$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer File: EB6A398D686553919657E094022E843191F4573E.cer (raw, json) Hash identifier: PeuRre+BKO7OZagZ7CbMoAovJBVWMU6sCrW1F1QKccg= Subject key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49421B86B491282AF14CD5BF8F67BD446B210BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft caRepository: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jan 2024 18:32:21 +0000 Certificate not after: Thu 09 Jan 2025 18:37:21 +0000 Subordinate resources: IP: 103.181.248.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:42:1b:86:b4:91:28:2a:f1:4c:d5:bf:8f:67:bd:44:6b:21:0b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 11 18:32:21 2024 GMT Not After : Jan 9 18:37:21 2025 GMT Subject: CN=EB6A398D686553919657E094022E843191F4573E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:10:38:bf:48:c5:6b:5c:58:e2:53:5a:07: cf:88:54:b8:a2:a9:28:82:61:56:a4:2f:4e:50:50: 7c:9f:66:3b:af:21:c1:e1:56:43:68:ac:35:b3:ed: 0b:27:8a:15:46:24:51:39:e3:de:35:9b:54:57:09: bb:82:36:43:22:a3:ca:37:21:59:f4:d0:54:4a:f8: ad:0a:32:c7:37:6b:7e:e0:f9:34:61:fa:31:12:30: 2e:87:36:d9:18:5d:cd:6a:80:03:b7:6a:8e:ae:de: a7:67:86:16:01:e0:f8:76:1e:54:b9:e2:9e:05:84: 4b:66:3b:68:d2:48:d2:c5:c8:f6:28:57:60:bc:28: 95:8e:11:ae:e3:0c:ff:00:c7:67:b5:73:0f:72:5e: 61:34:15:92:60:2d:9a:27:09:90:5e:38:ce:e3:68: 14:a3:2c:4b:0a:81:8c:80:77:46:65:d1:c7:89:ac: 59:33:c2:5e:a6:3c:ce:d6:89:1d:cf:ea:11:69:21: f0:65:ae:92:09:8d:9a:6f:f3:1c:ea:e5:a6:12:d9: b9:a2:81:d3:ec:5d:a3:bd:e6:00:28:f0:97:99:4f: 63:ed:2d:08:94:2c:d1:e4:27:7d:98:ad:c1:8e:48: c9:66:9a:0e:5b:f5:95:4a:07:e5:60:a5:24:26:18: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.248.0/23 Signature Algorithm: sha256WithRSAEncryption 84:18:5d:d9:70:48:1a:14:36:72:8c:bf:01:b9:7e:82:08:2d: 9d:03:ce:ca:11:db:2e:3b:16:be:9e:ad:71:c1:33:30:66:fd: d2:b7:53:bd:ae:ce:37:5a:3f:e8:32:8e:64:64:b8:85:8b:23: 70:2d:97:88:bb:7f:cc:5a:f8:94:b2:de:8e:77:4b:af:e6:fa: 51:a4:22:03:c0:84:00:5e:2f:80:53:e8:5d:19:e8:bd:f9:3d: e0:6c:5f:02:b6:4f:e7:e2:4b:91:4b:84:ca:0c:b8:18:7b:5f: c3:9c:8c:e6:7a:03:54:95:a0:a3:bf:1a:ac:87:2f:3d:d7:6e: c4:19:1c:22:af:75:24:72:03:35:fc:00:52:d4:a7:3a:8c:23: 40:0f:26:2b:10:41:8a:8b:33:2a:bb:85:e4:89:e1:c9:a6:e8: e3:f7:1a:67:3c:95:88:2c:14:c7:f8:bb:94:55:6e:bc:3d:82: 01:6d:dc:f5:ba:c0:5a:e7:f3:e8:7f:ff:04:2f:3e:b0:05:5f: 7b:13:28:80:8a:6b:8e:0d:62:e9:8b:80:e1:d9:b6:53:a8:c3: 82:60:f6:77:4e:8c:b3:e0:d5:38:99:37:68:ed:eb:9f:f4:20: 3b:26:dd:88:3a:8f:41:77:38:a6:df:55:af:26:09:e6:0b:88: d3:6e:66:36 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSUIbhrSRKCrxTNW/j2e9RGshC9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExMTE4MzIyMVoX DTI1MDEwOTE4MzcyMVowMzExMC8GA1UEAxMoRUI2QTM5OEQ2ODY1NTM5MTk2NTdF MDk0MDIyRTg0MzE5MUY0NTczRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjZEDi/SMVrXFjiU1oHz4hUuKKpKIJhVqQvTlBQfJ9mO68hweFWQ2isNbPt CyeKFUYkUTnj3jWbVFcJu4I2QyKjyjchWfTQVEr4rQoyxzdrfuD5NGH6MRIwLoc2 2RhdzWqAA7dqjq7ep2eGFgHg+HYeVLningWES2Y7aNJI0sXI9ihXYLwolY4RruMM /wDHZ7VzD3JeYTQVkmAtmicJkF44zuNoFKMsSwqBjIB3RmXRx4msWTPCXqY8ztaJ Hc/qEWkh8GWukgmNmm/zHOrlphLZuaKB0+xdo73mACjwl5lPY+0tCJQs0eQnfZit wY5IyWaaDlv1lUoH5WClJCYYbJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOtqOY1oZVORllfglAIuhDGR9Fc+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlNGUxMDNl LTNkNzgtNGFlMC05YmE0LWQxNzkyZmZhMDRhYy8wL0VCNkEzOThENjg2NTUzOTE5 NjU3RTA5NDAyMkU4NDMxOTFGNDU3M0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntfgwDQYJKoZIhvcNAQELBQADggEBAIQYXdlwSBoUNnKMvwG5foIILZ0DzsoR 2y47Fr6erXHBMzBm/dK3U72uzjdaP+gyjmRkuIWLI3Atl4i7f8xa+JSy3o53S6/m +lGkIgPAhABeL4BT6F0Z6L35PeBsXwK2T+fiS5FLhMoMuBh7X8OcjOZ6A1SVoKO/ GqyHLz3XbsQZHCKvdSRyAzX8AFLUpzqMI0APJisQQYqLMyq7heSJ4cmm6OP3Gmc8 lYgsFMf4u5RVbrw9ggFt3PW6wFrn8+h//wQvPrAFX3sTKICKa44NYumLgOHZtlOo w4Jg9ndOjLPg1TiZN2jt65/0IDsm3Yg6j0F3OKbfVa8mCeYLiNNuZjY= -----END CERTIFICATE-----Generated at Thu May 9 00:29:19 2024 by rpki-client on console-ams.rpki-client.org