$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer File: 29692979765B670997413579D7BF5663C05BBD1A.cer (raw, json) Hash identifier: 0fA5CTey9lo11an/g2j+JH8IYtN48PgM2a+UqdxYCU8= Subject key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BF2B2D22CB3DA55BC4E6608E2342CEAD946F2DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft caRepository: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Jan 2024 18:01:24 +0000 Certificate not after: Thu 16 Jan 2025 18:06:24 +0000 Subordinate resources: IP: 45.251.72.0/22 IP: 103.9.124.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f2:b2:d2:2c:b3:da:55:bc:4e:66:08:e2:34:2c:ea:d9:46:f2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 18 18:01:24 2024 GMT Not After : Jan 16 18:06:24 2025 GMT Subject: CN=29692979765B670997413579D7BF5663C05BBD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:c7:d2:7e:18:9d:58:ac:49:18:c0:3d:9d: 59:70:cd:b0:70:de:f2:1a:d3:0e:64:ca:cc:1d:03: 12:39:af:ca:9c:42:9b:cc:7a:36:f2:5d:3f:6c:1f: c6:d7:ac:bb:6e:ee:25:23:f6:21:01:af:8f:90:5e: 66:4a:28:94:ce:c2:c7:1b:e0:1f:92:48:d4:12:77: 4d:25:f8:50:cf:26:98:ed:f6:dc:70:16:73:1b:6d: d9:45:b8:46:71:d0:b9:29:25:eb:ff:e5:41:23:0a: f4:ee:dd:af:9e:a1:7a:fd:d5:10:c3:4f:33:62:52: 78:a3:e5:9e:86:3b:1a:fc:8f:d7:d4:f1:a3:5c:3a: 91:df:d4:97:17:87:0d:2c:1b:a0:da:b5:ab:24:4b: 47:80:a6:a1:1f:47:8d:ef:33:9f:6d:54:66:0d:ef: b2:21:04:61:c4:8b:b8:a1:2e:ab:49:56:4e:8a:24: 9b:dc:a1:f2:35:14:f4:9a:25:2f:1f:98:97:56:fb: ed:30:8e:15:f2:38:8a:d3:72:ff:69:23:ee:fe:37: 4a:9f:02:48:9d:eb:f3:b4:d8:3e:c7:cd:d5:98:54: 24:5b:f6:7c:af:f2:f0:91:04:95:15:25:5f:be:16: 7f:74:9b:dc:fd:e5:be:78:e0:5e:d3:1c:aa:b0:28: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.72.0/22 103.9.124.0/22 Signature Algorithm: sha256WithRSAEncryption 08:91:d0:2d:1d:e9:94:a1:cd:79:e2:3d:72:61:32:3d:d6:8d: 55:18:67:10:24:c4:67:15:2b:18:eb:28:12:19:22:6c:74:37: 98:c1:2f:77:91:88:c9:46:35:95:51:40:10:1d:14:91:63:38: 8f:81:3c:99:f8:c7:7e:bc:a1:58:ba:68:2e:97:2e:6a:b3:e4: 68:9c:b5:82:41:68:2b:70:62:2b:0c:42:24:a8:d0:91:9d:95: 0a:f0:81:54:01:7a:d7:0f:6a:f0:ac:7d:d0:43:fd:37:af:6c: 03:c9:96:b4:62:df:f8:35:43:57:96:1c:85:2e:f1:d5:2d:6b: a1:1b:1d:1e:2d:08:36:19:9a:ec:dd:3d:86:c9:b1:aa:4c:8c: 10:be:da:bd:c2:a3:f7:6e:98:bc:87:0c:3f:76:83:4a:af:02: 88:13:a0:bb:fb:ac:7e:d7:59:c7:91:bc:69:66:ef:37:f9:57: 3f:e5:14:ea:25:ec:1e:40:b6:e7:1e:ec:0e:d2:70:7a:83:53: 68:7f:b7:b1:26:d6:1e:01:0d:af:2c:44:54:ad:24:9b:db:2e: 7c:cc:3e:ed:69:aa:a5:eb:78:de:db:3f:e2:55:f1:fa:d3:a4: 80:ee:0b:0d:a5:c6:26:c4:b9:33:3b:0a:6d:ec:5f:63:f8:4f: a5:e0:3b:ee -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUa/Ky0iyz2lW8TmYI4jQs6tlG8twwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExODE4MDEyNFoX DTI1MDExNjE4MDYyNFowMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEz NTc5RDdCRjU2NjNDMDVCQkQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJytx9J+GJ1YrEkYwD2dWXDNsHDe8hrTDmTKzB0DEjmvypxCm8x6NvJdP2wf xtesu27uJSP2IQGvj5BeZkoolM7CxxvgH5JI1BJ3TSX4UM8mmO323HAWcxtt2UW4 RnHQuSkl6//lQSMK9O7dr56hev3VEMNPM2JSeKPlnoY7GvyP19Txo1w6kd/UlxeH DSwboNq1qyRLR4CmoR9Hje8zn21UZg3vsiEEYcSLuKEuq0lWTookm9yh8jUU9Jol Lx+Yl1b77TCOFfI4itNy/2kj7v43Sp8CSJ3r87TYPsfN1ZhUJFv2fK/y8JEElRUl X74Wf3Sb3P3lvnjgXtMcqrAo9X0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClpKXl2W2cJl0E1ede/VmPAW70aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiMGExMWI1 LTk0NDEtNGNjOS1hNjcyLWJlOTc5OWI2NTUyMC8wLzI5NjkyOTc5NzY1QjY3MDk5 NzQxMzU3OUQ3QkY1NjYzQzA1QkJEMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIt+0gDBAJnCXwwDQYJKoZIhvcNAQELBQADggEBAAiR0C0d6ZShzXniPXJhMj3W jVUYZxAkxGcVKxjrKBIZImx0N5jBL3eRiMlGNZVRQBAdFJFjOI+BPJn4x368oVi6 aC6XLmqz5GictYJBaCtwYisMQiSo0JGdlQrwgVQBetcPavCsfdBD/TevbAPJlrRi 3/g1Q1eWHIUu8dUta6EbHR4tCDYZmuzdPYbJsapMjBC+2r3Co/dumLyHDD92g0qv AogToLv7rH7XWceRvGlm7zf5Vz/lFOol7B5Atuce7A7ScHqDU2h/t7Em1h4BDa8s RFStJJvbLnzMPu1pqqXreN7bP+JV8frTpIDuCw2lxibEuTM7Cm3sX2P4T6XgO+4= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org