$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer (raw, json) Hash identifier: kBRKi1rA2zTbQzkJbCFc0EVglohZtbeRPzlsTJiYaoA= Subject key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 510972395C43B2E3D4054E4900BEDADF902811CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft caRepository: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 Nov 2023 07:04:25 +0000 Certificate not after: Mon 11 Nov 2024 07:09:25 +0000 Subordinate resources: IP: 103.151.24.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:09:72:39:5c:43:b2:e3:d4:05:4e:49:00:be:da:df:90:28:11:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 07:04:25 2023 GMT Not After : Nov 11 07:09:25 2024 GMT Subject: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:41:d6:0d:89:10:c1:84:f5:c9:18:41:e5: 15:60:17:d4:f7:68:1e:e2:e6:73:8e:31:33:cc:10: 02:32:0a:8d:59:20:6c:e0:74:f4:d8:de:b8:b0:04: 06:15:a3:66:ab:0e:59:2b:a2:af:ce:30:e0:b6:28: 4b:d6:b2:70:e9:cf:6b:7d:0a:c6:54:e2:1d:f1:65: 43:5f:21:e7:ee:1a:3f:9e:cd:ce:d0:89:3a:02:70: 4f:de:be:55:e1:d4:52:64:68:0e:99:53:60:74:55: d1:36:03:12:d5:1b:fd:31:3f:91:50:f1:dd:02:cb: 18:f4:8b:bd:b7:8b:b7:07:5c:97:49:dd:38:40:84: 06:7a:41:e2:73:89:22:7b:09:7e:99:6a:c7:96:7e: d7:35:d9:cf:20:dd:d9:66:82:58:1d:5d:92:b5:5b: 6b:7d:1b:26:e1:ba:4d:94:74:7f:c3:4f:60:fc:5f: 08:ad:05:0a:d3:b5:db:e0:40:1f:81:31:59:3b:03: a0:c8:fb:4a:f4:aa:61:80:cf:df:b1:2a:11:c4:51: 9c:f1:be:8c:33:b0:d0:8f:b0:12:d5:de:f6:1b:59: 64:56:2b:12:1d:71:95:e4:80:48:2d:90:ff:41:dc: 9b:3f:55:78:9d:f2:23:42:a0:5e:32:c2:fd:21:fb: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.24.0/24 Signature Algorithm: sha256WithRSAEncryption 30:47:9a:8f:93:bb:d5:47:86:df:42:4d:d7:d8:70:c3:b0:7e: a4:52:f2:0d:27:b4:9d:fe:a9:1c:a3:df:fa:dc:5a:99:2c:96: bc:ce:74:8c:68:25:5b:53:65:84:23:1d:c6:0d:8e:72:f0:62: 47:8e:7e:de:5a:3a:a9:4e:b7:4a:98:f1:a3:7d:ff:d2:6a:68: 40:b0:0d:32:3c:7e:9a:67:3f:04:19:b1:c4:53:81:97:03:45: 95:38:ea:49:f9:07:21:14:0c:5f:f7:13:a6:b3:74:c8:39:c2: bc:1d:be:2d:b6:f1:67:70:d3:08:79:d5:3b:18:fc:6c:e7:a9: 0d:92:43:3e:ee:c0:bb:e3:32:cb:44:74:f1:43:78:d6:ea:65: 0a:62:18:15:18:6f:ba:a2:01:88:5c:de:1f:c9:cd:1b:19:22: 02:cb:b4:75:d8:fd:b5:c4:34:f4:18:a3:27:40:08:64:a9:5c: ba:f7:b3:b9:07:cd:0c:2d:c1:0f:8a:a1:fe:20:97:fd:7b:00: d2:b6:ba:63:13:d2:b9:64:70:c8:e2:e9:bb:0a:74:b1:b5:c1: 3f:ed:58:9e:15:79:b4:85:f2:00:41:a4:e5:e5:7f:99:43:ce: bd:1a:08:d3:ae:8e:84:2c:88:3d:69:ad:a2:d9:09:01:46:b0: 17:f3:ad:19 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUQlyOVxDsuPUBU5JAL7a35AoEc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExMzA3MDQyNVoX DTI0MTExMTA3MDkyNVowMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBG QjM2OTUxNjc0RjdEOEE0QUM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8VQdYNiRDBhPXJGEHlFWAX1PdoHuLmc44xM8wQAjIKjVkgbOB09NjeuLAE BhWjZqsOWSuir84w4LYoS9aycOnPa30KxlTiHfFlQ18h5+4aP57NztCJOgJwT96+ VeHUUmRoDplTYHRV0TYDEtUb/TE/kVDx3QLLGPSLvbeLtwdcl0ndOECEBnpB4nOJ InsJfplqx5Z+1zXZzyDd2WaCWB1dkrVba30bJuG6TZR0f8NPYPxfCK0FCtO12+BA H4ExWTsDoMj7SvSqYYDP37EqEcRRnPG+jDOw0I+wEtXe9htZZFYrEh1xleSASC2Q /0Hcmz9VeJ3yI0KgXjLC/SH7btUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCoGtCn3C4afnnD7NpUWdPfYpKxOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNWE0N2I2 LTU1MTMtNDYxMC05NGNmLTFmZWVjNGVlZWNmMy8wLzJBMDZCNDI5RjcwQjg2OUY5 RTcwRkIzNjk1MTY3NEY3RDhBNEFDNEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnlxgwDQYJKoZIhvcNAQELBQADggEBADBHmo+Tu9VHht9CTdfYcMOwfqRS8g0n tJ3+qRyj3/rcWpkslrzOdIxoJVtTZYQjHcYNjnLwYkeOft5aOqlOt0qY8aN9/9Jq aECwDTI8fppnPwQZscRTgZcDRZU46kn5ByEUDF/3E6azdMg5wrwdvi228Wdw0wh5 1TsY/GznqQ2SQz7uwLvjMstEdPFDeNbqZQpiGBUYb7qiAYhc3h/JzRsZIgLLtHXY /bXENPQYoydACGSpXLr3s7kHzQwtwQ+Kof4gl/17ANK2umMT0rlkcMji6bsKdLG1 wT/tWJ4VebSF8gBBpOXlf5lDzr0aCNOujoQsiD1praLZCQFGsBfzrRk= -----END CERTIFICATE-----Generated at Wed May 8 15:17:34 2024 by rpki-client on console-fra.rpki-client.org