$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer File: AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer (raw, json) Hash identifier: VhKN6/3osQp1PydeprOMAx9RMdjuQRcGGzS3T4ovxOQ= Subject key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 Certificate issuer: /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Certificate serial: 3F5E98D82674A09DDA3FE8C3B7F6C92395CD9397 Authority info access: rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 20 Jun 2024 13:07:55 +0000 Certificate not after: Thu 19 Jun 2025 13:12:55 +0000 Subordinate resources: IP: 2a12:dd47:3300::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 12:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5e:98:d8:26:74:a0:9d:da:3f:e8:c3:b7:f6:c9:23:95:cd:93:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Validity Not Before: Jun 20 13:07:55 2024 GMT Not After : Jun 19 13:12:55 2025 GMT Subject: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:0a:1a:9f:16:1f:5e:ef:c5:85:a0:e2:34: 17:27:7d:de:11:4e:04:9a:b6:78:49:01:a9:fb:e0: 92:fc:ce:d4:c2:c0:22:46:9b:b1:31:e0:cb:83:ff: 10:ce:b1:6d:3a:84:cd:0f:75:b7:ff:7b:40:3c:0a: 56:25:b5:50:bd:8b:34:f2:2f:4f:dd:8a:6e:03:29: 56:a1:ec:c1:04:e4:47:70:7f:98:ac:6a:e0:f9:10: f1:b0:0a:00:9a:39:82:10:96:2b:c9:1c:63:aa:30: 95:c8:80:3b:8f:83:58:61:7c:09:e4:1b:a1:02:b8: 3f:ce:99:fb:73:84:31:99:6f:9e:f7:d3:5d:6a:67: 28:1f:bd:ef:c2:88:b6:b7:3c:8b:bd:9e:5f:96:5a: d7:be:6b:cc:61:f5:fe:2b:b9:88:d0:42:71:c5:f5: bd:ad:e4:50:57:7a:03:54:07:ba:2e:11:4d:f5:f2: f5:a8:b8:0c:dd:16:d9:8a:ac:28:14:42:fc:66:c5: 82:a8:b6:ff:f0:77:0c:9b:c3:d9:41:05:27:16:dd: 45:1c:87:9b:20:7c:aa:c2:36:20:44:fb:f5:c6:96: ce:3f:09:a6:f8:7b:58:99:34:4e:9b:53:07:fe:58: c1:74:0b:3f:78:71:f0:f0:83:71:55:e8:61:bd:03: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF X509v3 Authority Key Identifier: keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:3300::/40 Signature Algorithm: sha256WithRSAEncryption 31:93:0a:de:c3:dc:48:05:df:0d:54:1f:a4:58:06:42:98:39: b2:80:fb:a7:77:a7:51:b4:ea:58:1b:cf:b0:5b:45:f8:7d:c2: d5:97:4e:9c:af:07:1b:1b:f9:78:49:70:72:80:e6:03:8e:c9: 9b:c8:b6:cd:7a:12:90:2f:bb:c5:aa:d5:7a:04:ee:8a:0a:76: bd:b3:a3:a5:21:2d:20:ed:26:14:92:f0:ff:74:83:45:66:39: 8f:50:2e:d8:45:9d:fa:71:0d:29:3d:a9:1e:97:0e:bd:fa:16: 3d:91:6a:36:c7:c6:7f:f3:6f:ef:42:72:27:2f:4b:c1:2c:f8: 5e:a1:86:5d:a1:11:2e:45:0e:ec:1d:78:01:01:36:74:d8:97: 7f:f2:9d:1a:ca:36:67:8f:a4:b1:d8:61:6b:f2:ae:c8:d2:b3: cd:b3:99:da:ab:db:04:b0:6e:6d:74:be:a5:0b:6b:da:18:a4: e7:fd:7f:64:5c:df:a4:56:f6:e6:9b:35:9e:28:3b:05:ad:16: f6:2f:f7:e2:fd:16:ed:9e:8a:0f:e9:7a:c8:b9:db:43:90:00: 66:ed:79:8a:29:a4:ae:d0:93:b0:42:c3:94:3a:ec:d6:e1:13: 7d:d3:f2:31:0d:17:98:e9:23:02:ed:cb:e9:0a:15:cb:24:cc: 22:5b:a7:00 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUP16Y2CZ0oJ3aP+jDt/bJI5XNk5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG NEM4NTBDMTAeFw0yNDA2MjAxMzA3NTVaFw0yNTA2MTkxMzEyNTVaMDMxMTAvBgNV BAMTKEFFMTI0NzJEQTFFMEFGRDJCMEU5RDVEQzZGNEVERTE2QzREMTExQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mwoanxYfXu/FhaDiNBcnfd4R TgSatnhJAan74JL8ztTCwCJGm7Ex4MuD/xDOsW06hM0Pdbf/e0A8ClYltVC9izTy L0/dim4DKVah7MEE5Edwf5isauD5EPGwCgCaOYIQlivJHGOqMJXIgDuPg1hhfAnk G6ECuD/OmftzhDGZb573011qZygfve/CiLa3PIu9nl+WWte+a8xh9f4ruYjQQnHF 9b2t5FBXegNUB7ouEU318vWouAzdFtmKrCgUQvxmxYKotv/wdwybw9lBBScW3UUc h5sgfKrCNiBE+/XGls4/Cab4e1iZNE6bUwf+WMF0Cz94cfDwg3FV6GG9A6B1AgMB AAGjggLUMIIC0DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuEkctoeCv0rDp 1dxvTt4WxNERzzAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0 Qzg1MEMxLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzEyODI3 MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVjLzIvMIGLBggrBgEFBQcwCoZ/ cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4 MjcxZS1jMjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMi9BRTEyNDcyREExRTBB RkQyQjBFOUQ1REM2RjRFREUxNkM0RDExMUNGLm1mdDA8BggrBgEFBQcwDYYwaHR0 cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAqEt1HMzANBgkqhkiG9w0BAQsFAAOCAQEAMZMK3sPcSAXfDVQfpFgGQpg5 soD7p3enUbTqWBvPsFtF+H3C1ZdOnK8HGxv5eElwcoDmA47Jm8i2zXoSkC+7xarV egTuigp2vbOjpSEtIO0mFJLw/3SDRWY5j1Au2EWd+nENKT2pHpcOvfoWPZFqNsfG f/Nv70JyJy9LwSz4XqGGXaERLkUO7B14AQE2dNiXf/KdGso2Z4+ksdhha/KuyNKz zbOZ2qvbBLBubXS+pQtr2hik5/1/ZFzfpFb25ps1nig7Ba0W9i/34v0W7Z6KD+l6 yLnbQ5AAZu15iimkrtCTsELDlDrs1uETfdPyMQ0XmOkjAu3L6QoVyyTMIlunAA== -----END CERTIFICATE-----Generated at Sat Sep 28 17:28:49 2024 by rpki-client on console-fra.rpki-client.org