$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer (raw, json) Hash identifier: aHHuqZGM6+VmMegfxhm+E6NJrVmmMcUnrMETdHs/8OE= Subject key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62EFFB5817B15E383811E3D3EC204960C4E28BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 10:53:50 +0000 Certificate not after: Mon 08 Sep 2025 10:58:50 +0000 Subordinate resources: IP: 103.142.33.0/24 IP: 103.143.218.0/24 IP: 203.142.26.0/24 IP: 2001:df1:2e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ef:fb:58:17:b1:5e:38:38:11:e3:d3:ec:20:49:60:c4:e2:8b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 10:53:50 2024 GMT Not After : Sep 8 10:58:50 2025 GMT Subject: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:8a:78:a5:41:b0:07:bb:91:e9:1b:e5:9c: c1:dc:06:4e:c7:1a:8f:9d:93:6b:f6:e4:ca:b1:a7: 3e:c2:1c:71:1d:80:30:ff:92:a0:7c:56:ad:6d:0e: fc:fe:50:31:14:61:2a:77:09:66:76:9d:db:b3:17: d1:4c:ad:23:57:d7:64:6a:fe:38:24:1c:21:ba:a2: 4e:a9:58:90:a5:7e:d9:3c:2e:e2:f2:64:2c:af:b9: 4d:10:81:cd:b1:89:a9:1c:99:e2:37:e5:b3:25:e0: 8e:e6:37:c4:55:fd:1a:35:f9:93:76:e5:d7:97:e9: 7b:63:55:94:45:59:96:5e:84:0a:10:08:5d:70:88: 95:ab:8b:c9:5c:fe:e5:24:cd:39:85:4a:fa:bc:d1: 85:72:49:1e:33:ec:5a:c7:73:5b:92:fb:da:bb:6a: 7f:b5:a6:bd:93:b2:8f:e3:a6:2a:89:67:c0:7d:43: a9:b4:cc:11:0f:7e:02:aa:b8:06:b6:65:5d:8c:96: 85:f2:6f:15:cc:f7:c0:26:19:ba:37:76:42:19:9c: d1:df:f1:c2:da:40:a7:e4:d2:00:98:b9:d1:9e:bd: e7:b7:6c:07:a0:71:7a:87:54:b7:df:8e:61:8a:2b: 54:13:ff:bd:d1:69:16:05:0b:95:18:0d:e7:f8:40: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.33.0/24 103.143.218.0/24 203.142.26.0/24 IPv6: 2001:df1:2e80::/48 Signature Algorithm: sha256WithRSAEncryption 13:38:b8:fa:02:32:34:61:35:16:7d:60:e9:d7:78:07:ed:fa: 6e:b6:7b:3c:85:8a:95:8a:94:4d:9a:e2:06:48:61:0c:3b:1d: a5:8b:34:24:34:26:2d:a6:7c:ca:b3:a4:bc:3c:73:b6:f1:e5: 21:26:6f:d5:44:ac:ea:ac:37:cb:66:ba:aa:aa:5c:28:78:0b: 1c:89:89:b9:fd:d4:6b:1c:53:2d:e4:80:c6:5f:64:1f:bb:99: 4b:83:3f:44:51:6e:30:b2:89:20:f8:65:92:a3:b7:67:04:e6: ae:85:a4:fd:4e:fb:ef:35:cb:d3:33:e2:b7:69:ab:bf:9b:7b: 51:09:c2:18:08:d8:c3:f6:3a:67:08:90:9e:fc:c6:73:df:18: 16:eb:72:8d:72:23:ea:20:1b:c4:1a:49:16:48:37:a1:0d:5e: 6e:75:0e:05:a0:9a:4d:65:e9:cb:ef:9e:83:8b:49:85:f5:c7: 9c:32:4f:8f:36:1a:0c:fa:73:7a:25:03:cf:d1:a1:aa:58:07: 9a:fe:f4:25:bf:d7:f9:26:47:ab:fa:8e:c0:71:94:dd:71:b2: 60:1a:1e:70:0d:d2:f1:e9:7a:15:cc:a1:85:2f:b9:e6:b2:9b: 5c:2e:d6:f5:6e:a2:da:a4:83:ae:58:ff:db:6b:7b:27:ca:c1: 7e:ba:3c:77 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUYu/7WBexXjg4EePT7CBJYMTii7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwOTEwNTM1MFoX DTI1MDkwODEwNTg1MFowMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkEx QzVCRjNEODRFNDE1RDdGMThENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdJinilQbAHu5HpG+WcwdwGTscaj52Ta/bkyrGnPsIccR2AMP+SoHxWrW0O /P5QMRRhKncJZnad27MX0UytI1fXZGr+OCQcIbqiTqlYkKV+2Twu4vJkLK+5TRCB zbGJqRyZ4jflsyXgjuY3xFX9GjX5k3bl15fpe2NVlEVZll6EChAIXXCIlauLyVz+ 5STNOYVK+rzRhXJJHjPsWsdzW5L72rtqf7WmvZOyj+OmKolnwH1DqbTMEQ9+Aqq4 BrZlXYyWhfJvFcz3wCYZujd2Qhmc0d/xwtpAp+TSAJi50Z6957dsB6BxeodUt9+O YYorVBP/vdFpFgULlRgN5/hALFkCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCCkos6gCYhAr2ocW/PYTkFdfxjVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjODFlNmVj LWM4N2ItNGZkYi1hMmZhLWVjYzQ3MGM0MWQ1My8wLzIwQTRBMkNFQTAwOTg4NDBB RjZBMUM1QkYzRDg0RTQxNUQ3RjE4RDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnjiEDBABnj9oDBADLjhowDwQCAAIwCQMHACABDfEugDANBgkqhkiG9w0BAQsF AAOCAQEAEzi4+gIyNGE1Fn1g6dd4B+36brZ7PIWKlYqUTZriBkhhDDsdpYs0JDQm LaZ8yrOkvDxztvHlISZv1USs6qw3y2a6qqpcKHgLHImJuf3UaxxTLeSAxl9kH7uZ S4M/RFFuMLKJIPhlkqO3ZwTmroWk/U777zXL0zPit2mrv5t7UQnCGAjYw/Y6ZwiQ nvzGc98YFutyjXIj6iAbxBpJFkg3oQ1ebnUOBaCaTWXpy++eg4tJhfXHnDJPjzYa DPpzeiUDz9GhqlgHmv70Jb/X+SZHq/qOwHGU3XGyYBoecA3S8el6FcyhhS+55rKb XC7W9W6i2qSDrlj/22t7J8rBfro8dw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org