL7gwDQQCAAIwBwMFACQBVSAwDQYJKoZIhvcNAQELBQADggEBAArTZIopfJBs erjUG9rK0fUTn6TTwypypA0kdjpk8uVJ1vannmgds+mDhXTpkWaQVZit80TQ3Fkg 4d8ABKMJneQjUjUqzSjjGQgMDntEbrz3XrpUlrN+Hj69bl+w0jOBGDiKTx+UyQrj 6Kw3yoH+b8wxpgmjShUOwgwG+Qv9g0UEoY/sIK1NnyPa3uWIE623Sj7X81hFUF+R YTFP8SBNejZ/Hk5UI3x1Ulcla49yzm5ubBJ2bXKU/wFdxnOwRPqEzP3/UkDAwN/W w+RW9tPkYqAfI0RjoTvLJCowp6HsAkoYVQfj2CTQ1choNBLZexhXnZPeS7V71VsP Im3RlHApCOY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:00 2024 by rpki-client on console-fra.rpki-client.org