$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer (raw, json) Hash identifier: TfBFlwkMV9Cto9ID6UvbGoEy00Le7sxOZsM4mWbSJHI= Subject key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3223A7990B29600186D47A505F9ECE4498139228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Mar 2024 18:54:52 +0000 Certificate not after: Fri 28 Feb 2025 18:59:52 +0000 Subordinate resources: IP: 103.122.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:23:a7:99:0b:29:60:01:86:d4:7a:50:5f:9e:ce:44:98:13:92:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 18:54:52 2024 GMT Not After : Feb 28 18:59:52 2025 GMT Subject: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:a0:b0:3c:99:a7:cc:ac:da:14:62:58:3b: 0f:8b:17:4b:79:48:e9:dd:30:07:71:d6:5e:2e:61: 8d:77:cf:39:c0:df:08:c8:ca:f3:7e:f0:22:ad:c4: e4:b3:22:e5:8a:90:eb:a4:99:e9:93:e3:37:d7:38: 12:35:3d:fe:e1:64:2d:2a:c7:41:ab:b2:e7:e3:cb: af:c5:ff:ee:b0:51:c3:17:36:4d:c3:4d:8c:77:33: da:38:f5:9a:58:41:f5:e1:e3:f2:c6:a1:ab:90:0d: 0c:b8:f8:45:5d:fd:5f:a8:a4:6c:12:27:f6:a6:4c: ff:a8:2f:04:da:01:66:22:99:6f:c4:f3:e1:49:41: 7a:e8:80:07:3d:a0:91:b5:72:a7:e8:f3:29:17:c8: d4:fd:d2:e4:9d:11:d3:4b:4f:48:35:d9:5d:27:20: 81:01:28:82:18:af:b5:a0:84:57:54:d6:53:10:00: 29:1d:2c:6b:7e:44:73:a4:b8:1a:64:c5:5c:8f:db: 22:aa:6c:d7:35:7f:0a:46:d8:e0:d6:52:12:bd:2c: e2:d3:9d:98:c6:a3:6c:9f:89:49:5c:a0:5d:8f:9b: 8a:6f:46:8e:04:98:42:5f:9e:24:57:fb:40:e2:99: 23:26:65:14:eb:8e:c9:29:33:47:ab:39:6e:6d:ee: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.0.0/23 Signature Algorithm: sha256WithRSAEncryption 86:95:31:75:23:50:53:4e:a4:d2:fa:69:0a:bb:8e:46:c7:a4: ea:7e:6e:7b:47:23:48:8c:36:9d:62:9c:dc:52:f3:0b:9d:30: ba:28:bc:79:ff:21:43:fc:35:ad:c5:ec:ec:88:f3:38:09:75: 86:dd:be:58:ea:7f:2b:4d:f3:35:cd:5f:6e:24:f5:6d:ea:c0: c4:0d:b9:62:4f:db:50:5b:dd:d7:3c:7d:fb:9e:f7:90:a3:a7: 1d:bc:58:28:00:44:43:97:ab:e1:57:b5:b3:48:af:e7:e9:1f: bd:bc:49:3d:be:4f:53:a1:49:d3:4e:c9:1b:1e:c9:45:18:50: 96:1a:b9:e6:1f:b3:d1:29:b2:ff:14:3d:c8:d0:d3:2e:92:1c: fd:0f:40:04:4e:e5:b3:51:9a:ec:a0:18:e5:20:bb:71:db:ab: b7:93:bc:b3:88:4f:44:39:9a:de:bc:be:68:f6:92:6f:81:61: e9:24:7f:81:6a:73:c6:96:44:f2:2c:91:b9:9c:9e:75:d4:33: 2c:09:ea:0e:52:fc:d4:22:eb:88:f2:12:94:58:cd:8e:e4:1a: b5:94:de:7b:29:81:9c:59:8d:8d:9f:32:9e:40:7a:6e:bf:ed: e3:12:e6:30:3d:1d:c4:cb:bd:87:75:8a:d1:9c:4d:2b:53:06: 7b:ee:91:2f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMiOnmQspYAGG1HpQX57ORJgTkigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwMTE4NTQ1MloX DTI1MDIyODE4NTk1MlowMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgx QjEwMzZFMDFDMzJGMUYzRDlERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM21oLA8mafMrNoUYlg7D4sXS3lI6d0wB3HWXi5hjXfPOcDfCMjK837wIq3E 5LMi5YqQ66SZ6ZPjN9c4EjU9/uFkLSrHQauy5+PLr8X/7rBRwxc2TcNNjHcz2jj1 mlhB9eHj8sahq5ANDLj4RV39X6ikbBIn9qZM/6gvBNoBZiKZb8Tz4UlBeuiABz2g kbVyp+jzKRfI1P3S5J0R00tPSDXZXScggQEoghivtaCEV1TWUxAAKR0sa35Ec6S4 GmTFXI/bIqps1zV/CkbY4NZSEr0s4tOdmMajbJ+JSVygXY+bim9GjgSYQl+eJFf7 QOKZIyZlFOuOySkzR6s5bm3uZiUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOvak5s3826Kn1gbEDbgHDLx89nfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzMTJhMTQ2 LWY5NTQtNDdlMy1iOTNmLTkyYzJmZTZkODllYS8wL0VCREE5MzlCMzdGMzZFOEE5 RjU4MUIxMDM2RTAxQzMyRjFGM0Q5REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnegAwDQYJKoZIhvcNAQELBQADggEBAIaVMXUjUFNOpNL6aQq7jkbHpOp+bntH I0iMNp1inNxS8wudMLoovHn/IUP8Na3F7OyI8zgJdYbdvljqfytN8zXNX24k9W3q wMQNuWJP21Bb3dc8ffue95Cjpx28WCgAREOXq+FXtbNIr+fpH728ST2+T1OhSdNO yRseyUUYUJYaueYfs9Epsv8UPcjQ0y6SHP0PQARO5bNRmuygGOUgu3Hbq7eTvLOI T0Q5mt68vmj2km+BYekkf4Fqc8aWRPIskbmcnnXUMywJ6g5S/NQi64jyEpRYzY7k GrWU3nspgZxZjY2fMp5Aem6/7eMS5jA9HcTLvYd1itGcTStTBnvukS8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:52 2024 by rpki-client on console-ams.rpki-client.org