$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer (raw, json) Hash identifier: RSrs/66EVoSgLk8xEYoydzS92IcWgVNchw1QTwjQbJ4= Subject key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 18EAFD59831CA6E7F38794696804671B6F5A0946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft caRepository: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 23 May 2024 09:32:40 +0000 Certificate not after: Thu 22 May 2025 09:37:40 +0000 Subordinate resources: IP: 103.191.150.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ea:fd:59:83:1c:a6:e7:f3:87:94:69:68:04:67:1b:6f:5a:09:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 09:32:40 2024 GMT Not After : May 22 09:37:40 2025 GMT Subject: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:64:b2:88:9a:37:26:16:6f:6b:86:0a:5c: 85:71:80:d9:d6:6f:5b:49:5d:36:f8:b3:50:80:4a: b1:43:99:8d:2a:d2:98:a4:99:c5:09:df:35:74:0e: 5a:67:92:34:f3:e5:c4:5b:ec:6b:b4:79:f2:cb:ae: a4:a9:9f:1f:74:1d:77:04:88:37:9f:fa:ba:d3:cd: fb:19:5c:eb:8d:5e:5b:3a:57:fa:5e:ab:ea:6a:f2: be:b6:bf:b3:45:0a:c2:39:32:66:28:7f:f4:07:95: b1:94:ba:36:8f:fc:07:80:ec:fa:37:1c:8d:59:f6: 8a:80:61:5f:06:cc:5c:f6:38:59:71:70:c4:22:c2: 8c:c6:ef:38:45:ad:dd:94:f3:72:38:03:56:9a:28: 46:ad:53:86:61:bc:df:41:82:56:b8:12:d0:f6:2a: f6:93:00:2e:b1:79:3c:72:93:76:02:18:4e:78:1b: 8a:d0:ca:e7:70:59:c3:e8:db:f9:ba:c0:b0:18:fa: f1:4c:06:ac:c1:fb:bf:ff:75:5b:a2:71:19:82:d6: af:90:a2:0b:01:6e:98:62:be:94:0d:21:87:6e:ac: 8d:57:cc:15:04:4e:1d:c0:98:f5:6e:b1:de:63:a3: 75:13:e8:e1:57:c8:3b:07:0e:a2:77:0d:57:7d:5c: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.150.0/23 Signature Algorithm: sha256WithRSAEncryption 80:9a:54:7a:d9:97:37:92:60:b2:62:49:ef:7b:ce:a9:00:9b: b8:bf:7e:64:42:df:d8:89:29:b6:88:eb:a8:cc:a3:4e:2e:2b: e0:fc:5d:f7:4f:9a:af:1f:69:52:bf:16:49:b8:5f:4d:96:30: ef:2a:33:18:af:ca:c3:9b:3a:26:56:ef:9e:82:3b:c1:21:52: 49:56:b3:d7:f2:e7:3e:4e:20:a4:89:39:4c:a1:1f:66:81:5a: ac:7c:a3:da:91:d9:e0:67:ff:78:58:5b:15:4a:3e:70:73:a4: b7:93:60:f9:a0:51:66:35:2c:b8:44:53:51:96:8e:ed:e0:62: 18:fb:64:ee:62:6f:dd:20:7d:c4:4f:ae:5f:8b:5f:61:98:90: 23:f2:f1:42:26:74:14:e9:62:f4:f7:4d:90:1d:46:21:9a:bb: c8:1d:f3:9f:85:d7:06:d8:79:02:7f:a3:3c:3c:ec:70:6e:ca: a3:ac:9c:35:a0:48:f8:81:87:59:2b:3b:5a:80:e5:3b:02:d4: c5:7f:d1:06:4f:ed:44:39:cc:94:93:08:cb:32:cd:db:f1:dc: d2:1e:c3:4a:a4:46:4c:2d:29:64:af:db:ef:94:10:4b:8e:85: b5:f2:71:c4:88:a8:9e:13:30:37:b4:b3:9e:54:6d:b3:60:3d: 8b:64:cc:99 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGOr9WYMcpufzh5RpaARnG29aCUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMzA5MzI0MFoX DTI1MDUyMjA5Mzc0MFowMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3 QjNCQkQ3RDFEMTg2RjRFQzFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVgZLKImjcmFm9rhgpchXGA2dZvW0ldNvizUIBKsUOZjSrSmKSZxQnfNXQO WmeSNPPlxFvsa7R58suupKmfH3QddwSIN5/6utPN+xlc641eWzpX+l6r6mryvra/ s0UKwjkyZih/9AeVsZS6No/8B4Ds+jccjVn2ioBhXwbMXPY4WXFwxCLCjMbvOEWt 3ZTzcjgDVpooRq1ThmG830GCVrgS0PYq9pMALrF5PHKTdgIYTngbitDK53BZw+jb +brAsBj68UwGrMH7v/91W6JxGYLWr5CiCwFumGK+lA0hh26sjVfMFQROHcCY9W6x 3mOjdRPo4VfIOwcOoncNV31cZh8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrqLy8H//NDQHd7O719HRhvTsHLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4YjQyNDIw LTU2ZDAtNDUxYS1hMjlkLTVmOWQ2MjMwZTIyNy8wL0VBRUEyRjJGMDdGRkYzNDM0 MDc3N0IzQkJEN0QxRDE4NkY0RUMxQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv5YwDQYJKoZIhvcNAQELBQADggEBAICaVHrZlzeSYLJiSe97zqkAm7i/fmRC 39iJKbaI66jMo04uK+D8XfdPmq8faVK/Fkm4X02WMO8qMxivysObOiZW756CO8Eh UklWs9fy5z5OIKSJOUyhH2aBWqx8o9qR2eBn/3hYWxVKPnBzpLeTYPmgUWY1LLhE U1GWju3gYhj7ZO5ib90gfcRPrl+LX2GYkCPy8UImdBTpYvT3TZAdRiGau8gd85+F 1wbYeQJ/ozw87HBuyqOsnDWgSPiBh1krO1qA5TsC1MV/0QZP7UQ5zJSTCMsyzdvx 3NIew0qkRkwtKWSv2++UEEuOhbXyccSIqJ4TMDe0s55UbbNgPYtkzJk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:32 2024 by rpki-client on console-fra.rpki-client.org