$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer (raw, json) Hash identifier: /Zf3T1uS3yImMEYLFZ8g6Np7BqRcaCVydPGT2coEcX4= Subject key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B3C99DEC2D965954E7BD87967ABE51419664FB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 15:41:33 +0000 Certificate not after: Mon 30 Jun 2025 15:46:33 +0000 Subordinate resources: IP: 103.6.214.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:99:de:c2:d9:65:95:4e:7b:d8:79:67:ab:e5:14:19:66:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 15:41:33 2024 GMT Not After : Jun 30 15:46:33 2025 GMT Subject: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:f5:18:7e:93:4d:45:f2:cb:8b:da:21:01: f9:eb:19:0d:22:ae:66:64:54:ca:8f:02:e7:8c:54: bd:f5:74:75:c7:8a:e1:c6:bf:8f:0d:72:c8:59:f9: a7:f1:29:ce:25:37:1a:e6:82:47:94:01:f0:d5:60: bf:5a:ad:d6:9e:55:9e:4a:db:31:46:2d:bd:90:ba: 0a:62:4f:c9:06:3a:c4:39:b7:1c:1a:f3:87:f7:4c: 59:c5:0b:32:2b:57:c1:42:87:44:41:90:66:a6:67: 1e:84:b4:02:63:a9:89:57:7f:05:79:89:c3:69:6e: bb:e0:52:ec:b6:00:b2:06:aa:75:b6:f9:e2:9b:20: 48:01:70:b7:2e:c5:c8:33:b8:5c:c0:e5:99:8e:7d: e8:c0:bc:1d:f0:74:63:5a:fd:a0:10:f3:f1:49:fb: da:30:2a:ea:98:e7:14:95:ff:59:86:4e:41:db:c7: 68:f1:03:f6:a6:1b:3c:02:c3:5e:d7:e8:1c:d2:19: fc:45:e2:6d:15:d8:76:12:31:e0:99:81:46:8b:82: 2a:55:91:9a:4c:b8:b2:71:4f:da:f3:0d:44:ff:07: 26:06:94:de:cb:c9:02:5a:01:97:f2:ff:91:0b:bc: 00:a4:72:d4:f8:04:33:3a:66:e4:d4:52:e3:f1:b1: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.214.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:46:8b:c0:af:08:36:e0:5f:d9:98:a0:6d:22:f1:c3:2c:11: 06:2c:d3:2d:9a:7e:13:28:0e:9d:bf:bd:5e:1e:21:bc:bc:a6: 26:35:4c:ff:f6:f5:89:b0:c3:eb:c2:5a:bf:f8:cc:0a:77:49: 14:09:e1:44:c5:45:01:31:8f:a2:c0:13:f6:33:9a:26:87:44: e1:7c:82:4f:a2:8b:cf:52:23:19:b0:10:57:f2:b5:a6:c2:70: 0a:f0:7f:ba:68:84:4e:c4:b5:de:e7:6e:81:4b:0a:89:02:dc: 7c:99:c5:ba:01:a2:a2:4c:52:12:df:11:77:de:31:fe:31:ea: ef:38:66:58:46:03:41:2b:57:e7:72:23:dd:5e:85:4b:e5:c6: e9:65:31:47:59:22:51:aa:60:d7:3a:41:a5:12:0b:fe:f4:e4: 3a:e8:1b:de:84:33:51:17:9b:d6:4b:39:30:a6:65:d9:c3:94: e5:1f:8f:8c:26:b2:d5:d7:9b:df:8a:09:75:d1:f7:f7:d4:20: 39:4d:fb:c9:9e:86:a9:5f:99:16:4b:42:71:ee:a5:9c:37:0e: ad:33:70:fb:11:0e:3b:95:c5:7b:a0:bc:d4:d0:6e:16:56:38: 6f:bc:70:79:ad:91:f5:da:1c:06:72:1b:a5:47:0b:bd:db:49: 7a:16:3b:1a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOzyZ3sLZZZVOe9h5Z6vlFBlmT7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1NDEzM1oX DTI1MDYzMDE1NDYzM1owMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4 MjhBNTQyQjdFREJBM0QxMTZENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy19Rh+k01F8suL2iEB+esZDSKuZmRUyo8C54xUvfV0dceK4ca/jw1yyFn5 p/EpziU3GuaCR5QB8NVgv1qt1p5VnkrbMUYtvZC6CmJPyQY6xDm3HBrzh/dMWcUL MitXwUKHREGQZqZnHoS0AmOpiVd/BXmJw2luu+BS7LYAsgaqdbb54psgSAFwty7F yDO4XMDlmY596MC8HfB0Y1r9oBDz8Un72jAq6pjnFJX/WYZOQdvHaPED9qYbPALD XtfoHNIZ/EXibRXYdhIx4JmBRouCKlWRmky4snFP2vMNRP8HJgaU3svJAloBl/L/ kQu8AKRy1PgEMzpm5NRS4/GxYtsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOxiqUlw5WrJ/ouCilQrftuj0RbVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4N2Y4Zjgy LTM3YmItNDk4My05M2NhLTVlMDY3MGFiMDJlMy8wL0VDNjJBOTQ5NzBFNTZBQzlG RThCODI4QTU0MkI3RURCQTNEMTE2RDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBtYwDQYJKoZIhvcNAQELBQADggEBAD9Gi8CvCDbgX9mYoG0i8cMsEQYs0y2a fhMoDp2/vV4eIby8piY1TP/29Ymww+vCWr/4zAp3SRQJ4UTFRQExj6LAE/YzmiaH ROF8gk+ii89SIxmwEFfytabCcArwf7pohE7Etd7nboFLCokC3HyZxboBoqJMUhLf EXfeMf4x6u84ZlhGA0ErV+dyI91ehUvlxullMUdZIlGqYNc6QaUSC/705DroG96E M1EXm9ZLOTCmZdnDlOUfj4wmstXXm9+KCXXR9/fUIDlN+8mehqlfmRZLQnHupZw3 Dq0zcPsRDjuVxXugvNTQbhZWOG+8cHmtkfXaHAZyG6VHC73bSXoWOxo= -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:20 2025 by rpki-client