$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer (raw, json) Hash identifier: EfZwNPG5Hyl27waYAen0RhG6jnzNvK16m6kisLmTpLQ= Subject key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FB5003FAEEF4052D2D4DFBA189C2EA21F08F1D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 03 Aug 2024 04:10:34 +0000 Certificate not after: Sat 02 Aug 2025 04:15:34 +0000 Subordinate resources: IP: 43.245.248.0/22 IP: 103.21.224.0/22 IP: 2407:f00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b5:00:3f:ae:ef:40:52:d2:d4:df:ba:18:9c:2e:a2:1f:08:f1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 3 04:10:34 2024 GMT Not After : Aug 2 04:15:34 2025 GMT Subject: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:74:8d:4e:2d:60:8b:30:e1:ba:c6:a4:38: 07:da:1e:1f:1c:ee:3d:3c:e0:17:1c:cb:0a:d4:22: 64:4c:e1:22:f7:f2:1c:65:fb:74:0f:02:19:a5:03: 77:56:c7:95:3d:c5:95:89:92:50:b0:62:fb:ec:69: 47:7c:6f:4c:58:75:7e:de:17:0e:8c:b5:2d:b0:c8: 4f:62:4a:ad:df:68:12:e7:e2:aa:d2:ea:e6:8a:15: 9d:27:74:df:2b:dd:64:0b:40:66:69:8a:6a:47:51: 88:e0:8f:0d:a5:2c:d5:b4:1f:78:9c:af:ec:ea:76: 5c:78:ba:0c:cf:90:2c:55:e7:e0:99:12:2c:75:cb: f3:fd:db:2e:94:2c:2b:6d:f0:73:25:29:0a:22:fa: 62:b9:f7:98:4e:a3:5d:5e:31:a8:6d:dd:94:01:96: 58:82:87:4f:1b:b5:4f:4f:b1:fd:69:1e:a0:66:16: ce:fb:b0:6e:cd:8b:92:7d:9d:50:c7:b1:b0:d6:d4: 55:f9:e0:f8:03:04:23:fd:51:4c:58:5b:19:de:b6: ba:bc:0e:a8:ec:5f:1a:dd:71:73:25:7a:5d:b9:06: e5:d5:de:70:b2:3c:6a:62:ea:a1:61:f3:6a:5a:cc: 5e:e2:28:b2:04:da:c2:59:bb:ba:be:a0:e6:4c:ff: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.248.0/22 103.21.224.0/22 IPv6: 2407:f00::/32 Signature Algorithm: sha256WithRSAEncryption 2e:f0:1a:7f:54:5b:95:f6:57:6c:06:bc:06:43:e2:62:ed:ba: 1a:18:90:38:97:9b:91:3d:12:4c:a6:eb:3e:b2:ba:3c:94:15: 87:48:2b:ad:84:b2:a8:b1:5e:14:16:f8:03:df:bc:f4:25:0a: ca:f5:7a:4a:94:e4:c2:d0:2b:67:e0:8e:50:6c:a2:0c:79:d6: be:05:b4:49:d3:13:e1:3b:bf:48:54:a5:26:94:3d:00:16:a5: 50:fd:6e:c0:65:91:3d:88:a6:a9:ff:33:9d:38:92:4e:28:e7: 4f:77:c3:ce:52:48:11:60:0c:a7:39:0a:7e:5a:fa:21:14:2c: 21:6e:f6:5e:6f:4b:f3:3b:a3:e9:b2:b6:db:5e:d2:af:af:ec: 2d:f6:f5:2b:b0:6e:40:fb:ea:01:3f:61:bd:f8:16:07:86:c8: ab:91:9b:87:36:e3:9f:d8:04:6b:b4:be:e5:77:f5:c2:92:57: fa:72:9b:64:3c:88:0c:e4:b0:7e:9f:11:3a:f3:ae:a6:a5:5b: 44:cf:59:ba:ca:cc:1e:4a:78:15:5e:54:74:7a:7a:57:c7:a1: 4b:4d:d0:c6:62:d8:f1:88:4b:f2:ed:f6:d3:3b:82:4f:13:34: 93:8c:b0:ad:fc:bd:ca:43:db:15:d7:2e:17:c7:aa:5e:0f:05: 74:fb:53:9f -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUX7UAP67vQFLS1N+6GJwuoh8I8dgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwMzA0MTAzNFoX DTI1MDgwMjA0MTUzNFowMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4 Q0U5REQ3N0NGRUY5MjMxMDUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3edI1OLWCLMOG6xqQ4B9oeHxzuPTzgFxzLCtQiZEzhIvfyHGX7dA8CGaUD d1bHlT3FlYmSULBi++xpR3xvTFh1ft4XDoy1LbDIT2JKrd9oEufiqtLq5ooVnSd0 3yvdZAtAZmmKakdRiOCPDaUs1bQfeJyv7Op2XHi6DM+QLFXn4JkSLHXL8/3bLpQs K23wcyUpCiL6Yrn3mE6jXV4xqG3dlAGWWIKHTxu1T0+x/WkeoGYWzvuwbs2Lkn2d UMexsNbUVfng+AMEI/1RTFhbGd62urwOqOxfGt1xcyV6XbkG5dXecLI8amLqoWHz alrMXuIosgTawlm7ur6g5kz/CikCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK6zL/oAB8CgZ/uM6d13z++SMQUEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNmY4MzJi LTVhOWUtNGNhYS1iZGQ0LTI2MzQ3MjdhOWVkNC8wL0FFQjMyRkZBMDAwN0MwQTA2 N0ZCOENFOURENzdDRkVGOTIzMTA1MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAIr9fgDBAJnFeAwDQQCAAIwBwMFACQHDwAwDQYJKoZIhvcNAQELBQADggEBAC7w Gn9UW5X2V2wGvAZD4mLtuhoYkDiXm5E9Ekym6z6yujyUFYdIK62EsqixXhQW+APf vPQlCsr1ekqU5MLQK2fgjlBsogx51r4FtEnTE+E7v0hUpSaUPQAWpVD9bsBlkT2I pqn/M504kk4o5093w85SSBFgDKc5Cn5a+iEULCFu9l5vS/M7o+myttte0q+v7C32 9SuwbkD76gE/Yb34FgeGyKuRm4c245/YBGu0vuV39cKSV/pym2Q8iAzksH6fETrz rqalW0TPWbrKzB5KeBVeVHR6elfHoUtN0MZi2PGIS/Lt9tM7gk8TNJOMsK38vcpD 2xXXLhfHql4PBXT7U58= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:23 2024 by rpki-client on console-fra.rpki-client.org