$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer (raw, json) Hash identifier: p1ZFmwgjRDOmXLfJWND1BYHY8sqAZFcpVerCk+Skxq4= Subject key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D1E54D8877E9BE97CA3600E5D9DE9201F3D09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft caRepository: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Jun 2024 15:10:20 +0000 Certificate not after: Thu 19 Jun 2025 15:15:20 +0000 Subordinate resources: IP: 103.159.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1e:54:d8:87:7e:9b:e9:7c:a3:60:0e:5d:9d:e9:20:1f:3d:09:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 20 15:10:20 2024 GMT Not After : Jun 19 15:15:20 2025 GMT Subject: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:2a:f0:c0:e4:9a:4d:23:d7:78:c7:7f:51: 43:47:c5:7b:01:ee:da:0b:2f:0d:43:bd:24:da:0b: 9b:50:61:1f:2b:3c:be:5b:24:d4:7c:5c:2e:c0:21: de:41:6d:48:e5:7f:f2:29:51:59:71:aa:1c:3c:90: 5d:c0:84:bd:08:4c:62:c0:a6:e4:c9:66:ac:ab:3d: 9a:4a:f8:89:26:1e:70:06:43:47:a5:69:60:02:11: 6b:a0:9d:38:f6:0e:4f:53:bd:6a:51:55:21:e5:fb: f3:7c:ec:e3:21:d6:07:a0:76:f2:fb:59:ca:31:35: 28:34:af:61:d0:c3:d4:92:4f:91:e1:59:c8:71:b4: 9e:19:17:8f:3a:e3:95:80:70:18:64:72:31:4e:bd: 8d:70:57:e7:b9:ac:25:c7:f2:46:e2:9a:c3:6c:22: a0:58:5b:44:5f:d0:a2:0d:b6:f6:44:a9:e2:7f:16: a9:79:b1:a3:56:6f:b5:97:90:1a:9f:0c:f9:1a:43: 13:0b:5e:99:0c:87:f1:93:b9:3e:da:c4:96:38:91: 17:a7:03:dc:d0:4c:cb:1b:dd:0d:bd:eb:20:8b:0f: 24:fe:9e:e7:8f:dc:ed:70:86:de:71:10:9b:48:fc: f2:da:29:be:dc:5e:f4:51:16:79:24:74:0a:a3:7f: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.112.0/23 Signature Algorithm: sha256WithRSAEncryption 45:0b:a7:09:f5:1c:8a:f7:2e:52:d6:cb:a0:ad:d8:25:65:1b: 65:c2:19:26:25:12:2f:8f:72:34:01:7b:7c:d0:b9:8a:21:8f: b9:07:e2:f4:04:f0:eb:e6:51:bf:25:3a:54:79:7b:f3:8d:c9: 1f:f9:f7:98:e4:86:8d:6d:f2:42:17:76:a1:f6:e4:15:df:57: 48:c4:4d:19:ee:7e:af:e7:c7:38:e5:4d:f2:d6:15:3c:f9:bc: 0a:37:e3:8a:bc:53:69:1a:d0:8c:f0:be:aa:d5:16:1f:e8:c1: 80:b4:ef:1b:59:70:09:4c:74:bc:30:2c:58:50:13:25:69:47: 47:a7:db:a9:a4:b8:6a:11:29:cf:cf:a1:ea:3c:ad:c7:73:24: 6f:d3:4a:8d:e3:ce:82:35:01:60:58:8c:eb:03:7e:61:7e:da: 0f:25:37:e8:d7:68:5b:ae:2b:d6:ee:bc:86:67:6b:51:61:67: 40:2f:af:06:63:46:05:ec:45:9c:58:90:ae:91:81:97:62:ab: b9:b4:2b:4f:ff:a1:9f:15:28:14:75:32:9a:ac:ce:bd:3a:53: f8:0a:7d:3b:30:46:40:7b:c2:cd:ce:d0:04:f9:aa:3f:ea:09: 5d:51:1e:ad:ce:15:f4:c7:46:8d:21:05:32:7f:f5:c8:e7:a4: 66:6d:fd:0d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHR5U2Id+m+l8o2AOXZ3pIB89CeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyMDE1MTAyMFoX DTI1MDYxOTE1MTUyMFowMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBB RjlERDU4NDdBOThCQ0UyNkM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPoXKvDA5JpNI9d4x39RQ0fFewHu2gsvDUO9JNoLm1BhHys8vlsk1HxcLsAh 3kFtSOV/8ilRWXGqHDyQXcCEvQhMYsCm5MlmrKs9mkr4iSYecAZDR6VpYAIRa6Cd OPYOT1O9alFVIeX783zs4yHWB6B28vtZyjE1KDSvYdDD1JJPkeFZyHG0nhkXjzrj lYBwGGRyMU69jXBX57msJcfyRuKaw2wioFhbRF/Qog229kSp4n8WqXmxo1ZvtZeQ Gp8M+RpDEwtemQyH8ZO5PtrEljiRF6cD3NBMyxvdDb3rIIsPJP6e54/c7XCG3nEQ m0j88topvtxe9FEWeSR0CqN/LNUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKAOniHukyfwWTCvndWEepi84mxmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4 LWU3MTUtNGI3OS1hZjMyLTJlNTE1NDFhMzRmZi8wL0EwMEU5RTIxRUU5MzI3RjA1 OTMwQUY5REQ1ODQ3QTk4QkNFMjZDNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn3AwDQYJKoZIhvcNAQELBQADggEBAEULpwn1HIr3LlLWy6Ct2CVlG2XCGSYl Ei+PcjQBe3zQuYohj7kH4vQE8OvmUb8lOlR5e/ONyR/595jkho1t8kIXdqH25BXf V0jETRnufq/nxzjlTfLWFTz5vAo344q8U2ka0IzwvqrVFh/owYC07xtZcAlMdLww LFhQEyVpR0en26mkuGoRKc/Poeo8rcdzJG/TSo3jzoI1AWBYjOsDfmF+2g8lN+jX aFuuK9buvIZna1FhZ0AvrwZjRgXsRZxYkK6RgZdiq7m0K0//oZ8VKBR1Mpqszr06 U/gKfTswRkB7ws3O0AT5qj/qCV1RHq3OFfTHRo0hBTJ/9cjnpGZt/Q0= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:52 2024 by rpki-client on console-fra.rpki-client.org