$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer (raw, json) Hash identifier: XR9tsBvQkxKNkAx2GOb3zARRZQ//5owh3KQZ62tsxeE= Subject key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43B73C1B349EED19CDE1E3BEFA5E091C25EE8760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft caRepository: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Jan 2024 12:37:13 +0000 Certificate not after: Wed 01 Jan 2025 12:42:13 +0000 Subordinate resources: IP: 103.121.96.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b7:3c:1b:34:9e:ed:19:cd:e1:e3:be:fa:5e:09:1c:25:ee:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 3 12:37:13 2024 GMT Not After : Jan 1 12:42:13 2025 GMT Subject: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:5b:88:3c:34:02:56:b5:ac:84:ad:d4:b0: 8f:3f:4a:88:ae:92:ff:f8:2f:5e:ef:eb:26:30:a3: dc:25:0d:97:5a:a1:0c:2a:73:82:ec:f5:91:ae:c0: ad:40:17:9e:9e:65:e6:10:6c:fb:08:7e:10:2c:ac: c5:60:4e:5b:1e:e9:0c:7e:b4:f5:1b:28:53:23:c9: cc:b9:06:ac:8d:6d:26:e5:71:21:05:75:00:8c:44: 6b:71:57:21:81:9e:98:75:8b:df:41:9d:67:6d:f2: 12:07:07:78:b3:8f:61:2a:2f:7f:73:47:e0:62:86: f4:57:4c:9d:bd:4f:7f:3f:ed:df:7f:1e:8a:f0:8e: b2:d8:ad:2d:97:ff:87:bf:88:13:bb:a9:76:26:53: 82:85:ee:64:4b:68:65:c8:f1:d5:76:6b:56:ff:f7: b2:5b:cd:84:b2:d8:4e:b7:20:cd:80:f3:e6:fd:bd: 97:e4:02:a3:f8:86:41:72:1a:5a:cd:ff:b2:40:e3: ad:4f:b0:91:94:58:dc:78:e7:dd:5d:dc:21:7e:5b: 91:8c:9a:ff:f7:9b:f6:4a:4d:e2:7a:c2:ed:8e:19: 5d:0e:f6:f1:25:88:56:ed:a7:7c:43:75:81:e5:f9: ae:dc:bb:3b:ac:e1:d4:63:33:53:ef:f6:d9:88:47: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.96.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:d1:02:26:fc:ab:f4:78:61:de:1c:8d:81:bd:9a:33:f1:3e: cc:b4:a3:25:6f:98:d9:0e:7e:94:f7:39:0f:cf:29:54:07:cb: 54:77:88:18:3c:c2:0a:c3:ae:18:1d:d6:39:c5:89:05:dd:7a: bd:c6:f1:4c:f0:89:a2:d6:fa:03:78:ae:4c:de:63:25:02:2f: bb:d2:9d:51:29:ba:aa:41:ea:5a:ab:17:be:8d:ed:b2:ca:1d: 1c:1a:81:81:6d:64:db:e3:08:92:4d:58:d4:aa:a5:be:47:8e: 63:1e:3f:ad:7e:28:e7:4d:50:89:67:06:7d:2a:81:23:8f:4b: 84:c4:1a:25:a2:dd:2b:56:95:45:e5:f1:ae:5d:ef:7c:1e:95: d3:8c:a6:9b:91:35:4b:a1:80:41:01:88:c4:1a:57:89:3a:59: 7e:a4:f5:17:88:e0:05:c5:a8:92:d9:18:90:f7:ed:95:25:d8: db:74:bd:ae:53:b9:c9:9b:64:d5:f3:0c:fa:8f:f3:1e:58:ca: 34:49:b7:87:63:3b:5a:4f:0d:44:02:aa:8f:f6:e6:71:a6:22: 3a:10:7f:34:50:02:b5:50:62:97:18:df:82:41:9c:49:53:f2: b3:8c:c4:ce:55:fb:d2:57:25:dd:d7:f3:c9:e7:b3:44:65:2c: 84:02:e2:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ7c8GzSe7RnN4eO++l4JHCXuh2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMzEyMzcxM1oX DTI1MDEwMTEyNDIxM1owMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFB RTI0Mzc0Q0MyRDhGRTM0RkExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN9W4g8NAJWtayErdSwjz9KiK6S//gvXu/rJjCj3CUNl1qhDCpzguz1ka7A rUAXnp5l5hBs+wh+ECysxWBOWx7pDH609RsoUyPJzLkGrI1tJuVxIQV1AIxEa3FX IYGemHWL30GdZ23yEgcHeLOPYSovf3NH4GKG9FdMnb1Pfz/t338eivCOstitLZf/ h7+IE7updiZTgoXuZEtoZcjx1XZrVv/3slvNhLLYTrcgzYDz5v29l+QCo/iGQXIa Ws3/skDjrU+wkZRY3Hjn3V3cIX5bkYya//eb9kpN4nrC7Y4ZXQ728SWIVu2nfEN1 geX5rty7O6zh1GMzU+/22YhHkbsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4SWB89IKhwiNquJDdMwtj+NPoSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNzc0NjFk LWZlNGYtNDk2MS05MmU1LTk2NTVhZjI1NzU0YS8wL0FFMTI1ODFGM0QyMEE4NzA4 OERBQUUyNDM3NENDMkQ4RkUzNEZBMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneWAwDQYJKoZIhvcNAQELBQADggEBACvRAib8q/R4Yd4cjYG9mjPxPsy0oyVv mNkOfpT3OQ/PKVQHy1R3iBg8wgrDrhgd1jnFiQXder3G8UzwiaLW+gN4rkzeYyUC L7vSnVEpuqpB6lqrF76N7bLKHRwagYFtZNvjCJJNWNSqpb5HjmMeP61+KOdNUIln Bn0qgSOPS4TEGiWi3StWlUXl8a5d73weldOMppuRNUuhgEEBiMQaV4k6WX6k9ReI 4AXFqJLZGJD37ZUl2Nt0va5TucmbZNXzDPqP8x5YyjRJt4djO1pPDUQCqo/25nGm IjoQfzRQArVQYpcY34JBnElT8rOMxM5V+9JXJd3X88nns0RlLIQC4n4= -----END CERTIFICATE-----Generated at Wed May 8 05:33:19 2024 by rpki-client on console-ams.rpki-client.org