$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer (raw, json) Hash identifier: /pjPOc7tMoyfr/DSywLIjDmx/Di6V8FkaTEhrT6pdUY= Subject key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13DC8F88568F80B64AEA05ADFCDFE04262EBEDB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft caRepository: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 17 Aug 2024 20:02:49 +0000 Certificate not after: Sat 16 Aug 2025 20:07:49 +0000 Subordinate resources: IP: 103.165.155.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:dc:8f:88:56:8f:80:b6:4a:ea:05:ad:fc:df:e0:42:62:eb:ed:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 17 20:02:49 2024 GMT Not After : Aug 16 20:07:49 2025 GMT Subject: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:c0:53:e4:d4:30:a9:e9:af:66:3a:13:50: d8:3d:e0:5f:3d:cf:c3:e6:92:37:1a:bc:30:4b:1d: 59:03:3b:20:75:b1:3c:15:8f:24:4b:ce:5b:eb:98: f5:86:fd:e3:45:51:db:98:7f:72:86:4a:a9:76:3b: 45:95:1e:32:d5:fb:0d:b4:99:42:79:af:39:a2:ac: 2a:1a:c0:0c:4f:84:51:1a:28:12:7f:00:6d:5a:b1: e1:63:10:82:25:da:d8:ec:b7:ea:a8:02:5c:63:84: c2:b3:20:7d:c5:62:60:82:92:76:a5:59:5e:32:8e: 36:7a:66:b3:39:fc:4e:64:6b:bf:85:04:88:1d:82: 75:23:ff:8b:3a:04:0e:14:1e:42:e4:b2:8b:bb:51: cd:9c:8b:66:b7:19:71:f3:ea:d7:c4:67:16:3a:3b: 23:25:3f:d0:b9:ba:bf:6e:66:86:7c:42:c2:a1:a3: 1f:43:d6:f7:9b:7b:dd:81:ec:b1:84:09:2d:8a:9f: cc:77:f5:61:0d:49:a7:25:05:35:46:fa:67:91:0e: da:d4:2f:f4:d9:40:ca:c5:c4:34:38:07:f9:0b:fa: 1f:d8:b9:a9:be:e2:28:93:76:5a:38:c2:3b:5c:cb: 67:aa:27:1d:6a:78:60:12:e9:40:f7:af:0d:68:41: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.155.0/24 Signature Algorithm: sha256WithRSAEncryption 81:7d:c0:06:78:8c:e4:e3:d6:6d:0b:c7:03:a9:a7:36:1c:ec: 85:4b:ad:3d:bb:9b:42:bf:11:ad:4c:07:4a:f3:ac:f7:48:12: a9:12:b0:59:39:e7:1f:13:92:c4:2b:79:2d:1e:d3:0a:df:82: 6a:4d:4c:ba:30:dd:31:ad:a2:97:be:c4:4a:45:21:0d:c0:04: 4c:98:bd:6a:b4:0d:8f:83:6c:95:9c:74:4c:72:1b:c5:14:ca: 6c:8f:b1:e2:a3:98:64:c6:57:e9:e1:f6:3c:24:f5:f8:1d:f3: 79:85:a7:a0:64:3f:69:14:b7:51:72:2f:d1:c1:e8:e7:05:eb: c4:54:b7:25:10:ca:98:fa:88:85:ce:65:f1:da:27:b0:f8:07: fa:ce:30:2c:2c:59:f9:11:dc:61:4f:78:8c:6a:23:66:8e:b5: d4:7c:b5:92:29:cb:31:d5:05:63:fc:2c:93:5a:b1:18:0d:9f: a6:1e:9c:1b:91:68:22:5a:8e:39:49:83:8e:8b:45:b8:9c:8b: 0d:57:22:a7:cd:81:a3:6c:b0:00:aa:0f:06:8d:51:5d:29:42: 6d:78:a0:d4:12:c8:13:a2:a5:9a:9a:71:43:db:94:5d:ba:67: 9a:19:8d:03:f4:8a:97:d6:f2:05:8a:09:a4:e9:83:8d:72:33: d2:c8:05:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUE9yPiFaPgLZK6gWt/N/gQmLr7bkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxNzIwMDI0OVoX DTI1MDgxNjIwMDc0OVowMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2 QUY2MDk2RDZEQjZGNTFFRkUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTVwFPk1DCp6a9mOhNQ2D3gXz3Pw+aSNxq8MEsdWQM7IHWxPBWPJEvOW+uY 9Yb940VR25h/coZKqXY7RZUeMtX7DbSZQnmvOaKsKhrADE+EURooEn8AbVqx4WMQ giXa2Oy36qgCXGOEwrMgfcViYIKSdqVZXjKONnpmszn8TmRrv4UEiB2CdSP/izoE DhQeQuSyi7tRzZyLZrcZcfPq18RnFjo7IyU/0Lm6v25mhnxCwqGjH0PW95t73YHs sYQJLYqfzHf1YQ1JpyUFNUb6Z5EO2tQv9NlAysXENDgH+Qv6H9i5qb7iKJN2WjjC O1zLZ6onHWp4YBLpQPevDWhBVa0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJrXEn7EMKTJth9q9gltbbb1Hv40MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MGZlMmFj LTI5ZjYtNDNhMi1iZTY0LTA2YTNhZTlkOGQyMC8wLzlBRDcxMjdFQzQzMEE0QzlC NjFGNkFGNjA5NkQ2REI2RjUxRUZFMzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpZswDQYJKoZIhvcNAQELBQADggEBAIF9wAZ4jOTj1m0LxwOppzYc7IVLrT27 m0K/Ea1MB0rzrPdIEqkSsFk55x8TksQreS0e0wrfgmpNTLow3TGtope+xEpFIQ3A BEyYvWq0DY+DbJWcdExyG8UUymyPseKjmGTGV+nh9jwk9fgd83mFp6BkP2kUt1Fy L9HB6OcF68RUtyUQypj6iIXOZfHaJ7D4B/rOMCwsWfkR3GFPeIxqI2aOtdR8tZIp yzHVBWP8LJNasRgNn6YenBuRaCJajjlJg46LRbiciw1XIqfNgaNssACqDwaNUV0p Qm14oNQSyBOipZqacUPblF26Z5oZjQP0ipfW8gWKCaTpg41yM9LIBdo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:45 2024 by rpki-client on console-ams.rpki-client.org