$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.cer (raw, json) Hash identifier: oBLLB1kyXdHSoGJR9n9xD5y1HSu+F6vF3TibEHpNR8E= Subject key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E3A53B44DC6AE8E999B8AAEC21C13F1D31A6B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft caRepository: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 02:14:57 +0000 Certificate not after: Mon 29 Jul 2024 02:19:57 +0000 Subordinate resources: IP: 103.125.184.0/23 IP: 2001:df7:2f00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3a:53:b4:4d:c6:ae:8e:99:9b:8a:ae:c2:1c:13:f1:d3:1a:6b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 02:14:57 2023 GMT Not After : Jul 29 02:19:57 2024 GMT Subject: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:72:c6:55:29:f6:9d:d5:8a:5b:86:9f:ac: f1:fd:32:00:8a:a3:0f:56:16:95:e2:07:99:3f:fe: c5:76:10:6e:ce:a7:91:42:1e:75:ee:1c:92:ed:44: 61:3b:84:02:08:d3:7e:14:8e:7c:ac:5f:25:6d:4d: 8b:52:bb:db:dd:d4:c1:db:bc:0e:d3:bb:b4:33:5e: ea:c0:f6:1e:8e:b1:c6:9c:fa:7b:75:0a:d1:5d:96: 2d:ba:7d:48:2a:b7:49:e4:0e:06:92:07:2b:b1:72: cd:b2:79:26:37:82:50:2d:c9:5f:97:e8:4d:f3:77: ae:72:3a:e3:8c:9f:4f:eb:21:64:a1:39:50:4e:da: 05:9f:ad:a3:c1:1d:a2:d0:90:da:ec:3f:21:61:ce: 93:a2:5a:7d:9e:95:a3:a5:81:67:5d:9c:6f:c5:9d: 86:65:a6:ac:c6:2c:65:6e:3b:eb:c4:cd:6e:4d:75: 5c:0e:38:42:a4:b6:b2:c8:fc:fe:2c:8f:4d:76:4a: a2:51:1d:fe:6d:78:cc:b0:8a:31:19:d5:ba:4b:ce: 38:e4:40:57:bf:07:55:8c:8d:f3:0f:64:dd:81:10: b6:84:59:bc:4b:35:43:62:f6:cf:06:82:aa:7c:86: c9:6c:cd:4b:84:a1:90:ae:c7:5c:2d:3b:47:27:1f: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.184.0/23 IPv6: 2001:df7:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 66:f3:a4:d9:25:0b:bf:83:21:9f:71:ca:a5:ca:18:85:ca:47: 94:03:78:59:3b:d1:e8:d3:e2:a9:d3:dc:02:2c:e2:b8:08:52: 66:b2:85:7a:30:9f:5c:ba:ef:ce:d4:58:20:ae:2d:70:48:75: 0d:58:aa:1c:e0:bb:a0:27:cc:f6:b7:c0:c1:5c:c5:fc:a9:91: 2b:75:bf:71:d0:33:1d:81:4d:1f:5d:b0:24:2a:20:a3:14:2d: ef:1b:01:de:57:ac:e2:0d:0e:3c:2a:d1:8c:ba:c0:b2:7a:38: db:a2:ba:0e:b8:bb:2c:bf:ff:21:35:82:75:d1:73:09:63:03: 10:f1:65:14:80:4a:8a:47:52:fd:97:ef:22:4f:e9:05:42:d3: c3:a3:e4:66:a3:7e:49:d2:cd:6a:18:ef:30:10:2a:b1:6a:e1: 9d:0d:01:36:a3:de:ff:b8:0e:4b:6c:c1:b8:4c:eb:7d:d6:3c: bd:22:dd:90:a1:77:60:c2:4c:c6:f8:0a:cf:3c:8c:b3:6c:68: 23:ef:18:cf:c8:9d:d3:66:55:2a:07:ae:85:1c:e0:5c:32:ce: b1:7f:f2:90:f7:8d:9e:fb:70:58:76:30:64:a9:5a:95:97:3b: d9:ba:e8:80:ee:d6:aa:5f:55:f1:48:61:07:da:73:46:88:70: 34:90:b1:d1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULjpTtE3Gro6Zm4quwhwT8dMaa5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAyMTQ1N1oX DTI0MDcyOTAyMTk1N1owMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTRE QkNEQTYwNzcxREE1NEM0RjY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK20csZVKfad1Ypbhp+s8f0yAIqjD1YWleIHmT/+xXYQbs6nkUIede4cku1E YTuEAgjTfhSOfKxfJW1Ni1K7293Uwdu8DtO7tDNe6sD2Ho6xxpz6e3UK0V2WLbp9 SCq3SeQOBpIHK7FyzbJ5JjeCUC3JX5foTfN3rnI644yfT+shZKE5UE7aBZ+to8Ed otCQ2uw/IWHOk6JafZ6Vo6WBZ12cb8WdhmWmrMYsZW4768TNbk11XA44QqS2ssj8 /iyPTXZKolEd/m14zLCKMRnVukvOOORAV78HVYyN8w9k3YEQtoRZvEs1Q2L2zwaC qnyGyWzNS4ShkK7HXC07RycfdT8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBKShaR4oWbuC1TbzaYHcdpUxPZfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZDkyNjhi LTVlNjEtNDNiMi1hNjI0LTQxYjAxZDdkNzZiMi8wLzEyOTI4NUE0NzhBMTY2RUUw QjU0REJDREE2MDc3MURBNTRDNEY2NUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnfbgwDwQCAAIwCQMHACABDfcvADANBgkqhkiG9w0BAQsFAAOCAQEAZvOk2SUL v4Mhn3HKpcoYhcpHlAN4WTvR6NPiqdPcAiziuAhSZrKFejCfXLrvztRYIK4tcEh1 DViqHOC7oCfM9rfAwVzF/KmRK3W/cdAzHYFNH12wJCogoxQt7xsB3les4g0OPCrR jLrAsno426K6Dri7LL//ITWCddFzCWMDEPFlFIBKikdS/ZfvIk/pBULTw6PkZqN+ SdLNahjvMBAqsWrhnQ0BNqPe/7gOS2zBuEzrfdY8vSLdkKF3YMJMxvgKzzyMs2xo I+8Yz8id02ZVKgeuhRzgXDLOsX/ykPeNnvtwWHYwZKlalZc72brogO7Wql9V8Uhh B9pzRohwNJCx0Q== -----END CERTIFICATE-----Generated at Mon May 6 01:46:49 2024 by rpki-client on console-fra.rpki-client.org