$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer File: 510BADD365AB1A82795AF2361991094E4847999C.cer (raw, json) Hash identifier: FynR0SY2yAsyzayQcUa5xrnGEwQB1KLaLjtcyXlIxc4= Subject key identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 39677010C38E95761B89F0EEE88186B64B0660AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft caRepository: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 27 Jul 2024 17:47:48 +0000 Certificate not after: Sat 26 Jul 2025 17:52:48 +0000 Subordinate resources: IP: 103.225.209.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:67:70:10:c3:8e:95:76:1b:89:f0:ee:e8:81:86:b6:4b:06:60:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 27 17:47:48 2024 GMT Not After : Jul 26 17:52:48 2025 GMT Subject: CN=510BADD365AB1A82795AF2361991094E4847999C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:67:77:ef:5c:4c:6a:ba:44:6b:74:83:6f: f9:07:06:c3:15:4b:a8:2e:bc:d3:c9:2b:50:82:84: c4:a5:d6:e7:86:93:51:0d:2d:4e:e5:65:dc:93:d7: 13:27:c3:cf:d0:56:c2:cd:ac:45:6a:08:d2:81:c5: 92:43:60:c1:b2:f4:ea:a0:93:6f:4e:08:4b:44:a3: 5b:94:48:24:8d:48:88:25:39:3a:f8:97:68:64:fe: ec:13:f0:bd:cf:e0:57:f6:a7:fe:32:0a:77:9a:7b: b3:42:f2:a2:6a:d9:da:08:66:8c:1b:8f:01:a1:ec: a7:15:80:9e:bc:8d:88:62:28:ba:9b:17:5e:f7:07: c2:91:1f:36:92:5f:0d:ec:0c:1f:88:61:b1:46:a3: 06:40:17:66:67:a0:94:d5:64:18:de:33:44:59:6a: 49:a3:52:63:b5:c5:7a:0d:a0:81:92:ff:a7:cd:a9: 60:3d:b3:14:a3:2f:39:88:08:8c:3d:07:ae:d1:8c: 55:75:8c:70:f6:b2:78:fb:8f:f9:15:11:7f:b8:13: dd:01:16:14:12:93:65:4c:b3:83:1e:55:29:01:27: d7:18:04:3d:06:af:75:d3:9b:f4:c9:76:76:f4:a5: fa:96:2d:f9:d1:96:7e:bf:88:8a:36:f8:b3:ab:e3: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.209.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:cc:c1:2d:73:8c:fa:41:ab:2c:da:a6:7e:c3:9c:16:b2:d1: 02:ca:66:86:cf:72:38:46:0e:ec:b7:4f:3f:d7:bc:18:e0:7d: a5:0b:62:be:69:99:2f:e4:d5:e5:4c:65:c0:e8:27:a9:07:f4: e5:a6:fe:d5:40:74:19:68:39:86:f3:d7:eb:29:b2:e7:d2:dc: 66:7c:56:af:18:da:6b:49:54:96:0a:ee:f9:40:7b:af:a4:fb: 02:5b:a9:cd:b4:5b:b2:cb:21:47:12:52:f6:a0:1a:c2:ee:45: 28:fd:96:76:95:66:05:6c:a1:a3:06:cf:7d:e0:e4:26:de:61: d2:df:16:c4:41:b8:c0:0c:0c:9b:40:20:b2:67:ee:82:54:f5: c1:2c:f6:b5:17:e4:33:b8:ed:17:9f:46:b8:e6:20:0f:19:99: 90:6d:86:e2:70:00:ed:25:93:a2:fe:e3:68:eb:d1:b5:86:ea: 8f:f3:e4:17:59:9a:b1:1b:68:69:e1:98:32:25:ef:55:45:9a: ac:94:17:48:3d:f2:43:ee:46:fe:69:ef:d0:00:e3:e1:35:a0: 13:2f:eb:7b:d2:0a:49:a3:d3:a9:ed:45:2a:7c:bc:33:5b:9a: ef:ad:6d:6b:05:71:d6:69:23:09:42:fc:3a:7a:e2:bb:0e:d6: e1:ea:52:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOWdwEMOOlXYbifDu6IGGtksGYK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNzE3NDc0OFoX DTI1MDcyNjE3NTI0OFowMzExMC8GA1UEAxMoNTEwQkFERDM2NUFCMUE4Mjc5NUFG MjM2MTk5MTA5NEU0ODQ3OTk5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANu6Z3fvXExqukRrdINv+QcGwxVLqC6808krUIKExKXW54aTUQ0tTuVl3JPX EyfDz9BWws2sRWoI0oHFkkNgwbL06qCTb04IS0SjW5RIJI1IiCU5OviXaGT+7BPw vc/gV/an/jIKd5p7s0LyomrZ2ghmjBuPAaHspxWAnryNiGIoupsXXvcHwpEfNpJf DewMH4hhsUajBkAXZmeglNVkGN4zRFlqSaNSY7XFeg2ggZL/p82pYD2zFKMvOYgI jD0HrtGMVXWMcPayePuP+RURf7gT3QEWFBKTZUyzgx5VKQEn1xgEPQavddOb9Ml2 dvSl+pYt+dGWfr+Iijb4s6vjVJ0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFELrdNlqxqCeVryNhmRCU5IR5mcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZTRiYWE3Mi02NTRmLTRiODAtOGZjNy1mM2YyN2JjZGQzNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNGJhYTcy LTY1NGYtNGI4MC04ZmM3LWYzZjI3YmNkZDM0MC8wLzUxMEJBREQzNjVBQjFBODI3 OTVBRjIzNjE5OTEwOTRFNDg0Nzk5OUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn4dEwDQYJKoZIhvcNAQELBQADggEBAG/MwS1zjPpBqyzapn7DnBay0QLKZobP cjhGDuy3Tz/XvBjgfaULYr5pmS/k1eVMZcDoJ6kH9OWm/tVAdBloOYbz1+spsufS 3GZ8Vq8Y2mtJVJYK7vlAe6+k+wJbqc20W7LLIUcSUvagGsLuRSj9lnaVZgVsoaMG z33g5CbeYdLfFsRBuMAMDJtAILJn7oJU9cEs9rUX5DO47RefRrjmIA8ZmZBthuJw AO0lk6L+42jr0bWG6o/z5BdZmrEbaGnhmDIl71VFmqyUF0g98kPuRv5p79AA4+E1 oBMv63vSCkmj06ntRSp8vDNbmu+tbWsFcdZpIwlC/Dp64rsO1uHqUhE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:21 2024 by rpki-client on console-ams.rpki-client.org