$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer (raw, json) Hash identifier: zEoeiGxKQJRA5Bu0BLviZjpcx0v55BWBAnGzZnDf/XU= Subject key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 037D6B9730626581CB94B2CD3F531F1433223891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Dec 2024 13:33:37 +0000 Certificate not after: Mon 29 Dec 2025 13:38:37 +0000 Subordinate resources: IP: 103.204.15.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7d:6b:97:30:62:65:81:cb:94:b2:cd:3f:53:1f:14:33:22:38:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 30 13:33:37 2024 GMT Not After : Dec 29 13:38:37 2025 GMT Subject: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:36:1e:1e:50:46:5b:3d:a1:42:11:c6:9a: 18:45:1f:4a:99:f1:58:25:03:25:86:31:0e:35:1a: 95:65:63:9b:b1:7c:7e:b2:aa:9b:bb:30:e9:cf:e6: de:ae:58:ff:fb:53:4f:ac:3e:a3:45:99:e7:8b:52: 7d:88:05:13:38:b8:34:62:2c:55:9e:26:e6:46:dc: 35:b6:a5:6f:aa:03:e9:23:fb:3b:cc:3e:12:0d:9d: 44:19:88:50:79:73:81:2e:4a:4c:4a:c2:12:ca:30: 76:88:00:c4:95:7b:66:d4:74:ba:c3:b0:13:49:1e: 2c:65:4e:8d:7a:2e:0b:24:15:4d:4a:a9:e9:fb:fb: e4:af:df:33:ef:ce:2c:5f:60:0a:fa:8d:03:fb:e0: 1e:02:76:95:bb:8d:b4:2c:dd:08:66:18:ef:94:aa: 1a:22:1f:68:cf:b3:eb:a2:0b:45:fe:8a:3b:3b:80: c8:d4:2c:68:df:5d:a9:ac:5c:f2:3a:31:52:4f:78: f3:25:d7:38:d9:e3:0b:cc:ae:c3:fe:92:e7:fa:9b: d8:7f:f9:4f:4f:69:33:c0:f9:6b:32:b0:97:e3:e2: ae:cb:37:9d:de:4b:3a:51:17:bd:f8:98:17:c2:1c: 6b:06:55:9d:e9:4b:53:fc:bf:7b:ca:17:d2:b1:43: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.15.0/24 Signature Algorithm: sha256WithRSAEncryption 90:20:a1:b2:33:41:64:75:b9:d5:ab:8f:90:86:4b:0e:ef:f0: 2f:e0:6e:50:bd:d0:b1:bc:e1:27:a5:75:46:cb:2b:98:02:53: 24:e7:31:fd:7a:8e:24:7a:29:e0:cd:d2:3f:1f:2b:68:5e:d2: 11:b4:bd:ff:9b:da:df:dd:bb:fb:57:60:eb:a1:84:6a:a6:d5: 94:f9:c6:2b:30:2f:45:27:e5:42:de:fa:76:e4:9b:55:1b:34: be:29:ce:c9:a5:77:f6:89:2a:cf:a7:ef:25:27:68:22:f1:db: e9:b9:9b:15:8d:58:ce:d6:f3:da:a9:a3:33:66:4b:08:63:eb: 32:c4:64:01:53:34:fa:ab:cb:4d:ef:83:bf:c3:58:28:bb:06: 84:90:d4:ca:b2:50:34:df:e4:40:aa:29:c9:b0:41:f7:64:9c: 8d:8b:63:f5:ae:cd:1e:d8:46:10:7d:08:99:e5:06:0a:4e:fc: c6:59:94:d1:e6:a7:df:46:c9:a1:68:7b:42:21:fc:16:76:50: 2b:63:c5:e6:16:0b:36:f2:b0:22:70:d9:9a:26:dd:5d:b8:a1: 4f:87:5b:6e:6f:ae:f7:78:de:58:6f:b6:5e:c3:ef:2a:d6:0f: f3:c1:c4:d0:ef:f2:dd:fa:1b:55:7a:2c:f7:41:54:c1:fb:b4: 12:28:61:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUA31rlzBiZYHLlLLNP1MfFDMiOJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMDEzMzMzN1oX DTI1MTIyOTEzMzgzN1owMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVB MUY2RjM0Qjk1OEQxOUEzQjRGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKswNh4eUEZbPaFCEcaaGEUfSpnxWCUDJYYxDjUalWVjm7F8frKqm7sw6c/m 3q5Y//tTT6w+o0WZ54tSfYgFEzi4NGIsVZ4m5kbcNbalb6oD6SP7O8w+Eg2dRBmI UHlzgS5KTErCEsowdogAxJV7ZtR0usOwE0keLGVOjXouCyQVTUqp6fv75K/fM+/O LF9gCvqNA/vgHgJ2lbuNtCzdCGYY75SqGiIfaM+z66ILRf6KOzuAyNQsaN9dqaxc 8joxUk948yXXONnjC8yuw/6S5/qb2H/5T09pM8D5azKwl+Pirss3nd5LOlEXvfiY F8IcawZVnelLU/y/e8oX0rFD6E0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7MSkTwlZTrcR6h9vNLlY0Zo7T9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5ZmM5OTZm LTcyY2EtNGQ2Yi1hMGU3LWZmNWJjNDJiMDU4OS8wL0VFQ0M0QTQ0RjA5NTk0RUI3 MTFFQTFGNkYzNEI5NThEMTlBM0I0RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnzA8wDQYJKoZIhvcNAQELBQADggEBAJAgobIzQWR1udWrj5CGSw7v8C/gblC9 0LG84SeldUbLK5gCUyTnMf16jiR6KeDN0j8fK2he0hG0vf+b2t/du/tXYOuhhGqm 1ZT5xiswL0Un5ULe+nbkm1UbNL4pzsmld/aJKs+n7yUnaCLx2+m5mxWNWM7W89qp ozNmSwhj6zLEZAFTNPqry03vg7/DWCi7BoSQ1MqyUDTf5ECqKcmwQfdknI2LY/Wu zR7YRhB9CJnlBgpO/MZZlNHmp99GyaFoe0Ih/BZ2UCtjxeYWCzbysCJw2Zom3V24 oU+HW25vrvd43lhvtl7D7yrWD/PBxNDv8t36G1V6LPdBVMH7tBIoYUs= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:22 2025 by rpki-client