$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer (raw, json) Hash identifier: OqEcEvjMlLH5HEbG4He8TSVqoloTIvRPA56bF/rx1FE= Subject key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1CC051CDC283C7AB5E11AB104B3BE29E4739A47A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft caRepository: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 17 Jun 2023 09:13:11 +0000 Certificate not after: Sat 15 Jun 2024 09:18:11 +0000 Subordinate resources: IP: 103.85.52.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c0:51:cd:c2:83:c7:ab:5e:11:ab:10:4b:3b:e2:9e:47:39:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 09:13:11 2023 GMT Not After : Jun 15 09:18:11 2024 GMT Subject: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:29:0b:99:0a:c4:a1:38:a8:4b:be:38:1e: fb:4c:9c:58:f2:45:4e:cd:12:6b:f2:cd:44:e9:b3: d9:0d:45:fb:16:ee:99:8b:7b:b2:54:7d:59:20:43: 38:98:18:50:4a:46:13:8e:2b:34:20:a0:9c:44:6c: 70:81:59:6f:81:49:44:d9:03:9e:a3:59:7d:53:b4: 01:fb:e0:90:0d:d7:b7:51:a2:52:23:79:e9:d1:7d: a1:15:c5:c9:9e:29:4f:4a:af:f9:52:59:68:b0:21: 9b:96:a9:ea:c2:1b:6d:e2:77:61:a4:a0:8b:87:cb: 37:66:83:74:c3:8e:f1:13:dc:2a:f5:73:f6:5c:08: c5:c7:91:0a:85:d4:99:e6:5a:34:d7:17:c0:d8:91: d5:34:79:7a:11:bb:2d:ef:3f:c0:c1:79:5b:02:12: ec:1b:17:f5:a8:e1:67:49:c6:b3:dd:00:f4:72:4f: f4:4e:48:db:52:f5:90:16:25:e7:35:b4:af:5b:fc: c2:7d:ea:9a:69:78:f6:f4:a4:0e:b0:6e:8b:88:46: cb:04:62:79:2e:c6:fb:05:95:b0:51:af:1b:96:7f: 49:3b:60:06:db:be:f2:e7:b3:4a:17:55:77:fe:da: b3:56:1e:bb:07:8d:9b:9b:bd:bb:16:7d:3e:66:39: e3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.52.0/23 Signature Algorithm: sha256WithRSAEncryption 60:3d:22:51:e4:b8:d6:de:77:ce:9a:65:99:7c:92:20:b8:31: 27:9b:03:54:0a:91:38:1d:8b:3e:2b:4f:74:fd:24:c9:d8:6d: 2c:17:94:23:16:c1:5c:17:cf:29:d7:99:f0:9c:ea:c7:7f:3f: 99:2a:b4:f9:df:b2:2d:42:10:a3:aa:19:42:5f:8e:29:8c:1c: 3c:3c:92:fb:98:c3:75:0c:13:54:00:f5:58:c4:7a:d0:eb:05: ee:3d:5c:69:f1:66:90:3c:07:05:9d:7b:f6:c5:09:ea:eb:05: 3a:b1:0a:5d:75:85:f8:16:94:81:9a:2c:81:c6:09:c9:23:33: 29:37:ea:70:b2:e3:5a:14:66:b0:47:3d:c2:a3:04:75:ea:20: 9a:0b:ca:3d:7b:1d:7c:fe:55:f9:7e:0f:a8:f5:84:08:e2:f3: 13:3e:b2:40:ab:4b:2a:e4:14:60:c8:1d:44:a8:72:3d:7e:d0: ed:df:e0:ed:18:41:a4:d5:d4:2e:3f:5a:cf:62:59:10:c0:53: 42:93:fb:d7:31:ba:e0:4b:69:a3:88:4b:1c:9c:9d:01:7e:14: d8:06:cf:9f:30:4e:85:7b:46:3e:3b:42:5d:a1:c9:e4:68:2a: 0a:fc:97:3d:64:2b:3b:f2:8d:74:ce:fc:ac:01:e8:a8:d1:25: e6:a1:1e:69 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHMBRzcKDx6teEasQSzvinkc5pHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYxNzA5MTMxMVoX DTI0MDYxNTA5MTgxMVowMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2 NzcyODJBRTdFMkU3MkUwRjJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNdKQuZCsShOKhLvjge+0ycWPJFTs0Sa/LNROmz2Q1F+xbumYt7slR9WSBD OJgYUEpGE44rNCCgnERscIFZb4FJRNkDnqNZfVO0AfvgkA3Xt1GiUiN56dF9oRXF yZ4pT0qv+VJZaLAhm5ap6sIbbeJ3YaSgi4fLN2aDdMOO8RPcKvVz9lwIxceRCoXU meZaNNcXwNiR1TR5ehG7Le8/wMF5WwIS7BsX9ajhZ0nGs90A9HJP9E5I21L1kBYl 5zW0r1v8wn3qmml49vSkDrBui4hGywRieS7G+wWVsFGvG5Z/STtgBtu+8uezShdV d/7as1YeuweNm5u9uxZ9PmY547ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO4S8Xml0fUuwDNncoKufi5y4PLDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZDFmNGNl LTE2OWItNDMxYS04Mjg2LWM1ZjNhMDdiYmJlMy8wL0VFMTJGMTc5QTVEMUY1MkVD MDMzNjc3MjgyQUU3RTJFNzJFMEYyQzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnVTQwDQYJKoZIhvcNAQELBQADggEBAGA9IlHkuNbed86aZZl8kiC4MSebA1QK kTgdiz4rT3T9JMnYbSwXlCMWwVwXzynXmfCc6sd/P5kqtPnfsi1CEKOqGUJfjimM HDw8kvuYw3UME1QA9VjEetDrBe49XGnxZpA8BwWde/bFCerrBTqxCl11hfgWlIGa LIHGCckjMyk36nCy41oUZrBHPcKjBHXqIJoLyj17HXz+Vfl+D6j1hAji8xM+skCr SyrkFGDIHUSocj1+0O3f4O0YQaTV1C4/Ws9iWRDAU0KT+9cxuuBLaaOISxycnQF+ FNgGz58wToV7Rj47Ql2hyeRoKgr8lz1kKzvyjXTO/KwB6KjRJeahHmk= -----END CERTIFICATE-----Generated at Wed May 8 07:45:31 2024 by rpki-client on console-ams.rpki-client.org