$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer File: EBA04070CA27E646C332039E07557734C6732ED2.cer (raw, json) Hash identifier: NSL5iZ82bCoQnU56yBE+4h2u/sbWQmVqrfUbc+WPjMo= Subject key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 039D13F6DC4E9FC03B4414BE89963EFF5FCC1C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft caRepository: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 22 Oct 2023 07:18:20 +0000 Certificate not after: Sun 20 Oct 2024 07:23:20 +0000 Subordinate resources: IP: 103.111.140.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9d:13:f6:dc:4e:9f:c0:3b:44:14:be:89:96:3e:ff:5f:cc:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 22 07:18:20 2023 GMT Not After : Oct 20 07:23:20 2024 GMT Subject: CN=EBA04070CA27E646C332039E07557734C6732ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:40:d7:46:82:3e:e3:6f:26:95:b8:9c:85: 49:17:9d:dc:39:4a:4a:37:65:27:cc:1c:d9:d4:cf: 44:c5:c0:9d:a3:6b:d4:eb:67:37:4e:0c:68:79:36: d3:f2:05:f8:51:7f:1f:ec:ad:01:50:6d:51:03:c9: a9:2a:1e:4e:05:02:9f:fb:a7:c3:29:41:42:6d:cb: 0a:dc:c2:26:fa:b0:f6:ca:2c:50:be:d1:41:ee:fc: db:83:6a:18:ab:c1:9b:61:eb:e3:b4:27:95:24:25: 1b:2d:9f:2c:30:88:95:49:09:16:17:c2:fc:70:a6: d7:bd:cd:aa:6a:2c:36:49:50:a7:82:65:d8:06:e2: 72:5a:4a:7d:12:a2:24:6d:d7:f3:df:3d:b3:4d:51: 2d:50:5a:18:3a:af:64:67:21:2c:c2:d1:1e:c2:f0: 8d:23:05:dd:4f:3d:76:fd:95:6f:e2:ef:e8:75:78: 19:57:bb:be:c5:e5:a9:02:7d:75:37:1e:07:2c:dd: 1c:6f:24:f9:ee:30:bf:5e:ef:73:aa:5c:de:82:2b: bb:7b:2b:3d:ab:3c:0d:9d:de:9b:ce:35:b1:a8:26: 47:49:9a:81:b6:60:e2:ee:09:48:d8:c3:6c:95:f3: 7b:97:dc:ae:9b:45:2d:09:5e:fd:e8:e7:81:7b:3a: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.140.0/22 Signature Algorithm: sha256WithRSAEncryption 73:4e:87:f8:d7:7d:a6:6f:1a:2a:2e:38:bd:f5:bc:c1:cf:57: 25:58:0a:b3:79:a3:ed:3e:59:9c:80:da:da:a2:da:db:48:18: 34:a8:42:f9:fa:2a:14:3a:32:ab:0c:35:42:d7:c0:2e:59:cd: 49:de:b2:7b:76:f9:df:b0:f9:48:ab:9a:b1:8e:ad:b2:e4:4a: 2b:69:da:0a:a1:54:03:42:af:cc:cd:a8:7d:cb:d1:bc:e7:9a: db:b7:75:51:39:4c:e9:12:dc:60:4a:dd:9f:42:c0:cf:91:13: f4:ff:28:d0:d5:7d:ff:62:f0:95:bc:80:72:e7:66:93:67:cc: 59:cb:ab:1b:33:a3:83:17:9f:3f:b3:38:88:94:13:41:3b:5c: e8:13:5f:e8:25:ce:bf:2e:9b:d9:d2:b7:ed:f3:80:3e:e6:c1: 70:8e:09:62:2c:2a:fa:99:ec:a2:a8:47:9d:1d:e2:1c:df:25: de:5a:ae:24:8a:48:22:74:fc:8d:91:11:f7:7c:2a:4d:80:d1: 64:a9:b4:ef:db:16:ab:1e:b1:de:b7:77:cf:bc:23:7e:60:51: 67:90:45:46:6c:15:65:d7:9a:7f:49:9d:37:0e:b6:cb:95:ed: 79:a7:1d:c8:9c:3b:f8:d5:51:6c:22:52:17:42:bf:a9:90:23: 27:ae:e4:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUA50T9txOn8A7RBS+iZY+/1/MHIkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMjA3MTgyMFoX DTI0MTAyMDA3MjMyMFowMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIw MzlFMDc1NTc3MzRDNjczMkVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqcQNdGgj7jbyaVuJyFSRed3DlKSjdlJ8wc2dTPRMXAnaNr1OtnN04MaHk2 0/IF+FF/H+ytAVBtUQPJqSoeTgUCn/unwylBQm3LCtzCJvqw9sosUL7RQe7824Nq GKvBm2Hr47QnlSQlGy2fLDCIlUkJFhfC/HCm173NqmosNklQp4Jl2AbiclpKfRKi JG3X8989s01RLVBaGDqvZGchLMLRHsLwjSMF3U89dv2Vb+Lv6HV4GVe7vsXlqQJ9 dTceByzdHG8k+e4wv17vc6pc3oIru3srPas8DZ3em841sagmR0magbZg4u4JSNjD bJXze5fcrptFLQle/ejngXs68usCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOugQHDKJ+ZGwzIDngdVdzTGcy7SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZk LWE2NzQtNDQzNy1hYmYxLWU1NTBkZWMxMzdmYS8wL0VCQTA0MDcwQ0EyN0U2NDZD MzMyMDM5RTA3NTU3NzM0QzY3MzJFRDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnb4wwDQYJKoZIhvcNAQELBQADggEBAHNOh/jXfaZvGiouOL31vMHPVyVYCrN5 o+0+WZyA2tqi2ttIGDSoQvn6KhQ6MqsMNULXwC5ZzUnesnt2+d+w+UirmrGOrbLk Sitp2gqhVANCr8zNqH3L0bznmtu3dVE5TOkS3GBK3Z9CwM+RE/T/KNDVff9i8JW8 gHLnZpNnzFnLqxszo4MXnz+zOIiUE0E7XOgTX+glzr8um9nSt+3zgD7mwXCOCWIs KvqZ7KKoR50d4hzfJd5ariSKSCJ0/I2REfd8Kk2A0WSptO/bFqsesd63d8+8I35g UWeQRUZsFWXXmn9JnTcOtsuV7XmnHcicO/jVUWwiUhdCv6mQIyeu5JI= -----END CERTIFICATE-----Generated at Wed May 8 17:45:31 2024 by rpki-client on console-ams.rpki-client.org