$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer (raw, json) Hash identifier: x9KjQkibKTLgyjkURyywsaAfZ+aNNXlF7FV9xd0Kkws= Subject key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12C58111424EA5783C11F481835967C5018F2C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft caRepository: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 02:47:57 +0000 Certificate not after: Fri 24 Oct 2025 02:52:57 +0000 Subordinate resources: IP: 103.129.152.0/24 IP: 2001:df6:7500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:81:11:42:4e:a5:78:3c:11:f4:81:83:59:67:c5:01:8f:2c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 02:47:57 2024 GMT Not After : Oct 24 02:52:57 2025 GMT Subject: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:71:45:29:88:18:d4:a1:9b:7a:d0:ce:9a: e6:06:e8:0f:50:4d:d1:ce:b7:23:50:1d:e4:79:00: 76:53:39:a2:4f:ba:15:f7:8b:1b:bc:23:ac:d5:3d: 06:31:69:32:ee:93:83:a0:d9:d4:30:32:a4:c5:7a: f5:2c:27:eb:18:7f:01:40:a4:dc:01:82:f0:a7:56: 21:fc:86:d9:ee:c4:a9:68:86:e6:a6:d0:7f:ae:49: 41:88:91:98:a5:2a:20:ab:7a:a4:96:48:b3:12:04: 54:e2:6a:58:c0:45:93:34:c8:6f:e0:78:b9:30:cc: 80:2f:cf:08:84:7d:50:4c:4e:dd:e5:f7:0a:ff:8c: 46:c4:d1:8e:05:69:36:bb:6e:d1:5c:be:bd:f9:cd: 57:82:84:91:cb:e5:6f:56:a2:f0:ef:f3:28:58:52: 27:62:dd:f9:52:31:44:6b:73:26:68:73:28:c1:b7: 1c:0d:b3:9f:64:0d:c1:a2:88:d4:09:af:94:ed:88: 95:f1:e5:15:62:7e:be:b8:33:23:75:65:1f:03:9f: 1d:af:6e:16:70:29:92:a2:2e:a2:bb:96:ea:aa:3a: fb:16:45:68:c8:b4:4d:25:c7:42:f1:74:43:53:ad: 66:7f:b4:55:bc:a3:d2:bb:ce:9a:29:71:49:6b:91: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.152.0/24 IPv6: 2001:df6:7500::/48 Signature Algorithm: sha256WithRSAEncryption 6c:5c:9f:d3:47:4e:26:a6:32:de:e8:d8:ea:23:a3:8d:a3:94: e9:e4:ef:19:c9:6e:f9:09:d4:62:6d:f0:c2:85:7f:0e:e3:5a: 23:31:bd:47:0a:3e:f2:00:77:16:ec:21:98:9a:5d:25:f4:e9: 0a:71:60:4f:b9:c5:02:65:ee:bd:f5:5e:3c:73:d7:5f:fa:56: e4:ca:8b:55:94:4c:92:aa:2e:32:e2:8e:95:99:8c:04:b2:53: 50:f6:eb:1a:07:d8:98:4a:79:11:86:4d:e1:12:cb:ac:44:a8: a0:98:ea:e9:02:31:b5:42:f3:e5:2f:4a:41:05:35:80:cb:4f: c0:eb:b7:ec:c4:bb:db:69:3b:be:79:47:13:2c:d4:c7:51:40: b5:1e:46:ce:b3:97:93:e9:58:f9:3d:d2:e0:ea:f8:ad:05:0c: 17:b9:59:41:d3:0b:48:f5:09:db:e7:5e:32:df:99:13:7d:1c: e6:27:dd:92:26:56:eb:20:e7:1c:d9:7e:43:d1:7e:c2:f8:40: b2:88:60:a5:86:ae:ce:f3:13:9f:9b:d9:c5:bf:96:6c:5b:52: 1e:6a:5a:7a:0a:75:9a:c5:71:27:55:f1:77:19:50:4e:a7:70: 72:ab:5e:f4:33:42:27:23:27:91:7c:f8:a5:64:cb:13:74:1f: f8:bf:d1:9c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEsWBEUJOpXg8EfSBg1lnxQGPLBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNTAyNDc1N1oX DTI1MTAyNDAyNTI1N1owMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0 Njg0MENDNUFFMkU2QUM4RTQwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPN5cUUpiBjUoZt60M6a5gboD1BN0c63I1Ad5HkAdlM5ok+6FfeLG7wjrNU9 BjFpMu6Tg6DZ1DAypMV69Swn6xh/AUCk3AGC8KdWIfyG2e7EqWiG5qbQf65JQYiR mKUqIKt6pJZIsxIEVOJqWMBFkzTIb+B4uTDMgC/PCIR9UExO3eX3Cv+MRsTRjgVp Nrtu0Vy+vfnNV4KEkcvlb1ai8O/zKFhSJ2Ld+VIxRGtzJmhzKMG3HA2zn2QNwaKI 1AmvlO2IlfHlFWJ+vrgzI3VlHwOfHa9uFnApkqIuoruW6qo6+xZFaMi0TSXHQvF0 Q1OtZn+0Vbyj0rvOmilxSWuRxHMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAr9j2sCQF9N6alGhAzFri5qyOQMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0N2M2ZWNi LTBiYWUtNDVjMy1hYWRhLTQzYTZhMTcxYzA0Ni8wLzBBRkQ4RjZCMDI0MDVGNERF OUE5NDY4NDBDQzVBRTJFNkFDOEU0MEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngZgwDwQCAAIwCQMHACABDfZ1ADANBgkqhkiG9w0BAQsFAAOCAQEAbFyf00dO JqYy3ujY6iOjjaOU6eTvGclu+QnUYm3wwoV/DuNaIzG9Rwo+8gB3FuwhmJpdJfTp CnFgT7nFAmXuvfVePHPXX/pW5MqLVZRMkqouMuKOlZmMBLJTUPbrGgfYmEp5EYZN 4RLLrESooJjq6QIxtULz5S9KQQU1gMtPwOu37MS722k7vnlHEyzUx1FAtR5GzrOX k+lY+T3S4Or4rQUMF7lZQdMLSPUJ2+deMt+ZE30c5ifdkiZW6yDnHNl+Q9F+wvhA sohgpYauzvMTn5vZxb+WbFtSHmpaegp1msVxJ1XxdxlQTqdwcqte9DNCJyMnkXz4 pWTLE3Qf+L/RnA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org