$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer (raw, json) Hash identifier: p1WKFboD0T7Whl31l1lZ0nvx7AHaW/j7P4OP3uPiVhc= Subject key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A5FD3E19D8FD1AD43FDAE308FCDEB1E3F983FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft caRepository: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 May 2024 12:08:38 +0000 Certificate not after: Mon 26 May 2025 12:13:38 +0000 Subordinate resources: IP: 103.191.63.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:d3:e1:9d:8f:d1:ad:43:fd:ae:30:8f:cd:eb:1e:3f:98:3f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 27 12:08:38 2024 GMT Not After : May 26 12:13:38 2025 GMT Subject: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:81:27:00:98:04:8e:d9:d3:78:1a:54:fd:5f: 43:2a:aa:02:15:fc:77:67:fc:4a:ff:46:f1:f5:ea: a9:ad:29:aa:e1:ec:8e:cf:cf:f9:cb:c0:1a:62:60: e7:75:16:75:20:bd:21:f9:9d:a1:86:5b:6a:5d:d3: 9c:a7:d3:c3:bf:00:97:a8:35:df:37:59:ad:57:74: cb:f1:e8:3d:fb:72:d7:4c:ab:43:9e:33:3d:eb:49: 92:73:75:5d:6f:64:b4:08:17:75:92:34:04:63:ca: c6:38:e6:ee:71:8b:71:18:6f:e8:b7:7f:8c:31:2e: a4:a5:3c:4b:7e:c1:2b:05:98:02:5f:74:d4:21:6d: 6d:8e:27:99:e0:7d:cd:76:e0:b0:08:57:91:08:d5: 36:1b:a1:f8:c0:10:28:35:25:8e:2e:53:0a:92:11: f1:6c:11:34:89:e5:3c:f5:bb:1c:cf:3a:6d:e6:df: ec:8b:7a:5c:24:36:77:20:f5:ae:9a:40:f6:49:7b: 63:1f:2d:4d:fc:79:9e:0b:c1:11:06:c1:1c:19:e3: 44:06:76:c7:f7:5d:e6:ec:6f:13:b6:8c:90:fa:b7: 33:95:9d:0e:96:44:b4:a0:27:db:2a:85:05:55:93: f1:db:76:ee:3d:d7:ef:be:9d:1d:99:b8:db:fc:46: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:2d:d3:c4:e0:1d:af:2f:12:8b:75:f1:7c:c8:69:a1:9b:ef: e0:b1:cc:54:2c:24:09:30:74:90:bd:37:96:53:ac:4b:01:d5: 4e:5b:98:6f:f9:f1:25:23:6b:ad:b3:fd:a9:89:78:96:b6:96: bf:f4:77:69:32:58:3a:a9:64:44:54:81:a4:a8:10:2e:04:23: 42:11:73:4c:8d:44:03:c8:b2:55:52:e1:04:f5:34:d8:11:d2: 6a:1e:32:5a:b7:57:f7:1d:36:58:96:e5:40:50:1c:30:7c:a0: ea:5b:cb:1f:91:4a:45:38:da:8d:1a:ce:37:07:09:b1:a7:2b: 21:3a:6d:6b:c1:33:14:54:c9:2c:df:c8:b3:de:ab:db:1b:9b: aa:87:fc:01:ee:70:1d:d5:26:8a:65:a5:ea:a4:56:1d:40:6f: 0f:31:a8:c6:ef:9f:7b:55:52:16:d3:14:fc:24:c2:bd:cb:a0: 1b:14:fe:45:3d:2e:b1:dd:b1:c9:b9:ea:7e:4f:4f:f9:34:b2: ea:8b:1a:b5:d9:2d:72:2b:82:65:cd:af:de:61:d2:0e:27:19: 46:d0:ab:ca:68:5d:e9:85:1b:c6:0d:2c:ec:3b:55:75:90:16: b6:d0:7b:6a:8a:48:67:5e:95:8c:78:97:1e:be:1c:43:6a:fb: de:b8:0d:31 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKl/T4Z2P0a1D/a4wj83rHj+YP70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyNzEyMDgzOFoX DTI1MDUyNjEyMTMzOFowMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJC MEFGMUE1RUE3RDVFRTA2NEIzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSBJwCYBI7Z03gaVP1fQyqqAhX8d2f8Sv9G8fXqqa0pquHsjs/P+cvAGmJg 53UWdSC9IfmdoYZbal3TnKfTw78Al6g13zdZrVd0y/HoPfty10yrQ54zPetJknN1 XW9ktAgXdZI0BGPKxjjm7nGLcRhv6Ld/jDEupKU8S37BKwWYAl901CFtbY4nmeB9 zXbgsAhXkQjVNhuh+MAQKDUlji5TCpIR8WwRNInlPPW7HM86bebf7It6XCQ2dyD1 rppA9kl7Yx8tTfx5ngvBEQbBHBnjRAZ2x/dd5uxvE7aMkPq3M5WdDpZEtKAn2yqF BVWT8dt27j3X776dHZm42/xGtTMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK0GB+huo/gzZ0uwrxpep9XuBks5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzMzI3ZmZk LTFlMmUtNGM1Mi05NzE3LTY1Zjg1ZTYzNTllNS8wL0FEMDYwN0U4NkVBM0Y4MzM2 NzRCQjBBRjFBNUVBN0Q1RUUwNjRCMzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvz8wDQYJKoZIhvcNAQELBQADggEBAGwt08TgHa8vEot18XzIaaGb7+CxzFQs JAkwdJC9N5ZTrEsB1U5bmG/58SUja62z/amJeJa2lr/0d2kyWDqpZERUgaSoEC4E I0IRc0yNRAPIslVS4QT1NNgR0moeMlq3V/cdNliW5UBQHDB8oOpbyx+RSkU42o0a zjcHCbGnKyE6bWvBMxRUySzfyLPeq9sbm6qH/AHucB3VJoplpeqkVh1Abw8xqMbv n3tVUhbTFPwkwr3LoBsU/kU9LrHdscm56n5PT/k0suqLGrXZLXIrgmXNr95h0g4n GUbQq8poXemFG8YNLOw7VXWQFrbQe2qKSGdelYx4lx6+HENq+964DTE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:45 2024 by rpki-client on console-ams.rpki-client.org