$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer (raw, json) Hash identifier: U9V4Relr1bFLGioO64jCa4sh5LuxUDMj5o66eOxIsWM= Subject key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 260F53C0BC5A34C888D1F9EBA7CDB80A88B7D5C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft caRepository: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 Aug 2024 03:43:36 +0000 Certificate not after: Thu 14 Aug 2025 03:48:36 +0000 Subordinate resources: IP: 103.227.252.0/22 IP: 2001:df4:3d00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0f:53:c0:bc:5a:34:c8:88:d1:f9:eb:a7:cd:b8:0a:88:b7:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 03:43:36 2024 GMT Not After : Aug 14 03:48:36 2025 GMT Subject: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:5c:b3:bd:61:85:7f:29:b4:bf:00:ba:cb: d1:82:c9:47:22:e8:c4:60:10:9d:96:05:97:0c:75: 60:ad:ff:c8:f1:35:18:1d:ef:dd:dc:d2:83:9f:f3: e6:15:96:dd:dd:8f:46:06:ba:67:c1:dd:41:fe:3c: 88:3b:f0:a2:43:e6:23:ca:46:f3:8a:6a:e2:70:e6: 15:51:32:fe:70:15:e3:d4:98:c0:e3:9d:79:c8:a5: 71:c9:f0:f5:8b:59:2a:79:d8:29:df:57:58:37:77: eb:25:85:77:a4:24:13:55:f4:10:fc:cd:eb:c7:88: 91:55:49:e9:d9:1e:21:f9:48:23:d7:57:55:d7:ac: c2:27:b1:a8:29:f9:c7:4e:d6:0c:59:d9:ab:18:e6: 7a:49:27:47:43:8a:90:d2:8d:d0:05:b6:2d:58:65: b9:d3:5e:52:fc:d4:d5:a7:21:6a:05:e1:e1:7e:4c: 54:89:69:ca:71:8c:71:ad:c8:17:15:2a:39:83:a9: 28:74:9b:a9:63:1a:78:f3:4f:3b:a0:81:e7:3a:00: 44:67:b9:38:5f:b9:91:48:b0:18:48:59:06:c5:4f: 5b:33:db:6d:a0:9e:da:2d:ae:57:a6:39:70:a1:14: 9e:11:70:60:73:da:02:21:7c:65:33:93:98:46:6c: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.252.0/22 IPv6: 2001:df4:3d00::/48 Signature Algorithm: sha256WithRSAEncryption 28:b2:0f:ee:d1:e6:f4:fb:1c:50:6e:41:6b:4e:6d:da:ee:bb: c2:4b:6f:2b:54:2c:bb:ab:0e:ad:76:30:d6:c4:af:86:ed:7d: cc:4d:ff:56:3a:eb:2c:57:60:ad:93:1c:b7:da:15:a6:24:aa: 85:48:fe:95:8a:80:13:79:cd:86:e7:c7:0b:e0:34:6f:af:68: 19:05:48:e0:53:6a:11:c6:71:8e:f0:1e:40:3d:e5:9d:ec:fa: db:b8:55:aa:3e:5f:c2:e4:da:d1:1b:d7:bd:eb:19:1f:9d:4b: 23:95:db:22:f8:d2:b6:b2:5e:30:69:90:a4:64:b1:bf:c2:eb: ad:60:95:a5:51:57:25:f9:70:fe:bc:74:31:b2:96:c7:b0:01: cb:30:ff:47:c5:51:66:90:b6:42:24:ec:12:2c:e6:13:55:a5: 33:d8:1b:b7:06:aa:47:c9:41:87:68:bb:f8:22:7e:c2:b0:e1: 0b:46:9e:0e:79:43:11:da:50:54:7c:37:95:e9:6e:b1:f8:d5: 17:56:26:5e:a7:41:de:c0:83:3b:5c:cb:24:2c:ff:7a:30:2c: d0:80:ba:73:8b:11:b3:6f:5e:67:1c:78:07:fb:e2:55:e4:01: 5b:e8:e0:d3:ab:97:ac:e6:36:43:f2:27:3d:f3:92:18:d5:d9: 76:1e:03:3c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJg9TwLxaNMiI0fnrp824Coi31cQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxNTAzNDMzNloX DTI1MDgxNDAzNDgzNlowMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZF MUI4MkI0RTc5MTcwQUU4NzY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdjXLO9YYV/KbS/ALrL0YLJRyLoxGAQnZYFlwx1YK3/yPE1GB3v3dzSg5/z 5hWW3d2PRga6Z8HdQf48iDvwokPmI8pG84pq4nDmFVEy/nAV49SYwOOdecilccnw 9YtZKnnYKd9XWDd36yWFd6QkE1X0EPzN68eIkVVJ6dkeIflII9dXVdeswiexqCn5 x07WDFnZqxjmekknR0OKkNKN0AW2LVhludNeUvzU1achagXh4X5MVIlpynGMca3I FxUqOYOpKHSbqWMaePNPO6CB5zoARGe5OF+5kUiwGEhZBsVPWzPbbaCe2i2uV6Y5 cKEUnhFwYHPaAiF8ZTOTmEZsjbMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnrz4FY6rscFu/huCtOeRcK6HaDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZmZmYzJk LWNjYTctNDhlNi05Y2Q2LTU2NWMxMWM0NTQ0MC8wL0E5RUJDRjgxNThFQUJCMUMx NkVGRTFCODJCNEU3OTE3MEFFODc2ODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn4/wwDwQCAAIwCQMHACABDfQ9ADANBgkqhkiG9w0BAQsFAAOCAQEAKLIP7tHm 9PscUG5Ba05t2u67wktvK1Qsu6sOrXYw1sSvhu19zE3/VjrrLFdgrZMct9oVpiSq hUj+lYqAE3nNhufHC+A0b69oGQVI4FNqEcZxjvAeQD3lnez627hVqj5fwuTa0RvX vesZH51LI5XbIvjStrJeMGmQpGSxv8LrrWCVpVFXJflw/rx0MbKWx7AByzD/R8VR ZpC2QiTsEizmE1WlM9gbtwaqR8lBh2i7+CJ+wrDhC0aeDnlDEdpQVHw3lelusfjV F1YmXqdB3sCDO1zLJCz/ejAs0IC6c4sRs29eZxx4B/viVeQBW+jg06uXrOY2Q/In PfOSGNXZdh4DPA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:26 2024 by rpki-client on console-ams.rpki-client.org