$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer (raw, json) Hash identifier: Kt6ei5QB2cMBrLycxwcyuHQI/HgbO3MMhAJTFPzePWc= Subject key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 17700329D4E1BE788B6B9E5C762F3936954A9FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft caRepository: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 19:59:38 +0000 Certificate not after: Wed 03 Dec 2025 20:04:38 +0000 Subordinate resources: IP: 103.121.96.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:70:03:29:d4:e1:be:78:8b:6b:9e:5c:76:2f:39:36:95:4a:9f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 4 19:59:38 2024 GMT Not After : Dec 3 20:04:38 2025 GMT Subject: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:5b:88:3c:34:02:56:b5:ac:84:ad:d4:b0: 8f:3f:4a:88:ae:92:ff:f8:2f:5e:ef:eb:26:30:a3: dc:25:0d:97:5a:a1:0c:2a:73:82:ec:f5:91:ae:c0: ad:40:17:9e:9e:65:e6:10:6c:fb:08:7e:10:2c:ac: c5:60:4e:5b:1e:e9:0c:7e:b4:f5:1b:28:53:23:c9: cc:b9:06:ac:8d:6d:26:e5:71:21:05:75:00:8c:44: 6b:71:57:21:81:9e:98:75:8b:df:41:9d:67:6d:f2: 12:07:07:78:b3:8f:61:2a:2f:7f:73:47:e0:62:86: f4:57:4c:9d:bd:4f:7f:3f:ed:df:7f:1e:8a:f0:8e: b2:d8:ad:2d:97:ff:87:bf:88:13:bb:a9:76:26:53: 82:85:ee:64:4b:68:65:c8:f1:d5:76:6b:56:ff:f7: b2:5b:cd:84:b2:d8:4e:b7:20:cd:80:f3:e6:fd:bd: 97:e4:02:a3:f8:86:41:72:1a:5a:cd:ff:b2:40:e3: ad:4f:b0:91:94:58:dc:78:e7:dd:5d:dc:21:7e:5b: 91:8c:9a:ff:f7:9b:f6:4a:4d:e2:7a:c2:ed:8e:19: 5d:0e:f6:f1:25:88:56:ed:a7:7c:43:75:81:e5:f9: ae:dc:bb:3b:ac:e1:d4:63:33:53:ef:f6:d9:88:47: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.96.0/22 Signature Algorithm: sha256WithRSAEncryption 45:a6:42:a5:85:71:48:ef:34:d2:89:99:09:a1:bc:8f:74:da: 0d:ce:be:14:55:12:c8:da:8c:36:de:5e:7f:13:b8:01:cd:07: e4:76:f7:d5:7f:4b:47:68:d2:29:93:51:25:ca:b8:76:1d:32: 71:b1:5a:56:72:d6:aa:f3:f2:ab:b1:39:8b:1b:53:44:8d:af: 2a:1c:86:33:af:94:79:fa:50:b3:99:80:67:14:0a:79:15:53: 78:bb:0e:e4:95:86:7f:9d:1d:67:81:b5:9b:5d:47:b8:6f:dd: 87:81:1d:f7:ac:67:3c:1f:d1:20:75:44:6a:91:f2:0a:97:db: d5:ef:fd:d8:6e:f9:e5:85:7b:9d:7e:90:43:81:45:78:5f:3e: f6:33:b5:3b:f9:f4:b4:e4:b9:a1:1d:11:32:f6:12:94:cd:2c: de:2a:ce:02:ef:94:25:d5:2a:60:d3:0e:ba:48:8d:ee:6a:7c: 0d:7c:91:14:64:e1:a9:0a:a0:8c:1b:a6:de:3e:e7:0d:2b:b7: 50:5f:f7:8a:d9:51:20:a1:e7:22:b6:38:5e:ad:01:11:e5:41: 01:62:7f:c1:6b:90:88:d4:9b:c3:f0:3a:96:b5:d0:44:53:89: c4:ee:e7:8b:c7:e5:76:e1:de:10:38:da:e8:06:66:d4:cc:c8: 1d:c5:a1:f6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUF3ADKdThvniLa55cdi85NpVKn70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDE5NTkzOFoX DTI1MTIwMzIwMDQzOFowMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFB RTI0Mzc0Q0MyRDhGRTM0RkExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN9W4g8NAJWtayErdSwjz9KiK6S//gvXu/rJjCj3CUNl1qhDCpzguz1ka7A rUAXnp5l5hBs+wh+ECysxWBOWx7pDH609RsoUyPJzLkGrI1tJuVxIQV1AIxEa3FX IYGemHWL30GdZ23yEgcHeLOPYSovf3NH4GKG9FdMnb1Pfz/t338eivCOstitLZf/ h7+IE7updiZTgoXuZEtoZcjx1XZrVv/3slvNhLLYTrcgzYDz5v29l+QCo/iGQXIa Ws3/skDjrU+wkZRY3Hjn3V3cIX5bkYya//eb9kpN4nrC7Y4ZXQ728SWIVu2nfEN1 geX5rty7O6zh1GMzU+/22YhHkbsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4SWB89IKhwiNquJDdMwtj+NPoSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNzc0NjFk LWZlNGYtNDk2MS05MmU1LTk2NTVhZjI1NzU0YS8wL0FFMTI1ODFGM0QyMEE4NzA4 OERBQUUyNDM3NENDMkQ4RkUzNEZBMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneWAwDQYJKoZIhvcNAQELBQADggEBAEWmQqWFcUjvNNKJmQmhvI902g3OvhRV EsjajDbeXn8TuAHNB+R299V/S0do0imTUSXKuHYdMnGxWlZy1qrz8quxOYsbU0SN ryochjOvlHn6ULOZgGcUCnkVU3i7DuSVhn+dHWeBtZtdR7hv3YeBHfesZzwf0SB1 RGqR8gqX29Xv/dhu+eWFe51+kEOBRXhfPvYztTv59LTkuaEdETL2EpTNLN4qzgLv lCXVKmDTDrpIje5qfA18kRRk4akKoIwbpt4+5w0rt1Bf94rZUSCh5yK2OF6tARHl QQFif8FrkIjUm8PwOpa10ERTicTu54vH5Xbh3hA42ugGZtTMyB3FofY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:06 2025 by rpki-client