$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer (raw, json) Hash identifier: 6EJuVfiLhUcvHAWC+OwSxmVZP+qkz6OUqNUuis84QdI= Subject key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08174B9B8840EC522F93E4CE66958FD42CE46696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft caRepository: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Nov 2024 03:26:20 +0000 Certificate not after: Wed 19 Nov 2025 03:31:20 +0000 Subordinate resources: IP: 2001:df4:81c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:17:4b:9b:88:40:ec:52:2f:93:e4:ce:66:95:8f:d4:2c:e4:66:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 03:26:20 2024 GMT Not After : Nov 19 03:31:20 2025 GMT Subject: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:16:e0:b8:af:34:e4:c5:de:80:5c:ee:ae: fa:26:84:e1:fb:f4:0f:a3:6e:3f:5f:98:0b:2f:d5: e7:33:b5:3a:cd:d3:32:71:b0:c4:66:20:53:2d:9c: d1:dd:41:3d:ac:82:90:1f:5a:88:d3:f9:00:7f:14: af:1c:76:a2:c3:3a:7f:8f:95:f0:65:cf:fc:30:61: 68:f4:bf:cb:7f:d2:75:55:a6:10:d9:85:05:0f:4a: b9:24:c0:97:d3:5f:37:03:72:3f:dc:aa:c6:b9:97: d6:3f:70:14:ef:9e:79:72:6a:78:c2:24:ae:01:18: 37:02:78:79:fa:ba:03:d6:65:08:ef:cd:ab:74:29: 99:fb:69:b0:bc:79:a3:21:8a:c3:95:07:68:1c:75: 01:52:aa:01:81:9a:2e:92:1b:61:75:7b:f4:12:c8: 49:43:f1:e2:0a:fe:32:92:a9:6f:de:b8:4c:c6:7c: 3b:34:56:7d:9f:9d:72:22:19:f1:d3:0d:0f:e9:2b: c1:4a:8c:52:fb:8b:67:8c:3f:28:f4:91:da:4f:03: f5:0f:03:ec:e9:cf:c5:04:62:fd:78:85:50:3d:66: 2a:f3:f3:c8:98:ca:5b:d7:82:12:5c:81:b5:da:e4: 6d:a0:60:be:82:c9:6c:eb:eb:b6:ec:cc:f2:17:4e: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:81c0::/48 Signature Algorithm: sha256WithRSAEncryption 77:3c:aa:b5:8d:71:31:da:01:46:a6:d1:e9:55:cc:90:07:75: 55:78:60:fb:46:2f:65:9e:e6:49:59:97:14:f0:df:b1:fc:fe: d1:a7:74:43:d4:44:b5:e4:4a:7a:10:10:62:0e:97:d2:1e:d1: aa:80:69:81:46:81:97:29:8e:9a:1e:d5:d6:7c:eb:58:85:40: 4d:39:64:08:f6:78:1a:90:92:43:e0:f8:df:30:2f:95:30:8e: e0:f8:12:01:70:8b:42:18:e1:c8:14:b3:e1:a9:c4:5c:7e:aa: 9c:20:42:a1:69:45:13:08:d6:4b:a5:67:93:d5:e4:e5:d9:bd: 88:d8:ed:78:39:1c:2c:f5:ff:d9:a1:8d:a4:dd:96:61:fd:cd: 56:1f:23:82:80:b1:6b:a8:14:2b:d1:86:6f:fa:d6:84:8c:7c: 9f:be:a3:72:37:ec:2e:5c:62:ed:e9:53:63:9c:14:eb:84:f8: fa:0a:70:e9:c5:61:a7:ce:8b:50:be:60:c9:ff:91:78:93:54: 46:fc:cb:a5:9d:db:dd:06:09:a6:a5:9a:18:05:27:88:ec:a0: 78:3b:bf:5d:0c:2a:6d:0c:e5:7c:1a:32:d4:15:1d:e5:f2:66: 65:7f:b1:45:7c:a1:9d:d8:1f:cc:72:31:f7:39:f3:3f:e9:ae: 03:81:41:f4 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUCBdLm4hA7FIvk+TOZpWP1CzkZpYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMDAzMjYyMFoX DTI1MTExOTAzMzEyMFowMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3 MzkwOEM4NEY0Qzg5RDJFQ0Y3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu0FuC4rzTkxd6AXO6u+iaE4fv0D6NuP1+YCy/V5zO1Os3TMnGwxGYgUy2c 0d1BPayCkB9aiNP5AH8Urxx2osM6f4+V8GXP/DBhaPS/y3/SdVWmENmFBQ9KuSTA l9NfNwNyP9yqxrmX1j9wFO+eeXJqeMIkrgEYNwJ4efq6A9ZlCO/Nq3QpmftpsLx5 oyGKw5UHaBx1AVKqAYGaLpIbYXV79BLISUPx4gr+MpKpb964TMZ8OzRWfZ+dciIZ 8dMND+krwUqMUvuLZ4w/KPSR2k8D9Q8D7OnPxQRi/XiFUD1mKvPzyJjKW9eCElyB tdrkbaBgvoLJbOvrtuzM8hdOR98CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN3mrRMJeltaSkZzkIyE9MidLs98MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlODU1ZThh LTNmZjgtNDdmZi1hYWVjLTQ4ZDhiMzgwYTkwNC8xL0RERTZBRDEzMDk3QTVCNUE0 QTQ2NzM5MDhDODRGNEM4OUQyRUNGN0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30gcAwDQYJKoZIhvcNAQELBQADggEBAHc8qrWNcTHaAUam0elVzJAHdVV4 YPtGL2We5klZlxTw37H8/tGndEPURLXkSnoQEGIOl9Ie0aqAaYFGgZcpjpoe1dZ8 61iFQE05ZAj2eBqQkkPg+N8wL5UwjuD4EgFwi0IY4cgUs+GpxFx+qpwgQqFpRRMI 1kulZ5PV5OXZvYjY7Xg5HCz1/9mhjaTdlmH9zVYfI4KAsWuoFCvRhm/61oSMfJ++ o3I37C5cYu3pU2OcFOuE+PoKcOnFYafOi1C+YMn/kXiTVEb8y6Wd290GCaalmhgF J4jsoHg7v10MKm0M5XwaMtQVHeXyZmV/sUV8oZ3YH8xyMfc58z/prgOBQfQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org