$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer File: EBA04070CA27E646C332039E07557734C6732ED2.cer (raw, json) Hash identifier: XcRLJ7bSsK0Gg93bmYEXWRXYdRRqkjCAoFd1BS9YnjU= Subject key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CC6979EE6C47371050DFED461A26D984BB64523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft caRepository: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 22 Sep 2024 19:19:23 +0000 Certificate not after: Sun 21 Sep 2025 19:24:23 +0000 Subordinate resources: IP: 103.111.140.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c6:97:9e:e6:c4:73:71:05:0d:fe:d4:61:a2:6d:98:4b:b6:45:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 22 19:19:23 2024 GMT Not After : Sep 21 19:24:23 2025 GMT Subject: CN=EBA04070CA27E646C332039E07557734C6732ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:40:d7:46:82:3e:e3:6f:26:95:b8:9c:85: 49:17:9d:dc:39:4a:4a:37:65:27:cc:1c:d9:d4:cf: 44:c5:c0:9d:a3:6b:d4:eb:67:37:4e:0c:68:79:36: d3:f2:05:f8:51:7f:1f:ec:ad:01:50:6d:51:03:c9: a9:2a:1e:4e:05:02:9f:fb:a7:c3:29:41:42:6d:cb: 0a:dc:c2:26:fa:b0:f6:ca:2c:50:be:d1:41:ee:fc: db:83:6a:18:ab:c1:9b:61:eb:e3:b4:27:95:24:25: 1b:2d:9f:2c:30:88:95:49:09:16:17:c2:fc:70:a6: d7:bd:cd:aa:6a:2c:36:49:50:a7:82:65:d8:06:e2: 72:5a:4a:7d:12:a2:24:6d:d7:f3:df:3d:b3:4d:51: 2d:50:5a:18:3a:af:64:67:21:2c:c2:d1:1e:c2:f0: 8d:23:05:dd:4f:3d:76:fd:95:6f:e2:ef:e8:75:78: 19:57:bb:be:c5:e5:a9:02:7d:75:37:1e:07:2c:dd: 1c:6f:24:f9:ee:30:bf:5e:ef:73:aa:5c:de:82:2b: bb:7b:2b:3d:ab:3c:0d:9d:de:9b:ce:35:b1:a8:26: 47:49:9a:81:b6:60:e2:ee:09:48:d8:c3:6c:95:f3: 7b:97:dc:ae:9b:45:2d:09:5e:fd:e8:e7:81:7b:3a: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.140.0/22 Signature Algorithm: sha256WithRSAEncryption 36:fc:e0:c5:7f:da:4e:5c:7d:3f:b4:d8:78:a2:e7:b0:ba:8a: 80:35:5b:98:fc:d1:67:e4:66:7d:20:9f:c7:a5:6b:6f:af:94: 74:2f:c0:19:8b:51:3c:2d:1e:bc:a1:b9:8a:a9:17:e8:66:e7: 3d:db:1b:f1:68:66:d3:27:1f:f6:d8:f5:e5:ee:7f:b8:83:73: 79:76:5a:5a:b5:42:2c:6c:f5:81:5e:11:e8:5b:e1:6c:52:00: 9a:07:80:a4:05:01:f5:20:12:44:66:82:77:1e:fb:76:6c:95: 8a:e4:de:ae:a4:4c:3f:9b:77:a9:66:43:b7:4c:44:91:e1:2c: 2e:49:ad:ac:2e:7e:28:3e:9a:f4:52:97:9f:76:f1:34:b5:a3: 7b:2c:a2:a1:44:2f:b4:b1:cd:1b:0c:f5:47:8d:1e:0d:bf:62: 6e:b0:68:54:13:1c:76:87:b9:d5:67:05:35:bd:55:cf:41:a4: bd:7c:b9:b9:c1:72:a9:d6:6d:4f:84:51:3b:f5:ca:83:77:07: 51:cd:94:34:7c:23:5a:75:7d:ad:29:e2:b5:e9:46:11:f7:4a: 79:1e:75:dd:a3:0b:b4:f1:a3:12:7d:55:e9:19:b3:a6:77:0b: 49:49:5f:00:0f:84:65:af:c9:f1:46:b3:f2:a1:ab:89:43:35: cc:3e:b2:c8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTMaXnubEc3EFDf7UYaJtmEu2RSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMjE5MTkyM1oX DTI1MDkyMTE5MjQyM1owMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIw MzlFMDc1NTc3MzRDNjczMkVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqcQNdGgj7jbyaVuJyFSRed3DlKSjdlJ8wc2dTPRMXAnaNr1OtnN04MaHk2 0/IF+FF/H+ytAVBtUQPJqSoeTgUCn/unwylBQm3LCtzCJvqw9sosUL7RQe7824Nq GKvBm2Hr47QnlSQlGy2fLDCIlUkJFhfC/HCm173NqmosNklQp4Jl2AbiclpKfRKi JG3X8989s01RLVBaGDqvZGchLMLRHsLwjSMF3U89dv2Vb+Lv6HV4GVe7vsXlqQJ9 dTceByzdHG8k+e4wv17vc6pc3oIru3srPas8DZ3em841sagmR0magbZg4u4JSNjD bJXze5fcrptFLQle/ejngXs68usCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOugQHDKJ+ZGwzIDngdVdzTGcy7SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZk LWE2NzQtNDQzNy1hYmYxLWU1NTBkZWMxMzdmYS8wL0VCQTA0MDcwQ0EyN0U2NDZD MzMyMDM5RTA3NTU3NzM0QzY3MzJFRDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnb4wwDQYJKoZIhvcNAQELBQADggEBADb84MV/2k5cfT+02Hii57C6ioA1W5j8 0WfkZn0gn8ela2+vlHQvwBmLUTwtHryhuYqpF+hm5z3bG/FoZtMnH/bY9eXuf7iD c3l2Wlq1Qixs9YFeEehb4WxSAJoHgKQFAfUgEkRmgnce+3ZslYrk3q6kTD+bd6lm Q7dMRJHhLC5Jrawufig+mvRSl5928TS1o3ssoqFEL7SxzRsM9UeNHg2/Ym6waFQT HHaHudVnBTW9Vc9BpL18ubnBcqnWbU+EUTv1yoN3B1HNlDR8I1p1fa0p4rXpRhH3 Snkedd2jC7TxoxJ9VekZs6Z3C0lJXwAPhGWvyfFGs/Khq4lDNcw+ssg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:39:33 2025 by rpki-client