$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer File: EC973BE13EF324E7D59046CF7690A12F9DF12932.cer (raw, json) Hash identifier: bquHGKAnDpvghXU5OlNIM2G9+O4gNyfJZZCo4Ytanzg= Subject key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 18ECED68541C254A85961BE4D598EAAFAD89F999 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft caRepository: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Dec 2023 09:47:33 +0000 Certificate not after: Sat 28 Dec 2024 09:52:33 +0000 Subordinate resources: IP: 103.181.76.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ec:ed:68:54:1c:25:4a:85:96:1b:e4:d5:98:ea:af:ad:89:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 30 09:47:33 2023 GMT Not After : Dec 28 09:52:33 2024 GMT Subject: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:ed:db:8f:6c:87:43:bf:6f:7a:9f:d2:fc: e7:a5:3a:55:c6:30:3e:a3:49:dd:59:6e:96:74:d4: 32:f2:74:71:6d:4d:f9:0a:e0:19:f0:db:31:12:6a: 4b:2f:d5:e5:7c:1f:28:be:cc:4e:3b:a2:90:dc:1e: 19:41:ce:b7:58:58:2b:d7:d4:07:77:d8:ee:14:8d: c9:15:96:33:31:a1:51:fc:0d:7f:53:a0:cc:50:46: 7e:52:0b:4e:bc:90:81:be:16:c9:dd:1a:72:da:89: cb:06:d9:15:d6:90:66:08:a4:cf:81:d9:5f:60:c0: c8:a8:39:1c:a2:38:8c:41:cb:92:5e:25:ee:fb:ba: 98:b7:29:40:86:95:a4:b2:f7:51:40:47:fa:88:9a: ce:33:24:b4:be:37:e4:bc:44:a1:96:84:8d:77:13: 40:55:c7:b4:01:cb:66:61:e1:a3:89:98:7c:dc:3b: 80:1a:94:94:5a:34:c1:67:97:35:65:f8:bd:aa:80: c4:22:60:25:ab:03:32:bc:7a:7b:bc:06:1d:ef:54: 91:70:ff:8f:12:10:33:44:3f:83:8f:14:37:5c:f1: 63:aa:ab:a7:4d:c9:ac:1e:4b:ef:9a:de:3c:6e:34: 42:44:e3:d2:72:be:af:5b:16:fa:3a:dc:f0:16:83: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.76.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a5:48:8b:b7:9c:81:c3:1a:81:13:16:92:08:d3:63:bd:15: 6a:26:90:cc:f5:95:21:bb:e1:50:47:89:54:39:47:52:cf:a5: f7:d3:d8:0e:b6:cc:b4:d3:fa:fa:2c:b9:41:59:ef:3a:ef:9c: ca:d5:98:c5:fc:ab:b1:c3:59:ff:39:95:0a:50:26:fc:14:9f: 94:80:28:ef:fd:53:15:48:55:4f:28:93:f3:fd:f9:61:55:c8: 93:57:24:5d:13:31:72:16:78:39:3d:8b:01:f8:48:0a:47:90: ea:fc:44:05:2e:ae:2d:1d:74:38:b9:62:57:25:11:1b:dc:5d: d4:2c:2b:3c:b6:20:3d:e9:c5:5f:fd:db:af:b7:81:f5:c4:58: 38:05:67:f1:01:d5:ae:1b:85:ab:04:62:08:00:b7:ae:99:12: bd:8c:00:b9:31:76:96:59:69:20:02:fc:d7:c9:e0:ec:c2:2d: 30:be:3a:aa:df:04:7c:bf:77:72:36:e2:2d:bb:0f:77:9e:b9: 7c:b9:36:39:60:1b:eb:bf:cd:67:37:e4:46:f3:7c:f9:b3:58: eb:06:e1:b1:9a:f8:72:59:d6:79:41:c3:8e:61:51:93:f5:53: 95:fe:e4:14:30:a5:78:8d:db:4f:5a:cc:89:19:50:34:fa:08: ec:d9:34:3e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGOztaFQcJUqFlhvk1Zjqr62J+ZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIzMDA5NDczM1oX DTI0MTIyODA5NTIzM1owMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0 NkNGNzY5MEExMkY5REYxMjkzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKto7duPbIdDv296n9L856U6VcYwPqNJ3VlulnTUMvJ0cW1N+QrgGfDbMRJq Sy/V5XwfKL7MTjuikNweGUHOt1hYK9fUB3fY7hSNyRWWMzGhUfwNf1OgzFBGflIL TryQgb4Wyd0actqJywbZFdaQZgikz4HZX2DAyKg5HKI4jEHLkl4l7vu6mLcpQIaV pLL3UUBH+oiazjMktL435LxEoZaEjXcTQFXHtAHLZmHho4mYfNw7gBqUlFo0wWeX NWX4vaqAxCJgJasDMrx6e7wGHe9UkXD/jxIQM0Q/g48UN1zxY6qrp03JrB5L75re PG40QkTj0nK+r1sW+jrc8BaDjlECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOyXO+E+8yTn1ZBGz3aQoS+d8SkyMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZlMWNiZDc5 LThmMjYtNGIwZS04YjNiLWFiOWU5OTM4ZmNhZS8wL0VDOTczQkUxM0VGMzI0RTdE NTkwNDZDRjc2OTBBMTJGOURGMTI5MzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABntUwwDQYJKoZIhvcNAQELBQADggEBAHClSIu3nIHDGoETFpII02O9FWomkMz1 lSG74VBHiVQ5R1LPpffT2A62zLTT+vosuUFZ7zrvnMrVmMX8q7HDWf85lQpQJvwU n5SAKO/9UxVIVU8ok/P9+WFVyJNXJF0TMXIWeDk9iwH4SApHkOr8RAUuri0ddDi5 YlclERvcXdQsKzy2ID3pxV/926+3gfXEWDgFZ/EB1a4bhasEYggAt66ZEr2MALkx dpZZaSAC/NfJ4OzCLTC+OqrfBHy/d3I24i27D3eeuXy5NjlgG+u/zWc35EbzfPmz WOsG4bGa+HJZ1nlBw45hUZP1U5X+5BQwpXiN209azIkZUDT6COzZND4= -----END CERTIFICATE-----Generated at Thu May 9 00:37:12 2024 by rpki-client on console-fra.rpki-client.org