$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer (raw, json) Hash identifier: vCohY2NwCyg39qQ5M2juz/2FeZjRaBzXMgpB72A/jLk= Subject key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B8BE8EAD378F236A0DC1ED7AA6A990C1B109B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft caRepository: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jul 2024 09:10:41 +0000 Certificate not after: Mon 28 Jul 2025 09:15:41 +0000 Subordinate resources: IP: 103.42.242.0/24 IP: 2001:df3:4b40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8b:e8:ea:d3:78:f2:36:a0:dc:1e:d7:aa:6a:99:0c:1b:10:9b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 29 09:10:41 2024 GMT Not After : Jul 28 09:15:41 2025 GMT Subject: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:45:a2:a1:ab:dc:91:d1:d2:4a:38:91:ba: 7d:9f:a8:1a:13:a7:91:5c:f5:86:2f:be:0b:e1:99: 54:3a:ac:d4:c6:6d:17:0c:6c:1f:75:29:b1:0d:af: 35:eb:15:c0:29:77:18:3a:72:39:40:2f:30:e8:9e: b6:f4:42:09:af:b2:cd:6d:2a:49:69:57:0f:69:7b: 32:fc:4c:30:d9:8a:fe:be:df:d9:59:77:a3:0b:f6: 34:ac:dd:b3:c7:d1:a0:ee:60:3c:da:99:17:77:d5: b6:ca:1c:51:c1:62:e6:9c:7e:c1:47:a0:e9:0a:8f: 3f:81:fc:c2:ec:f1:c8:ac:57:79:f4:b1:40:32:3a: 93:f5:96:56:2b:0e:f1:96:c0:e5:b7:cb:33:dc:a3: 9b:98:fc:6d:f7:88:0f:74:74:bc:99:b8:92:e2:28: 3f:cc:f2:20:b7:1c:09:c1:15:fe:00:b4:32:b5:76: 93:98:82:69:d7:91:75:3e:ea:16:fe:56:02:b4:73: b1:10:60:7e:fb:78:5f:e1:09:de:a7:18:85:ce:ff: 02:8d:d4:08:78:04:20:05:05:2d:b6:e6:42:ce:49: 6f:d2:8b:d6:95:37:bd:d4:d5:47:4b:56:65:bd:40: f9:fe:d7:ad:3c:46:64:12:a3:7f:ad:37:ff:b0:3c: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 91:5f:c2:82:73:08:97:a4:37:b6:54:7e:3e:14:09:17:63:3b: 0e:89:c8:4a:68:06:a0:07:0d:2e:3e:a5:71:2f:73:08:20:eb: 10:52:c6:5f:19:ff:3a:15:53:76:93:d1:cf:3d:d7:ba:96:c9: 18:de:95:97:a3:02:3d:21:5d:69:45:e3:bf:ad:45:be:02:7d: 43:1e:bd:43:c9:03:78:6c:05:43:1b:60:51:b1:5b:61:9e:1d: 29:4d:f6:1e:ce:7d:75:62:7a:30:a8:9b:70:e4:31:24:4a:14: e8:88:ff:14:59:35:80:c3:ad:72:3e:87:c6:34:21:3c:2b:55: 67:f0:36:86:b3:9b:f5:d6:ef:5d:cc:3a:12:b3:c1:6f:20:61: f8:0e:99:c4:e1:58:67:fc:76:a1:bc:26:4e:06:98:4d:c2:82: b8:27:08:8d:a3:c9:b4:0d:8c:b0:b8:7f:f9:6c:39:c9:d9:af: fa:d2:ba:47:0f:30:1f:73:9d:77:38:14:4a:90:65:38:a1:d8: d0:a8:53:8d:76:69:b5:03:04:0e:ee:d1:e4:c8:c7:31:20:e0: 88:ba:ff:fb:2c:49:5d:3a:79:94:e9:dd:e4:6e:14:6d:d8:17: b3:a8:65:0e:8a:88:31:2a:aa:be:d3:9a:21:58:f4:bc:77:c9: fd:e1:d1:2a -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUC4vo6tN48jag3B7XqmqZDBsQm3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyOTA5MTA0MVoX DTI1MDcyODA5MTU0MVowMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2 RTZGMTQ1RDY0QzgwNjFBN0IxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKozRaKhq9yR0dJKOJG6fZ+oGhOnkVz1hi++C+GZVDqs1MZtFwxsH3UpsQ2v NesVwCl3GDpyOUAvMOietvRCCa+yzW0qSWlXD2l7MvxMMNmK/r7f2Vl3owv2NKzd s8fRoO5gPNqZF3fVtsocUcFi5px+wUeg6QqPP4H8wuzxyKxXefSxQDI6k/WWVisO 8ZbA5bfLM9yjm5j8bfeID3R0vJm4kuIoP8zyILccCcEV/gC0MrV2k5iCadeRdT7q Fv5WArRzsRBgfvt4X+EJ3qcYhc7/Ao3UCHgEIAUFLbbmQs5Jb9KL1pU3vdTVR0tW Zb1A+f7XrTxGZBKjf603/7A8lkMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDB6QI4qqCJo2tNubxRdZMgGGnscMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YxZjQz LWNlN2UtNDk3MC1hYWQwLTc4MmIwMTliZDAzZS8wLzMwN0E0MDhFMkFBODIyNjhE QUQzNkU2RjE0NUQ2NEM4MDYxQTdCMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnKvIwDwQCAAIwCQMHACABDfNLQDANBgkqhkiG9w0BAQsFAAOCAQEAkV/CgnMI l6Q3tlR+PhQJF2M7DonISmgGoAcNLj6lcS9zCCDrEFLGXxn/OhVTdpPRzz3XupbJ GN6Vl6MCPSFdaUXjv61FvgJ9Qx69Q8kDeGwFQxtgUbFbYZ4dKU32Hs59dWJ6MKib cOQxJEoU6Ij/FFk1gMOtcj6HxjQhPCtVZ/A2hrOb9dbvXcw6ErPBbyBh+A6ZxOFY Z/x2obwmTgaYTcKCuCcIjaPJtA2MsLh/+Ww5ydmv+tK6Rw8wH3OddzgUSpBlOKHY 0KhTjXZptQMEDu7R5MjHMSDgiLr/+yxJXTp5lOnd5G4UbdgXs6hlDoqIMSqqvtOa IVj0vHfJ/eHRKg== -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:41 2025 by rpki-client