$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer File: EB6A398D686553919657E094022E843191F4573E.cer (raw, json) Hash identifier: nWIplHjqhsMfbLOLiTbF9QuuBsrbLIBWJy9dXvv/81M= Subject key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52A229E3AF024F3ACA2481BBCD573965F00AA104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft caRepository: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Dec 2024 03:39:52 +0000 Certificate not after: Fri 12 Dec 2025 03:44:52 +0000 Subordinate resources: IP: 103.181.248.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a2:29:e3:af:02:4f:3a:ca:24:81:bb:cd:57:39:65:f0:0a:a1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 13 03:39:52 2024 GMT Not After : Dec 12 03:44:52 2025 GMT Subject: CN=EB6A398D686553919657E094022E843191F4573E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:10:38:bf:48:c5:6b:5c:58:e2:53:5a:07: cf:88:54:b8:a2:a9:28:82:61:56:a4:2f:4e:50:50: 7c:9f:66:3b:af:21:c1:e1:56:43:68:ac:35:b3:ed: 0b:27:8a:15:46:24:51:39:e3:de:35:9b:54:57:09: bb:82:36:43:22:a3:ca:37:21:59:f4:d0:54:4a:f8: ad:0a:32:c7:37:6b:7e:e0:f9:34:61:fa:31:12:30: 2e:87:36:d9:18:5d:cd:6a:80:03:b7:6a:8e:ae:de: a7:67:86:16:01:e0:f8:76:1e:54:b9:e2:9e:05:84: 4b:66:3b:68:d2:48:d2:c5:c8:f6:28:57:60:bc:28: 95:8e:11:ae:e3:0c:ff:00:c7:67:b5:73:0f:72:5e: 61:34:15:92:60:2d:9a:27:09:90:5e:38:ce:e3:68: 14:a3:2c:4b:0a:81:8c:80:77:46:65:d1:c7:89:ac: 59:33:c2:5e:a6:3c:ce:d6:89:1d:cf:ea:11:69:21: f0:65:ae:92:09:8d:9a:6f:f3:1c:ea:e5:a6:12:d9: b9:a2:81:d3:ec:5d:a3:bd:e6:00:28:f0:97:99:4f: 63:ed:2d:08:94:2c:d1:e4:27:7d:98:ad:c1:8e:48: c9:66:9a:0e:5b:f5:95:4a:07:e5:60:a5:24:26:18: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.248.0/23 Signature Algorithm: sha256WithRSAEncryption 78:73:6f:f1:8f:0e:02:a4:93:b4:b4:0b:23:84:6c:91:d7:3b: ef:d4:30:54:e8:43:ab:ef:2c:31:81:fb:5d:27:f8:86:08:53: e8:85:e2:11:96:ce:e6:a8:7b:f1:ae:c0:34:56:9f:3e:6d:78: 2a:af:ae:8d:28:cc:3c:c7:e5:13:b1:d6:e1:d4:cc:92:7d:e1: 74:5c:51:85:12:f7:c2:2c:f7:4b:9d:41:be:73:b3:b6:dc:d2: 80:53:da:86:32:64:50:62:fc:4c:fb:b6:80:08:d0:67:c0:28: 5b:44:65:01:d2:a5:fc:88:24:01:58:bd:7c:91:d0:99:e5:c6: 64:dc:7e:59:03:ca:a4:ca:0d:e1:9d:ce:cd:21:14:90:7c:cb: cc:85:71:4c:d0:95:6f:2b:c8:00:59:f8:25:dc:97:61:76:ba: ad:f6:ba:6d:a4:52:85:02:5d:ea:eb:cd:c3:a3:e5:a9:13:34: 28:17:49:aa:bc:02:aa:9b:25:9f:d2:d9:d1:46:20:c7:c0:04: ef:1f:ac:98:1c:f6:f0:f5:5b:32:15:7b:82:46:4c:9b:43:82: 70:ab:ca:09:bd:51:3a:cd:8f:b0:5a:e8:a0:4b:c5:0f:b3:14: 2e:06:56:78:f4:e0:aa:75:d4:6a:d4:ca:49:71:3f:8c:d3:5d: e6:47:12:5c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUqIp468CTzrKJIG7zVc5ZfAKoQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMzAzMzk1MloX DTI1MTIxMjAzNDQ1MlowMzExMC8GA1UEAxMoRUI2QTM5OEQ2ODY1NTM5MTk2NTdF MDk0MDIyRTg0MzE5MUY0NTczRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjZEDi/SMVrXFjiU1oHz4hUuKKpKIJhVqQvTlBQfJ9mO68hweFWQ2isNbPt CyeKFUYkUTnj3jWbVFcJu4I2QyKjyjchWfTQVEr4rQoyxzdrfuD5NGH6MRIwLoc2 2RhdzWqAA7dqjq7ep2eGFgHg+HYeVLningWES2Y7aNJI0sXI9ihXYLwolY4RruMM /wDHZ7VzD3JeYTQVkmAtmicJkF44zuNoFKMsSwqBjIB3RmXRx4msWTPCXqY8ztaJ Hc/qEWkh8GWukgmNmm/zHOrlphLZuaKB0+xdo73mACjwl5lPY+0tCJQs0eQnfZit wY5IyWaaDlv1lUoH5WClJCYYbJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOtqOY1oZVORllfglAIuhDGR9Fc+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlNGUxMDNl LTNkNzgtNGFlMC05YmE0LWQxNzkyZmZhMDRhYy8wL0VCNkEzOThENjg2NTUzOTE5 NjU3RTA5NDAyMkU4NDMxOTFGNDU3M0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntfgwDQYJKoZIhvcNAQELBQADggEBAHhzb/GPDgKkk7S0CyOEbJHXO+/UMFTo Q6vvLDGB+10n+IYIU+iF4hGWzuaoe/GuwDRWnz5teCqvro0ozDzH5ROx1uHUzJJ9 4XRcUYUS98Is90udQb5zs7bc0oBT2oYyZFBi/Ez7toAI0GfAKFtEZQHSpfyIJAFY vXyR0JnlxmTcflkDyqTKDeGdzs0hFJB8y8yFcUzQlW8ryABZ+CXcl2F2uq32um2k UoUCXerrzcOj5akTNCgXSaq8AqqbJZ/S2dFGIMfABO8frJgc9vD1WzIVe4JGTJtD gnCrygm9UTrNj7Ba6KBLxQ+zFC4GVnj04Kp11GrUyklxP4zTXeZHElw= -----END CERTIFICATE-----Generated at Sat Apr 5 08:37:14 2025 by rpki-client