$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer (raw, json) Hash identifier: wBMf3+VQsy5TocS9RpkASfT8jz/zYLhpGlPEnxTEEmA= Subject key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 632AD1BD42FF35AA8FAC9DC4690C0FE2FDEB44A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 06 Jan 2024 18:41:29 +0000 Certificate not after: Sat 04 Jan 2025 18:46:29 +0000 Subordinate resources: IP: 103.147.219.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2a:d1:bd:42:ff:35:aa:8f:ac:9d:c4:69:0c:0f:e2:fd:eb:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 6 18:41:29 2024 GMT Not After : Jan 4 18:46:29 2025 GMT Subject: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:1f:c2:11:f7:89:9b:f0:47:08:e7:b9:be: 51:61:6d:4e:a0:45:63:04:c3:b0:e3:5d:55:7e:27: 59:55:99:6e:b3:58:b5:2e:aa:d8:a7:8f:23:c9:f1: 59:89:1e:11:6e:54:6a:04:33:cb:b9:03:62:2c:60: 28:a5:bc:03:a0:6c:72:dd:7b:90:4f:c4:43:bc:17: 5a:3d:28:e6:23:10:56:36:8a:dd:11:19:1e:0a:7f: 9d:8b:ab:43:4f:5c:d2:86:ea:02:f1:48:2f:bb:aa: 32:75:5f:04:f0:8b:c4:31:3a:e9:cf:f8:c6:5a:97: eb:5c:a8:2a:da:c6:5c:0d:34:66:a0:fa:88:1a:68: fd:02:44:bc:cc:ae:04:f9:01:f3:40:9b:d3:35:21: 68:3c:04:5c:ed:3b:73:54:4f:10:3e:9f:5b:72:34: 12:ac:2c:84:92:ad:14:7a:f8:70:c1:0d:ba:8f:c2: e5:ad:9b:16:4d:d3:ab:90:3b:d6:da:67:5f:a6:82: b3:0e:92:28:9b:8e:62:3b:ee:7b:26:15:21:84:06: df:54:f4:b4:93:04:16:f0:e7:b6:09:69:9e:b6:de: 7c:0a:69:61:b9:7a:8f:7e:ab:56:b1:cb:66:3f:f7: 62:81:6b:ef:7f:28:a5:b8:65:9a:88:b9:43:01:fb: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.219.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:9c:43:a0:3a:aa:22:81:01:81:d4:e2:78:dd:76:6b:e9:fd: c3:61:0c:1b:c2:94:c2:a0:5b:79:e2:b7:d1:4a:91:0d:bc:6b: 7b:c5:84:c7:52:38:51:a9:ce:25:67:b5:53:12:fb:4b:4f:37: 9b:a8:7a:83:b9:8c:6b:42:51:e2:30:56:5e:d2:54:bd:08:f9: c8:5b:98:81:8d:a7:b3:14:1c:71:cb:7b:83:08:72:5d:cd:c9: 65:af:ee:f6:67:49:46:f2:c0:57:20:a3:72:19:bd:71:be:a3: 85:de:b4:82:1f:fe:a5:8d:6b:65:b9:8c:73:43:04:2c:41:d4: 55:3b:19:13:35:4c:7a:a5:f7:e0:90:db:40:91:17:86:d3:8f: b4:a8:40:5a:03:2c:17:79:f5:21:f4:b1:89:26:13:8f:18:0c: ff:b0:b5:0e:c3:3e:92:b3:a2:46:59:ce:dd:ba:7b:d4:4a:2a: b0:45:8e:0e:10:16:34:ad:e9:6a:47:30:2b:dc:df:42:e6:54: c5:48:04:c6:82:e5:73:e7:16:44:cf:50:20:94:42:cb:17:ed: 40:41:3e:e3:7e:4f:fb:ce:72:0a:94:6b:1e:e2:bb:a4:67:27: be:b4:ba:00:cc:95:9d:d9:20:f6:4d:f3:35:cd:2c:e2:c1:2d: 28:c8:6f:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYyrRvUL/NaqPrJ3EaQwP4v3rRKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwNjE4NDEyOVoX DTI1MDEwNDE4NDYyOVowMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0 MEI1M0E2RjcxQzc4NUY3RTlBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCYH8IR94mb8EcI57m+UWFtTqBFYwTDsONdVX4nWVWZbrNYtS6q2KePI8nx WYkeEW5UagQzy7kDYixgKKW8A6Bsct17kE/EQ7wXWj0o5iMQVjaK3REZHgp/nYur Q09c0obqAvFIL7uqMnVfBPCLxDE66c/4xlqX61yoKtrGXA00ZqD6iBpo/QJEvMyu BPkB80Cb0zUhaDwEXO07c1RPED6fW3I0EqwshJKtFHr4cMENuo/C5a2bFk3Tq5A7 1tpnX6aCsw6SKJuOYjvueyYVIYQG31T0tJMEFvDntglpnrbefAppYbl6j36rVrHL Zj/3YoFr738opbhlmoi5QwH7P+0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7+J9KeepdZg6JAtTpvcceF9+mmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzZmMmU1 LWRmYmQtNGY3Zi04YjNkLTdiOTcwZDU0MWI4Zi8wL0FFRkUyN0QyOUU3QTk3NTk4 M0EyNDBCNTNBNkY3MUM3ODVGN0U5QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnk9swDQYJKoZIhvcNAQELBQADggEBADycQ6A6qiKBAYHU4njddmvp/cNhDBvC lMKgW3nit9FKkQ28a3vFhMdSOFGpziVntVMS+0tPN5uoeoO5jGtCUeIwVl7SVL0I +chbmIGNp7MUHHHLe4MIcl3NyWWv7vZnSUbywFcgo3IZvXG+o4XetIIf/qWNa2W5 jHNDBCxB1FU7GRM1THql9+CQ20CRF4bTj7SoQFoDLBd59SH0sYkmE48YDP+wtQ7D PpKzokZZzt26e9RKKrBFjg4QFjSt6WpHMCvc30LmVMVIBMaC5XPnFkTPUCCUQssX 7UBBPuN+T/vOcgqUax7iu6RnJ760ugDMlZ3ZIPZN8zXNLOLBLSjIbwo= -----END CERTIFICATE-----Generated at Wed May 8 04:37:55 2024 by rpki-client on console-fra.rpki-client.org