$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer (raw, json) Hash identifier: mrM7Gxb6luutEP6cBO241Rum7d4sZWnwhFPFStd9g50= Subject key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0822C526F155032C8DCDEFB43B4A858D92A8BEBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft caRepository: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 06 Aug 2024 07:13:42 +0000 Certificate not after: Tue 05 Aug 2025 07:18:42 +0000 Subordinate resources: IP: 203.77.208.0/20 IP: 2406:2c00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:22:c5:26:f1:55:03:2c:8d:cd:ef:b4:3b:4a:85:8d:92:a8:be:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 6 07:13:42 2024 GMT Not After : Aug 5 07:18:42 2025 GMT Subject: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:af:d1:a8:11:bb:10:86:13:eb:04:f7:e0: fd:7b:38:ca:e5:b7:21:9a:cd:18:93:f9:ae:f7:79: ed:db:bd:ab:9a:a3:ce:09:4b:48:0c:81:1e:8e:fa: 69:58:18:75:50:83:af:fa:17:2c:4e:49:5e:28:c4: 37:53:34:16:2c:f3:2c:5d:72:ad:08:ac:6d:2a:a0: a2:94:bd:5c:73:94:51:9d:02:bc:ef:81:24:a3:6b: aa:48:b2:e3:cd:94:2b:aa:5e:c3:70:91:00:3f:67: 49:4f:db:0e:ce:d5:48:4d:e4:64:86:f3:ce:88:da: 45:88:4d:4c:f1:cb:d2:73:0d:70:79:b1:91:38:5a: 54:32:e9:13:b1:b5:a7:4e:93:8c:90:6d:19:5e:98: 69:11:c7:c9:7e:e8:3c:a7:b2:39:76:ba:2e:87:e8: 13:56:47:77:bc:33:80:0a:5a:25:1a:02:68:8c:5b: cc:32:bd:20:06:db:16:3a:c8:db:81:ac:95:db:62: 89:1e:71:8d:1b:10:7d:d9:dd:06:32:1a:90:dc:4a: 9b:ee:3d:7b:4e:09:9b:03:47:90:c3:a4:0c:87:ee: e2:0c:15:42:cf:5b:9b:ee:dd:bf:7b:90:ae:9c:01: 6a:43:d2:f3:d3:ec:93:64:14:d4:25:e5:76:56:5b: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.77.208.0/20 IPv6: 2406:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 4c:34:14:98:7f:46:65:58:0c:71:98:4f:84:72:4b:95:07:70: 26:33:b6:2e:5b:4d:48:71:35:61:06:e5:b2:41:85:00:b6:a7: db:1a:0e:56:33:21:4c:d4:11:7e:35:67:e2:16:4a:99:99:8d: ef:15:25:63:a8:3d:95:1e:c3:b9:7d:b3:7e:9c:26:6c:bb:0b: e2:6b:5a:8f:64:64:39:d0:28:50:e9:b2:d0:00:29:90:d8:2f: 55:f9:eb:a2:03:c0:fb:b1:79:a6:d3:86:c6:c4:a0:c7:10:a3: 58:00:38:94:2a:64:a4:37:68:fa:95:0a:05:45:7a:42:6b:82: d2:91:20:de:21:c1:7c:67:42:3b:c2:01:40:56:f9:87:87:f1: e4:63:29:10:c2:81:15:8f:74:84:f5:77:05:c5:92:c3:fc:c9: a2:95:49:cb:ed:83:25:8f:ad:3c:66:2d:b4:88:a4:1b:e8:94: 74:60:d7:e7:8a:b5:5a:2b:15:dc:ca:c1:68:a5:c1:1c:89:55: f8:3e:73:3d:2e:2b:fd:0c:3f:09:d8:10:a3:50:d2:6d:c3:42: c8:b0:65:3e:bb:31:eb:21:86:bb:83:52:96:0c:da:c9:96:64: db:99:24:1f:49:aa:a9:6d:7b:e8:86:7f:e1:3b:18:aa:3f:46: 92:72:84:dc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUCCLFJvFVAyyNze+0O0qFjZKovrswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwNjA3MTM0MloX DTI1MDgwNTA3MTg0MlowMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVC QkRGRDg2RkQ1M0U4NEZBNzVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRur9GoEbsQhhPrBPfg/Xs4yuW3IZrNGJP5rvd57du9q5qjzglLSAyBHo76 aVgYdVCDr/oXLE5JXijEN1M0FizzLF1yrQisbSqgopS9XHOUUZ0CvO+BJKNrqkiy 482UK6pew3CRAD9nSU/bDs7VSE3kZIbzzojaRYhNTPHL0nMNcHmxkThaVDLpE7G1 p06TjJBtGV6YaRHHyX7oPKeyOXa6LofoE1ZHd7wzgApaJRoCaIxbzDK9IAbbFjrI 24GsldtiiR5xjRsQfdndBjIakNxKm+49e04JmwNHkMOkDIfu4gwVQs9bm+7dv3uQ rpwBakPS89Psk2QU1CXldlZb3j0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOb+p85/b6Xq4F6739hv1T6E+nWoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYy LTBjZjAtNDNjNi1iMjgyLWM2OWZiYTEzYTE0YS8wL0U2RkVBN0NFN0Y2RkE1RUFF MDVFQkJERkQ4NkZENTNFODRGQTc1QTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATLTdAwDQQCAAIwBwMFACQGLAAwDQYJKoZIhvcNAQELBQADggEBAEw0FJh/RmVY DHGYT4RyS5UHcCYzti5bTUhxNWEG5bJBhQC2p9saDlYzIUzUEX41Z+IWSpmZje8V JWOoPZUew7l9s36cJmy7C+JrWo9kZDnQKFDpstAAKZDYL1X566IDwPuxeabThsbE oMcQo1gAOJQqZKQ3aPqVCgVFekJrgtKRIN4hwXxnQjvCAUBW+YeH8eRjKRDCgRWP dIT1dwXFksP8yaKVScvtgyWPrTxmLbSIpBvolHRg1+eKtVorFdzKwWilwRyJVfg+ cz0uK/0MPwnYEKNQ0m3DQsiwZT67MeshhruDUpYM2smWZNuZJB9Jqqlte+iGf+E7 GKo/RpJyhNw= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:34 2024 by rpki-client on console-ams.rpki-client.org