$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer (raw, json) Hash identifier: +vpA/tFdRwxhi9XCfetXF1++aB0Q2h0yUE1+2wjoLbs= Subject key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10D60A879C7E7133CA0ED969106110FE45A1283E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft caRepository: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 15:14:17 +0000 Certificate not after: Mon 30 Jun 2025 15:19:17 +0000 Subordinate resources: IP: 202.162.32.0/20 IP: 2402:a600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d6:0a:87:9c:7e:71:33:ca:0e:d9:69:10:61:10:fe:45:a1:28:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 15:14:17 2024 GMT Not After : Jun 30 15:19:17 2025 GMT Subject: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:5a:6c:1a:76:d6:d3:f2:4f:2c:53:07:b2: 6c:38:6e:06:67:b8:c9:9b:5d:1e:e8:8c:1f:e5:f6: 62:42:57:0e:c6:85:80:0a:b0:fe:f9:00:28:1c:65: d7:5c:2d:f3:15:e2:81:f0:f5:8c:ca:58:f5:80:ba: 06:55:67:7f:d0:3a:af:85:be:54:f7:4f:a8:be:92: 57:6a:ad:fa:0f:b2:b7:11:58:f2:f3:51:00:8d:5b: bc:4c:df:71:27:c4:00:b0:b8:15:03:b0:cf:b2:14: 5b:bb:9d:20:f9:28:5a:35:2e:71:8d:c1:1b:3a:c3: df:dc:e5:74:2b:67:14:25:3e:69:7f:12:65:db:01: c8:78:a5:28:3e:7a:3a:4a:4b:96:c9:06:17:9a:0e: c1:ad:42:23:e6:82:e0:54:84:bf:04:4b:1f:15:ef: 98:0c:2a:dc:9b:c4:cb:9f:8b:a5:f5:c9:ee:c1:77: c5:e9:2f:62:f3:80:e4:37:e1:0a:3a:66:c0:6f:a0: 7d:6a:e9:30:6b:96:be:b1:dd:d9:e9:71:50:cf:83: 8a:f7:2e:dd:2f:cd:03:e1:e3:73:fe:3d:58:f4:79: fa:7b:be:65:be:37:2e:bb:53:f1:ee:1c:a9:58:05: 85:95:b0:04:11:d4:a3:db:76:78:93:14:33:33:20: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.32.0/20 IPv6: 2402:a600::/32 Signature Algorithm: sha256WithRSAEncryption 69:6f:86:44:3c:ab:b4:82:51:bb:19:ab:e0:84:6c:12:fc:b3: 38:31:8a:fb:4a:69:49:70:60:37:90:1f:28:dc:63:03:3a:f2: 31:99:dd:8c:78:cc:55:a0:e3:b6:bd:58:b6:16:f1:08:cf:72: 9c:a2:9a:05:13:16:44:73:d8:6a:83:aa:84:e0:0c:e2:ad:91: 28:1e:a1:a8:ce:19:3c:c1:48:c5:5c:c8:38:ec:00:11:95:c4: 95:17:96:6c:88:81:37:4e:11:08:89:9b:3f:ee:dc:cd:96:66: 75:81:43:8e:3e:ad:39:f6:56:b2:54:ba:fc:ed:90:c6:b4:e1: e8:21:44:2a:eb:6d:b6:24:6e:55:cc:9a:d6:e1:d3:0f:73:54: 98:57:ae:19:5b:59:2f:22:61:a8:fc:f5:5f:fb:bc:da:66:ed: 90:8a:ce:57:72:d4:8b:65:b3:a1:d5:a8:be:0b:94:e4:89:6a: 07:99:7e:2d:e8:f7:36:2a:89:1a:2f:f0:ad:d0:b6:27:ca:e1: b6:ef:34:ef:3a:82:b9:82:3d:45:90:26:62:11:dd:4e:d3:15: 15:42:19:f8:20:5f:ae:1e:ad:8e:7e:9c:98:0d:f5:f3:77:2a: eb:df:90:ca:fe:ae:63:72:74:30:02:a0:bf:a8:8c:f8:53:7a: 39:1c:95:f4 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUENYKh5x+cTPKDtlpEGEQ/kWhKD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1MTQxN1oX DTI1MDYzMDE1MTkxN1owMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcw MDcwODBFMkY3QUVBNDc4RkQxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAZWmwadtbT8k8sUweybDhuBme4yZtdHuiMH+X2YkJXDsaFgAqw/vkAKBxl 11wt8xXigfD1jMpY9YC6BlVnf9A6r4W+VPdPqL6SV2qt+g+ytxFY8vNRAI1bvEzf cSfEALC4FQOwz7IUW7udIPkoWjUucY3BGzrD39zldCtnFCU+aX8SZdsByHilKD56 OkpLlskGF5oOwa1CI+aC4FSEvwRLHxXvmAwq3JvEy5+LpfXJ7sF3xekvYvOA5Dfh CjpmwG+gfWrpMGuWvrHd2elxUM+Divcu3S/NA+Hjc/49WPR5+nu+Zb43LrtT8e4c qVgFhZWwBBHUo9t2eJMUMzMgyLkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOUwp7Q8DHn9hwcAcIDi966keP0cMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jM2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDJmMmY4 LTM1MTItNDNlNS1iZTE3LWIxMWI1OGY5NjA4My8wL0U1MzBBN0I0M0MwQzc5RkQ4 NzA3MDA3MDgwRTJGN0FFQTQ3OEZEMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKoiAwDQQCAAIwBwMFACQCpgAwDQYJKoZIhvcNAQELBQADggEBAGlvhkQ8q7SC UbsZq+CEbBL8szgxivtKaUlwYDeQHyjcYwM68jGZ3Yx4zFWg47a9WLYW8QjPcpyi mgUTFkRz2GqDqoTgDOKtkSgeoajOGTzBSMVcyDjsABGVxJUXlmyIgTdOEQiJmz/u 3M2WZnWBQ44+rTn2VrJUuvztkMa04eghRCrrbbYkblXMmtbh0w9zVJhXrhlbWS8i Yaj89V/7vNpm7ZCKzldy1Itls6HVqL4LlOSJageZfi3o9zYqiRov8K3QtifK4bbv NO86grmCPUWQJmIR3U7TFRVCGfggX64erY5+nJgN9fN3KuvfkMr+rmNydDACoL+o jPhTejkclfQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org