$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer File: E3928623409C1C10E292F838F8308E11636E6C03.cer (raw, json) Hash identifier: DGSGmOP378f7biYNF+LnZMl+p8iyYqNU0csGoZ7euWQ= Subject key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 74A8F6C9D90F78DCA0721ED7B8CC1C5E8BE5E3EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft caRepository: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Jul 2024 09:01:06 +0000 Certificate not after: Tue 15 Jul 2025 09:06:06 +0000 Subordinate resources: IP: 2001:df4:c40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a8:f6:c9:d9:0f:78:dc:a0:72:1e:d7:b8:cc:1c:5e:8b:e5:e3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 16 09:01:06 2024 GMT Not After : Jul 15 09:06:06 2025 GMT Subject: CN=E3928623409C1C10E292F838F8308E11636E6C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:93:49:60:af:a4:de:16:75:dc:ac:8d:84: 79:81:d4:93:4d:fe:8b:5f:5e:32:32:59:d3:16:83: a1:a2:91:61:68:15:b3:75:c5:68:0d:be:de:03:a1: d9:3e:38:e3:38:95:f5:18:83:1c:b5:34:85:41:02: 02:08:e1:57:45:d0:e1:46:54:3c:c9:6a:1d:bc:08: c7:e0:d9:ca:76:97:6a:f3:e8:61:ca:35:10:d9:72: 5e:e7:74:82:e5:3f:12:88:f6:9f:5f:6f:b5:9f:e1: 82:d0:15:49:45:2f:78:05:d9:cd:ab:aa:9d:89:04: 49:56:79:9f:1f:97:ce:ea:f3:92:88:af:36:d5:da: e8:64:99:f6:4d:a4:11:dc:42:f7:87:df:ca:66:1b: e1:2c:2e:aa:09:ed:7c:51:c3:c5:b9:bb:e4:97:79: 6b:7a:c3:1e:11:b1:bd:bc:88:98:e1:d1:01:e3:9c: 6f:79:f9:79:78:c4:1e:75:b0:64:bc:e5:78:84:34: d3:e5:60:38:ab:24:33:f7:9e:ba:06:80:52:e5:92: bd:67:0e:50:ca:28:cf:be:eb:75:f4:ae:ff:5d:a1: c7:94:eb:47:dd:0f:37:07:05:44:47:7b:f5:0d:26: 36:94:f2:dd:c0:25:96:b3:5e:7a:44:5b:4c:7d:cf: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:c40::/48 Signature Algorithm: sha256WithRSAEncryption 77:9c:1a:8c:c9:c7:dd:82:7f:36:82:ab:fe:8e:c4:b0:2a:f3: dd:3b:ee:87:46:7a:70:27:a7:8c:ad:7b:02:b4:88:56:a6:6c: 00:66:6b:ad:02:14:d7:f3:4c:1e:1d:bd:90:c8:6a:09:94:aa: 3d:ef:c1:fd:cf:20:54:98:e6:80:cf:35:ed:a7:bb:11:bb:d8: 48:69:7a:a0:b9:ec:41:bd:b8:14:b1:8c:88:86:25:be:f5:5a: 24:5b:56:46:49:34:3c:fd:05:d4:c3:92:b5:f5:f3:66:46:2a: d9:0a:af:f8:45:1a:25:76:8d:d8:2f:66:66:ce:93:3c:c2:39: 23:2b:15:9d:76:8d:93:94:39:ff:d1:5e:54:dd:b8:f2:d8:1a: 44:24:4b:0c:8c:e5:79:d5:35:d9:f8:48:e2:d8:4a:f8:9b:bf: b8:5b:9c:3b:c4:1a:06:80:ff:13:3e:3c:14:f2:9e:85:b1:29: 8a:eb:21:d9:f3:36:72:dd:d2:1e:cf:78:43:03:64:10:f8:6a: 0c:24:d0:26:a7:2b:95:f6:39:65:02:53:2f:ff:5a:60:62:3a: 06:b5:38:d9:21:c7:60:ff:66:7f:e3:11:c6:a6:4a:c5:8b:9f: b8:2b:8a:3f:bf:be:f2:8b:15:32:fa:06:5f:b7:7f:43:28:56: 24:33:9c:d9 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUdKj2ydkPeNygch7XuMwcXovl4+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxNjA5MDEwNloX DTI1MDcxNTA5MDYwNlowMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJG ODM4RjgzMDhFMTE2MzZFNkMwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN97k0lgr6TeFnXcrI2EeYHUk03+i19eMjJZ0xaDoaKRYWgVs3XFaA2+3gOh 2T444ziV9RiDHLU0hUECAgjhV0XQ4UZUPMlqHbwIx+DZynaXavPoYco1ENlyXud0 guU/Eoj2n19vtZ/hgtAVSUUveAXZzauqnYkESVZ5nx+XzurzkoivNtXa6GSZ9k2k EdxC94ffymYb4SwuqgntfFHDxbm75Jd5a3rDHhGxvbyImOHRAeOcb3n5eXjEHnWw ZLzleIQ00+VgOKskM/eeugaAUuWSvWcOUMooz77rdfSu/12hx5TrR90PNwcFREd7 9Q0mNpTy3cAllrNeekRbTH3Psz0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOOShiNAnBwQ4pL4OPgwjhFjbmwDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzNjU2MWQ0 LTIzYzgtNGM5Yi04OTBlLTRmMjYzMmU1MmM5Ny8xL0UzOTI4NjIzNDA5QzFDMTBF MjkyRjgzOEY4MzA4RTExNjM2RTZDMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30DEAwDQYJKoZIhvcNAQELBQADggEBAHecGozJx92CfzaCq/6OxLAq8907 7odGenAnp4ytewK0iFambABma60CFNfzTB4dvZDIagmUqj3vwf3PIFSY5oDPNe2n uxG72EhpeqC57EG9uBSxjIiGJb71WiRbVkZJNDz9BdTDkrX182ZGKtkKr/hFGiV2 jdgvZmbOkzzCOSMrFZ12jZOUOf/RXlTduPLYGkQkSwyM5XnVNdn4SOLYSvibv7hb nDvEGgaA/xM+PBTynoWxKYrrIdnzNnLd0h7PeEMDZBD4agwk0CanK5X2OWUCUy// WmBiOga1ONkhx2D/Zn/jEcamSsWLn7grij+/vvKLFTL6Bl+3f0MoViQznNk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org