$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer File: EFCC7BEA840185763FF7624CF3DDE00563137A27.cer (raw, json) Hash identifier: wqH/mvVDSZeNn5h5ul5QBLKQFKsCsdIYvw3yO4IXaLo= Subject key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2EC67F2B97B2D41A05231A147842AC21E69CA9FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft caRepository: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 13 Apr 2024 04:54:48 +0000 Certificate not after: Sat 12 Apr 2025 04:59:48 +0000 Subordinate resources: IP: 103.168.149.0/24 IP: 2407:a1c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:7f:2b:97:b2:d4:1a:05:23:1a:14:78:42:ac:21:e6:9c:a9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 13 04:54:48 2024 GMT Not After : Apr 12 04:59:48 2025 GMT Subject: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:e7:45:90:2e:f4:de:25:da:a8:99:c2:77: 12:59:dd:a8:5c:e3:89:ad:16:41:8f:10:ef:95:10: e9:43:9b:18:5d:f1:ed:b7:12:cf:14:bf:01:f4:01: 82:62:3e:a8:0f:98:d5:5c:2c:8a:a5:41:fc:ff:bc: 2a:97:de:bc:6f:23:72:56:1f:db:a2:0c:57:8c:b4: 82:3a:7c:dd:ba:e5:de:a3:30:e2:22:ad:c2:8c:bd: 44:f4:e9:e1:5d:05:1e:f5:e4:9b:9a:17:40:20:22: 33:45:eb:25:49:82:70:b5:c5:3c:8c:f8:00:28:4b: 64:06:eb:29:0b:6c:ad:62:fd:e1:f4:a5:11:4a:2d: 39:c5:f0:af:d1:05:18:25:ae:9d:b4:cc:b1:ee:65: c5:f1:74:8d:27:fb:20:ad:56:b3:97:48:b7:a3:0d: 4a:8a:9e:35:74:17:9e:31:de:01:56:cc:f1:25:6b: 82:d5:a5:48:02:94:4d:bd:e8:de:d0:72:df:00:52: 6e:dd:26:f5:67:84:17:91:f5:62:6a:01:c7:51:32: 12:10:d5:57:7b:64:bf:c7:6f:38:cc:b7:f4:c4:40: d8:07:38:8a:b4:80:2d:19:fc:b8:bd:ec:cd:5c:9e: b7:b0:8b:8e:19:fe:84:ac:89:c7:21:52:60:a6:8d: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.149.0/24 IPv6: 2407:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:42:27:05:cc:a2:53:44:7f:ae:ba:a2:5f:c7:0a:41:a8:4b: 28:42:01:2b:e2:97:dd:44:36:78:b1:d8:87:b8:b4:7d:b0:82: 72:2b:ff:34:6e:52:98:9a:78:64:71:ab:60:af:7b:05:c2:7e: ef:19:00:28:21:ce:ca:67:d5:e6:cf:2f:2e:57:7d:74:f6:ff: 97:fe:7e:95:a2:94:1a:0a:01:67:50:e5:8d:48:b6:bc:a6:68: bf:cb:37:98:ff:8d:24:85:32:e0:23:1d:0d:c3:da:7f:46:8a: 02:a8:e1:2f:73:c4:78:d9:d5:b4:e2:cd:b6:93:61:48:2f:dc: cc:9f:57:12:b4:a2:1d:70:bd:09:4d:51:f9:b7:e2:b8:35:70: bb:4b:ff:ca:f3:37:2e:26:25:c7:2d:19:8b:41:26:8d:6b:c4: 0c:8c:bc:88:42:e1:cb:55:87:86:a2:18:42:d1:4d:00:17:4e: 49:de:26:4d:47:14:ee:fc:c8:eb:8c:51:68:c1:78:51:f3:cc: d3:ed:9d:c0:21:bb:82:81:66:42:5b:b5:90:63:a6:76:79:76: d5:cd:bc:bd:9f:86:b0:60:cf:8d:9d:f3:04:df:d3:e8:86:9d: 33:fb:b1:ff:b9:3e:d7:a3:52:3f:fb:f9:e0:65:e2:f8:06:6c: 3e:f0:75:66 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIULsZ/K5ey1BoFIxoUeEKsIeacqf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMzA0NTQ0OFoX DTI1MDQxMjA0NTk0OFowMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2 MjRDRjNEREUwMDU2MzEzN0EyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv950WQLvTeJdqomcJ3ElndqFzjia0WQY8Q75UQ6UObGF3x7bcSzxS/AfQB gmI+qA+Y1VwsiqVB/P+8KpfevG8jclYf26IMV4y0gjp83brl3qMw4iKtwoy9RPTp 4V0FHvXkm5oXQCAiM0XrJUmCcLXFPIz4AChLZAbrKQtsrWL94fSlEUotOcXwr9EF GCWunbTMse5lxfF0jSf7IK1Ws5dIt6MNSoqeNXQXnjHeAVbM8SVrgtWlSAKUTb3o 3tBy3wBSbt0m9WeEF5H1YmoBx1EyEhDVV3tkv8dvOMy39MRA2Ac4irSALRn8uL3s zVyet7CLjhn+hKyJxyFSYKaNnakCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO/Me+qEAYV2P/diTPPd4AVjE3onMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZDA3OGZl LTA5MzAtNDVkYy1iNDAzLTNjZTRlODYzZjhiNS8wL0VGQ0M3QkVBODQwMTg1NzYz RkY3NjI0Q0YzRERFMDA1NjMxMzdBMjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BABnqJUwDQQCAAIwBwMFACQHocAwDQYJKoZIhvcNAQELBQADggEBAJxCJwXMolNE f666ol/HCkGoSyhCASvil91ENnix2Ie4tH2wgnIr/zRuUpiaeGRxq2CvewXCfu8Z ACghzspn1ebPLy5XfXT2/5f+fpWilBoKAWdQ5Y1ItrymaL/LN5j/jSSFMuAjHQ3D 2n9GigKo4S9zxHjZ1bTizbaTYUgv3MyfVxK0oh1wvQlNUfm34rg1cLtL/8rzNy4m JcctGYtBJo1rxAyMvIhC4ctVh4aiGELRTQAXTkneJk1HFO78yOuMUWjBeFHzzNPt ncAhu4KBZkJbtZBjpnZ5dtXNvL2fhrBgz42d8wTf0+iGnTP7sf+5PtejUj/7+eBl 4vgGbD7wdWY= -----END CERTIFICATE-----Generated at Wed May 8 09:50:45 2024 by rpki-client on console-fra.rpki-client.org