$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer (raw, json) Hash identifier: +CBwr3p571pVaAJ94cL1yZPzrxK9XKdv3UVGfP9Nbx4= Subject key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12E25AC6E81853AF8D4DBD2C67DDBF43D102747F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft caRepository: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Sep 2024 06:12:06 +0000 Certificate not after: Fri 12 Sep 2025 06:17:06 +0000 Subordinate resources: IP: 103.103.136.0/22 IP: 2001:df3:b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e2:5a:c6:e8:18:53:af:8d:4d:bd:2c:67:dd:bf:43:d1:02:74:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 06:12:06 2024 GMT Not After : Sep 12 06:17:06 2025 GMT Subject: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:75:a4:89:5b:eb:04:bc:b7:76:73:ee:9c: 8b:1d:a6:15:16:80:a6:73:ce:73:01:eb:97:b5:a9: 4a:a1:be:c8:23:86:0d:f0:a1:8b:a2:15:f3:c0:a0: 81:b0:4e:2c:42:e9:58:d4:97:52:c5:39:38:95:04: a1:9b:07:e8:87:18:d5:21:c3:1f:1f:09:76:e4:ae: e0:2c:8e:ac:2f:5c:d6:c5:8b:fb:07:90:75:df:04: 34:ad:3a:4d:80:15:a2:68:3c:ce:7c:2e:06:66:2b: 89:d4:7b:f0:3d:95:e1:e5:75:8e:67:f4:37:87:22: 86:86:e8:79:f2:dd:e3:56:fe:ea:cb:32:d5:a5:50: 49:6f:8b:f4:9a:b3:68:6c:6a:f7:3b:7a:6a:a5:90: b4:43:b0:2b:d8:9e:72:a4:f0:c6:58:f4:c0:02:62: 93:85:42:99:8a:36:c3:86:62:0c:70:ef:63:19:08: 4b:9e:9c:c2:79:81:6b:f1:31:c1:63:09:95:39:24: 14:da:1e:a5:bc:64:5d:2d:b8:28:93:91:1c:78:22: d2:99:e2:95:ce:e2:80:12:80:6f:da:7e:f5:84:bc: 0e:02:b7:05:e9:fb:86:f4:16:eb:28:43:02:0f:52: 7a:1f:30:92:16:ce:9d:c1:48:26:56:4c:da:aa:51: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.136.0/22 IPv6: 2001:df3:b00::/48 Signature Algorithm: sha256WithRSAEncryption 2e:a0:95:44:10:51:63:c8:10:64:65:f5:68:36:aa:c9:28:f4: 7c:87:79:7e:b2:9a:8d:48:52:ed:38:e3:0c:3a:61:8a:72:7e: 97:04:4f:80:55:9e:7c:53:5a:cc:21:4a:9f:24:33:09:a3:6c: bc:f2:d0:f1:ee:b8:6d:73:cc:db:15:8d:51:79:48:f3:78:33: 56:fe:43:30:38:3c:38:fc:e7:5f:27:17:0c:80:99:7e:86:32: d3:aa:4d:5d:be:93:58:48:fd:f3:b2:18:70:0a:48:cc:79:cb: 2d:43:ff:05:de:2a:fa:d9:24:6a:2d:c4:5f:a3:9d:83:ec:61: e6:50:7e:56:4b:b0:2b:57:44:d5:8f:97:02:1c:5c:13:84:74: 46:57:63:84:6d:71:78:14:75:3b:d6:e7:7a:bd:78:70:6a:22: d3:16:e8:76:91:9c:90:35:55:cf:c2:1f:fe:fd:58:ca:c4:f9: ae:2f:02:34:bd:be:09:12:46:3c:4f:9e:15:45:b2:57:43:2a: e0:2b:d8:9e:ae:44:e0:0c:0a:b4:bb:27:28:c1:20:7e:e8:de: bc:fb:1a:a7:ec:7a:f0:58:2a:eb:12:00:7d:c6:28:a1:29:36: 32:6e:34:2d:41:85:97:f2:37:b2:97:f1:f7:d8:71:0b:c2:02: 5c:9e:f6:da -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEuJaxugYU6+NTb0sZ92/Q9ECdH8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMzA2MTIwNloX DTI1MDkxMjA2MTcwNlowMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNE OTVFOTk5ODFDMkJBODRCOUE2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6WdaSJW+sEvLd2c+6cix2mFRaApnPOcwHrl7WpSqG+yCOGDfChi6IV88Cg gbBOLELpWNSXUsU5OJUEoZsH6IcY1SHDHx8JduSu4CyOrC9c1sWL+weQdd8ENK06 TYAVomg8znwuBmYridR78D2V4eV1jmf0N4cihoboefLd41b+6ssy1aVQSW+L9Jqz aGxq9zt6aqWQtEOwK9iecqTwxlj0wAJik4VCmYo2w4ZiDHDvYxkIS56cwnmBa/Ex wWMJlTkkFNoepbxkXS24KJORHHgi0pnilc7igBKAb9p+9YS8DgK3Ben7hvQW6yhD Ag9Seh8wkhbOncFIJlZM2qpRZ48CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKNJ0HyrE78GexPZXpmYHCuoS5prMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhZGZjYjQ0 LWFlN2EtNDQyMy1hZTdkLTA4NjQ4YmYxZGViMS8wL0EzNDlEMDdDQUIxM0JGMDY3 QjEzRDk1RTk5OTgxQzJCQTg0QjlBNkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnZ4gwDwQCAAIwCQMHACABDfMLADANBgkqhkiG9w0BAQsFAAOCAQEALqCVRBBR Y8gQZGX1aDaqySj0fId5frKajUhS7TjjDDphinJ+lwRPgFWefFNazCFKnyQzCaNs vPLQ8e64bXPM2xWNUXlI83gzVv5DMDg8OPznXycXDICZfoYy06pNXb6TWEj987IY cApIzHnLLUP/Bd4q+tkkai3EX6Odg+xh5lB+VkuwK1dE1Y+XAhxcE4R0RldjhG1x eBR1O9bner14cGoi0xbodpGckDVVz8If/v1YysT5ri8CNL2+CRJGPE+eFUWyV0Mq 4CvYnq5E4AwKtLsnKMEgfujevPsap+x68Fgq6xIAfcYooSk2Mm40LUGFl/I3spfx 99hxC8ICXJ722g== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:45 2024 by rpki-client on console-ams.rpki-client.org