$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer (raw, json) Hash identifier: pS6rwvVQw9QdhQ0Gxtlps9tPyhgUNziIC6mYcpy/kx8= Subject key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B6C5C1EB8A3DDBDF59B729626C87ABA4FF6CD5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Sep 2023 18:56:27 +0000 Certificate not after: Fri 30 Aug 2024 19:01:27 +0000 Subordinate resources: IP: 43.245.248.0/22 IP: 103.21.224.0/22 IP: 2407:f00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:5c:1e:b8:a3:dd:bd:f5:9b:72:96:26:c8:7a:ba:4f:f6:cd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 1 18:56:27 2023 GMT Not After : Aug 30 19:01:27 2024 GMT Subject: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:74:8d:4e:2d:60:8b:30:e1:ba:c6:a4:38: 07:da:1e:1f:1c:ee:3d:3c:e0:17:1c:cb:0a:d4:22: 64:4c:e1:22:f7:f2:1c:65:fb:74:0f:02:19:a5:03: 77:56:c7:95:3d:c5:95:89:92:50:b0:62:fb:ec:69: 47:7c:6f:4c:58:75:7e:de:17:0e:8c:b5:2d:b0:c8: 4f:62:4a:ad:df:68:12:e7:e2:aa:d2:ea:e6:8a:15: 9d:27:74:df:2b:dd:64:0b:40:66:69:8a:6a:47:51: 88:e0:8f:0d:a5:2c:d5:b4:1f:78:9c:af:ec:ea:76: 5c:78:ba:0c:cf:90:2c:55:e7:e0:99:12:2c:75:cb: f3:fd:db:2e:94:2c:2b:6d:f0:73:25:29:0a:22:fa: 62:b9:f7:98:4e:a3:5d:5e:31:a8:6d:dd:94:01:96: 58:82:87:4f:1b:b5:4f:4f:b1:fd:69:1e:a0:66:16: ce:fb:b0:6e:cd:8b:92:7d:9d:50:c7:b1:b0:d6:d4: 55:f9:e0:f8:03:04:23:fd:51:4c:58:5b:19:de:b6: ba:bc:0e:a8:ec:5f:1a:dd:71:73:25:7a:5d:b9:06: e5:d5:de:70:b2:3c:6a:62:ea:a1:61:f3:6a:5a:cc: 5e:e2:28:b2:04:da:c2:59:bb:ba:be:a0:e6:4c:ff: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.248.0/22 103.21.224.0/22 IPv6: 2407:f00::/32 Signature Algorithm: sha256WithRSAEncryption 4b:5d:1a:a6:66:38:f1:f8:ae:2b:a8:73:9a:d6:5a:57:9e:4a: 1a:9a:41:ce:95:e0:b1:57:fe:59:04:1d:9e:73:e2:2c:6c:cd: a0:00:1a:d5:0e:89:9b:56:ae:c1:95:8c:08:e3:9a:f1:c0:53: ad:5a:e1:0b:b9:3b:fc:a3:12:73:28:df:e2:ca:1a:5f:89:c6: ba:e5:17:01:4f:ec:e8:fb:1b:ed:78:00:d5:c7:64:b3:17:a9: 20:00:31:da:3c:c3:09:d5:e8:95:82:c3:fc:a0:dc:2c:ac:4d: f4:3c:72:0e:03:85:6a:95:be:4e:6c:87:77:16:5d:d3:5e:0a: 0d:8c:a2:5f:40:77:f2:40:77:e4:9d:de:2d:d7:7c:e0:45:57: 5b:5b:fe:a5:d7:c3:94:61:8e:a8:4c:5e:a7:56:1c:b8:c8:2d: 18:76:5f:c7:ca:bc:53:b5:35:59:f6:46:8a:75:d9:b6:7f:95: f1:ae:82:87:9b:5e:6a:fb:78:d3:3e:2e:6d:e9:54:a8:f4:62: 49:b3:d0:6f:08:b5:06:02:5b:6e:d1:0c:95:06:c2:f8:02:ec: a7:ab:ca:93:aa:9e:97:0e:c0:57:19:50:1b:08:56:cb:19:3d: 20:dd:a3:9e:b2:8d:56:55:95:bd:0d:a9:c1:c7:bf:1c:6d:0d: 47:bd:21:8d -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUa2xcHrij3b31m3KWJsh6uk/2zV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwMTE4NTYyN1oX DTI0MDgzMDE5MDEyN1owMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4 Q0U5REQ3N0NGRUY5MjMxMDUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3edI1OLWCLMOG6xqQ4B9oeHxzuPTzgFxzLCtQiZEzhIvfyHGX7dA8CGaUD d1bHlT3FlYmSULBi++xpR3xvTFh1ft4XDoy1LbDIT2JKrd9oEufiqtLq5ooVnSd0 3yvdZAtAZmmKakdRiOCPDaUs1bQfeJyv7Op2XHi6DM+QLFXn4JkSLHXL8/3bLpQs K23wcyUpCiL6Yrn3mE6jXV4xqG3dlAGWWIKHTxu1T0+x/WkeoGYWzvuwbs2Lkn2d UMexsNbUVfng+AMEI/1RTFhbGd62urwOqOxfGt1xcyV6XbkG5dXecLI8amLqoWHz alrMXuIosgTawlm7ur6g5kz/CikCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK6zL/oAB8CgZ/uM6d13z++SMQUEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNmY4MzJi LTVhOWUtNGNhYS1iZGQ0LTI2MzQ3MjdhOWVkNC8wL0FFQjMyRkZBMDAwN0MwQTA2 N0ZCOENFOURENzdDRkVGOTIzMTA1MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAIr9fgDBAJnFeAwDQQCAAIwBwMFACQHDwAwDQYJKoZIhvcNAQELBQADggEBAEtd GqZmOPH4riuoc5rWWleeShqaQc6V4LFX/lkEHZ5z4ixszaAAGtUOiZtWrsGVjAjj mvHAU61a4Qu5O/yjEnMo3+LKGl+JxrrlFwFP7Oj7G+14ANXHZLMXqSAAMdo8wwnV 6JWCw/yg3CysTfQ8cg4DhWqVvk5sh3cWXdNeCg2Mol9Ad/JAd+Sd3i3XfOBFV1tb /qXXw5RhjqhMXqdWHLjILRh2X8fKvFO1NVn2Rop12bZ/lfGugoebXmr7eNM+Lm3p VKj0Ykmz0G8ItQYCW27RDJUGwvgC7KerypOqnpcOwFcZUBsIVssZPSDdo56yjVZV lb0NqcHHvxxtDUe9IY0= -----END CERTIFICATE-----Generated at Wed May 8 09:50:35 2024 by rpki-client on console-fra.rpki-client.org