$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer (raw, json) Hash identifier: 7oW+sjaoo0Cc3DInLG6M4sdxbBnUNhVi9RkbDWKV6KI= Subject key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BD304D386638AB8FC15E1EFA8FA51B76E6F60C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft caRepository: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 23 Nov 2023 14:28:40 +0000 Certificate not after: Thu 21 Nov 2024 14:33:40 +0000 Subordinate resources: IP: 103.129.152.0/24 IP: 2001:df6:7500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:04:d3:86:63:8a:b8:fc:15:e1:ef:a8:fa:51:b7:6e:6f:60:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 23 14:28:40 2023 GMT Not After : Nov 21 14:33:40 2024 GMT Subject: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:71:45:29:88:18:d4:a1:9b:7a:d0:ce:9a: e6:06:e8:0f:50:4d:d1:ce:b7:23:50:1d:e4:79:00: 76:53:39:a2:4f:ba:15:f7:8b:1b:bc:23:ac:d5:3d: 06:31:69:32:ee:93:83:a0:d9:d4:30:32:a4:c5:7a: f5:2c:27:eb:18:7f:01:40:a4:dc:01:82:f0:a7:56: 21:fc:86:d9:ee:c4:a9:68:86:e6:a6:d0:7f:ae:49: 41:88:91:98:a5:2a:20:ab:7a:a4:96:48:b3:12:04: 54:e2:6a:58:c0:45:93:34:c8:6f:e0:78:b9:30:cc: 80:2f:cf:08:84:7d:50:4c:4e:dd:e5:f7:0a:ff:8c: 46:c4:d1:8e:05:69:36:bb:6e:d1:5c:be:bd:f9:cd: 57:82:84:91:cb:e5:6f:56:a2:f0:ef:f3:28:58:52: 27:62:dd:f9:52:31:44:6b:73:26:68:73:28:c1:b7: 1c:0d:b3:9f:64:0d:c1:a2:88:d4:09:af:94:ed:88: 95:f1:e5:15:62:7e:be:b8:33:23:75:65:1f:03:9f: 1d:af:6e:16:70:29:92:a2:2e:a2:bb:96:ea:aa:3a: fb:16:45:68:c8:b4:4d:25:c7:42:f1:74:43:53:ad: 66:7f:b4:55:bc:a3:d2:bb:ce:9a:29:71:49:6b:91: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.152.0/24 IPv6: 2001:df6:7500::/48 Signature Algorithm: sha256WithRSAEncryption 05:8e:26:8e:d3:84:8f:30:42:db:72:c7:ee:e8:3e:bd:0d:6f: 2a:52:c8:67:63:0a:5e:02:dd:53:48:4f:95:66:e8:de:cd:34: 36:b8:56:e7:08:06:15:b5:84:f9:e5:25:55:01:54:8b:c9:41: e1:0c:8b:ba:9f:ac:e3:53:5d:0f:ec:60:5b:cd:d5:62:cb:bf: 7f:31:1a:fd:6e:de:08:c9:35:a5:76:f9:7f:14:3b:f3:9f:f9: 50:f7:5e:5d:34:22:96:e8:7f:9b:fc:51:a9:e9:cd:20:f9:8b: b8:e5:5b:de:3a:72:c9:3c:06:85:62:92:23:10:b0:bf:e2:90: 2b:7b:ed:a0:e7:29:44:04:15:c3:dd:9b:b8:89:e2:34:f4:73: 82:7f:19:78:4e:fc:d4:19:e2:bb:27:d5:a4:e6:0a:31:7c:84: 3a:f3:54:23:f7:42:91:1f:32:bb:62:a9:79:45:55:1c:8e:2e: 2a:09:25:38:fa:fc:10:00:92:b5:1b:e7:31:74:b9:b5:d7:1d: 0d:bb:aa:13:6b:d1:30:75:01:18:f2:5e:dc:95:19:ca:b9:45: 04:fb:67:a6:e2:77:d1:61:6b:58:12:5f:89:ed:56:44:ad:8d: 21:42:21:c9:67:b5:ac:f4:e0:4c:23:07:fe:80:52:54:0f:98: ed:a7:ac:39 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUO9ME04Zjirj8FeHvqPpRt25vYMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMzE0Mjg0MFoX DTI0MTEyMTE0MzM0MFowMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0 Njg0MENDNUFFMkU2QUM4RTQwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPN5cUUpiBjUoZt60M6a5gboD1BN0c63I1Ad5HkAdlM5ok+6FfeLG7wjrNU9 BjFpMu6Tg6DZ1DAypMV69Swn6xh/AUCk3AGC8KdWIfyG2e7EqWiG5qbQf65JQYiR mKUqIKt6pJZIsxIEVOJqWMBFkzTIb+B4uTDMgC/PCIR9UExO3eX3Cv+MRsTRjgVp Nrtu0Vy+vfnNV4KEkcvlb1ai8O/zKFhSJ2Ld+VIxRGtzJmhzKMG3HA2zn2QNwaKI 1AmvlO2IlfHlFWJ+vrgzI3VlHwOfHa9uFnApkqIuoruW6qo6+xZFaMi0TSXHQvF0 Q1OtZn+0Vbyj0rvOmilxSWuRxHMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAr9j2sCQF9N6alGhAzFri5qyOQMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0N2M2ZWNi LTBiYWUtNDVjMy1hYWRhLTQzYTZhMTcxYzA0Ni8wLzBBRkQ4RjZCMDI0MDVGNERF OUE5NDY4NDBDQzVBRTJFNkFDOEU0MEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngZgwDwQCAAIwCQMHACABDfZ1ADANBgkqhkiG9w0BAQsFAAOCAQEABY4mjtOE jzBC23LH7ug+vQ1vKlLIZ2MKXgLdU0hPlWbo3s00NrhW5wgGFbWE+eUlVQFUi8lB 4QyLup+s41NdD+xgW83VYsu/fzEa/W7eCMk1pXb5fxQ785/5UPdeXTQiluh/m/xR qenNIPmLuOVb3jpyyTwGhWKSIxCwv+KQK3vtoOcpRAQVw92buIniNPRzgn8ZeE78 1BniuyfVpOYKMXyEOvNUI/dCkR8yu2KpeUVVHI4uKgklOPr8EACStRvnMXS5tdcd DbuqE2vRMHUBGPJe3JUZyrlFBPtnpuJ30WFrWBJfie1WRK2NIUIhyWe1rPTgTCMH /oBSVA+Y7aesOQ== -----END CERTIFICATE-----Generated at Wed May 8 22:46:36 2024 by rpki-client on console-ams.rpki-client.org