$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer (raw, json) Hash identifier: fBIe4PWQmVajezZmfZsiKPJCIsM2MhhvM3PzSB4ZG94= Subject key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 60A6EE1970A9B1A8520499FDDB34019539B82EF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jan 2024 05:24:05 +0000 Certificate not after: Mon 27 Jan 2025 05:29:05 +0000 Subordinate resources: IP: 103.204.15.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a6:ee:19:70:a9:b1:a8:52:04:99:fd:db:34:01:95:39:b8:2e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 29 05:24:05 2024 GMT Not After : Jan 27 05:29:05 2025 GMT Subject: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:36:1e:1e:50:46:5b:3d:a1:42:11:c6:9a: 18:45:1f:4a:99:f1:58:25:03:25:86:31:0e:35:1a: 95:65:63:9b:b1:7c:7e:b2:aa:9b:bb:30:e9:cf:e6: de:ae:58:ff:fb:53:4f:ac:3e:a3:45:99:e7:8b:52: 7d:88:05:13:38:b8:34:62:2c:55:9e:26:e6:46:dc: 35:b6:a5:6f:aa:03:e9:23:fb:3b:cc:3e:12:0d:9d: 44:19:88:50:79:73:81:2e:4a:4c:4a:c2:12:ca:30: 76:88:00:c4:95:7b:66:d4:74:ba:c3:b0:13:49:1e: 2c:65:4e:8d:7a:2e:0b:24:15:4d:4a:a9:e9:fb:fb: e4:af:df:33:ef:ce:2c:5f:60:0a:fa:8d:03:fb:e0: 1e:02:76:95:bb:8d:b4:2c:dd:08:66:18:ef:94:aa: 1a:22:1f:68:cf:b3:eb:a2:0b:45:fe:8a:3b:3b:80: c8:d4:2c:68:df:5d:a9:ac:5c:f2:3a:31:52:4f:78: f3:25:d7:38:d9:e3:0b:cc:ae:c3:fe:92:e7:fa:9b: d8:7f:f9:4f:4f:69:33:c0:f9:6b:32:b0:97:e3:e2: ae:cb:37:9d:de:4b:3a:51:17:bd:f8:98:17:c2:1c: 6b:06:55:9d:e9:4b:53:fc:bf:7b:ca:17:d2:b1:43: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.15.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e3:43:f0:da:ca:06:96:15:04:a9:4a:aa:5c:98:59:e4:83: 0b:98:27:a2:65:eb:f8:d9:7b:0b:bc:1a:e4:40:cb:1a:27:9e: 64:18:1c:84:0d:fd:53:37:a3:42:f2:cb:33:e2:63:1a:29:1e: 15:1c:93:37:2e:b5:9c:dd:26:a7:68:ac:a3:e1:9b:88:77:4a: 33:5a:4e:ed:44:3a:c5:24:8d:e0:ab:b5:bb:f5:e0:21:c5:83: 0b:13:f4:2c:c8:5e:87:2e:48:ed:b4:6b:07:36:12:0e:38:a6: d4:15:51:39:4d:94:9f:22:71:4d:5b:93:1c:1e:4b:b0:ac:b5: 2f:67:fd:65:86:f1:db:49:08:bc:cd:47:09:79:e8:23:d2:48: e0:9e:dc:d1:54:5a:39:b2:81:e9:3c:9a:39:c9:03:b1:36:b1: 1b:24:da:b3:5c:b8:13:41:0a:93:33:ef:30:a3:32:c8:ca:b7: 54:f1:c4:82:5c:e4:36:65:21:3d:db:af:89:ea:7c:8e:ca:a1: 03:e8:bd:71:9e:a1:52:48:98:5d:2f:c0:e5:ae:4e:72:de:54: 1a:df:26:d4:a5:6b:dd:b3:6e:99:3e:6f:f1:2d:8d:72:b9:d3: 48:67:4e:e0:fd:d9:94:9b:b4:ef:94:94:e9:1e:11:76:63:e2: 3b:5c:c0:c0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYKbuGXCpsahSBJn92zQBlTm4LvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyOTA1MjQwNVoX DTI1MDEyNzA1MjkwNVowMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVB MUY2RjM0Qjk1OEQxOUEzQjRGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKswNh4eUEZbPaFCEcaaGEUfSpnxWCUDJYYxDjUalWVjm7F8frKqm7sw6c/m 3q5Y//tTT6w+o0WZ54tSfYgFEzi4NGIsVZ4m5kbcNbalb6oD6SP7O8w+Eg2dRBmI UHlzgS5KTErCEsowdogAxJV7ZtR0usOwE0keLGVOjXouCyQVTUqp6fv75K/fM+/O LF9gCvqNA/vgHgJ2lbuNtCzdCGYY75SqGiIfaM+z66ILRf6KOzuAyNQsaN9dqaxc 8joxUk948yXXONnjC8yuw/6S5/qb2H/5T09pM8D5azKwl+Pirss3nd5LOlEXvfiY F8IcawZVnelLU/y/e8oX0rFD6E0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7MSkTwlZTrcR6h9vNLlY0Zo7T9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5ZmM5OTZm LTcyY2EtNGQ2Yi1hMGU3LWZmNWJjNDJiMDU4OS8wL0VFQ0M0QTQ0RjA5NTk0RUI3 MTFFQTFGNkYzNEI5NThEMTlBM0I0RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnzA8wDQYJKoZIhvcNAQELBQADggEBAGPjQ/DaygaWFQSpSqpcmFnkgwuYJ6Jl 6/jZewu8GuRAyxonnmQYHIQN/VM3o0LyyzPiYxopHhUckzcutZzdJqdorKPhm4h3 SjNaTu1EOsUkjeCrtbv14CHFgwsT9CzIXocuSO20awc2Eg44ptQVUTlNlJ8icU1b kxweS7CstS9n/WWG8dtJCLzNRwl56CPSSOCe3NFUWjmygek8mjnJA7E2sRsk2rNc uBNBCpMz7zCjMsjKt1TxxIJc5DZlIT3br4nqfI7KoQPovXGeoVJImF0vwOWuTnLe VBrfJtSla92zbpk+b/EtjXK500hnTuD92ZSbtO+UlOkeEXZj4jtcwMA= -----END CERTIFICATE-----Generated at Wed May 8 05:33:24 2024 by rpki-client on console-ams.rpki-client.org