$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer (raw, json) Hash identifier: D8hgHhl0h0oGWUGWNYtjOPKdqMrIhMEt1TK0TZkgGiQ= Subject key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 646A0BEB27EFACE863A83B03FE983BF6440C09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Dec 2024 23:24:44 +0000 Certificate not after: Sat 06 Dec 2025 23:29:44 +0000 Subordinate resources: IP: 103.147.219.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6a:0b:eb:27:ef:ac:e8:63:a8:3b:03:fe:98:3b:f6:44:0c:09:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 7 23:24:44 2024 GMT Not After : Dec 6 23:29:44 2025 GMT Subject: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:1f:c2:11:f7:89:9b:f0:47:08:e7:b9:be: 51:61:6d:4e:a0:45:63:04:c3:b0:e3:5d:55:7e:27: 59:55:99:6e:b3:58:b5:2e:aa:d8:a7:8f:23:c9:f1: 59:89:1e:11:6e:54:6a:04:33:cb:b9:03:62:2c:60: 28:a5:bc:03:a0:6c:72:dd:7b:90:4f:c4:43:bc:17: 5a:3d:28:e6:23:10:56:36:8a:dd:11:19:1e:0a:7f: 9d:8b:ab:43:4f:5c:d2:86:ea:02:f1:48:2f:bb:aa: 32:75:5f:04:f0:8b:c4:31:3a:e9:cf:f8:c6:5a:97: eb:5c:a8:2a:da:c6:5c:0d:34:66:a0:fa:88:1a:68: fd:02:44:bc:cc:ae:04:f9:01:f3:40:9b:d3:35:21: 68:3c:04:5c:ed:3b:73:54:4f:10:3e:9f:5b:72:34: 12:ac:2c:84:92:ad:14:7a:f8:70:c1:0d:ba:8f:c2: e5:ad:9b:16:4d:d3:ab:90:3b:d6:da:67:5f:a6:82: b3:0e:92:28:9b:8e:62:3b:ee:7b:26:15:21:84:06: df:54:f4:b4:93:04:16:f0:e7:b6:09:69:9e:b6:de: 7c:0a:69:61:b9:7a:8f:7e:ab:56:b1:cb:66:3f:f7: 62:81:6b:ef:7f:28:a5:b8:65:9a:88:b9:43:01:fb: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.219.0/24 Signature Algorithm: sha256WithRSAEncryption 93:25:f0:8c:e3:16:73:80:a2:d3:85:60:61:f5:4e:75:10:ed: a0:1e:51:0a:a8:37:f5:f7:a6:ea:94:83:fe:8d:f3:b7:77:9d: bc:66:a9:77:36:d6:89:76:4f:a5:57:2d:5c:af:3a:ca:ed:bc: 7d:d2:ff:b5:62:4e:26:ce:6d:9b:fa:1e:df:1b:4e:03:4e:2e: f5:00:cf:be:78:16:f3:fe:de:8d:6f:e1:ae:70:49:47:76:a7: 5e:28:a9:0a:26:4d:87:26:f0:c0:ce:06:5a:71:f4:a0:89:43: 38:c2:5d:28:d7:b8:66:06:0e:fb:ab:40:74:b6:4e:20:58:6f: af:28:23:f3:52:72:ce:50:6b:c9:5e:a1:54:7a:bc:cd:15:ee: 5e:2f:c6:25:c0:fe:1f:0d:98:2d:02:e4:26:c2:3f:2f:98:9b: 36:c6:d8:da:eb:fa:1c:a7:c4:ab:d8:79:4b:43:d1:d3:3a:b1: fb:7f:4f:07:18:a3:a4:4f:1e:44:63:f7:f0:a6:96:e3:1c:5b: fc:c7:d0:25:07:97:77:02:47:6e:26:00:5f:14:f2:a9:dc:56: b1:3e:36:1e:b4:a8:fd:99:46:d4:76:86:f4:a1:75:43:33:8c: ee:a3:35:6e:34:7a:6f:b6:93:ed:e2:a3:74:8e:22:61:25:75: 18:46:99:25 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZGoL6yfvrOhjqDsD/pg79kQMCdwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNzIzMjQ0NFoX DTI1MTIwNjIzMjk0NFowMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0 MEI1M0E2RjcxQzc4NUY3RTlBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCYH8IR94mb8EcI57m+UWFtTqBFYwTDsONdVX4nWVWZbrNYtS6q2KePI8nx WYkeEW5UagQzy7kDYixgKKW8A6Bsct17kE/EQ7wXWj0o5iMQVjaK3REZHgp/nYur Q09c0obqAvFIL7uqMnVfBPCLxDE66c/4xlqX61yoKtrGXA00ZqD6iBpo/QJEvMyu BPkB80Cb0zUhaDwEXO07c1RPED6fW3I0EqwshJKtFHr4cMENuo/C5a2bFk3Tq5A7 1tpnX6aCsw6SKJuOYjvueyYVIYQG31T0tJMEFvDntglpnrbefAppYbl6j36rVrHL Zj/3YoFr738opbhlmoi5QwH7P+0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7+J9KeepdZg6JAtTpvcceF9+mmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzZmMmU1 LWRmYmQtNGY3Zi04YjNkLTdiOTcwZDU0MWI4Zi8wL0FFRkUyN0QyOUU3QTk3NTk4 M0EyNDBCNTNBNkY3MUM3ODVGN0U5QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnk9swDQYJKoZIhvcNAQELBQADggEBAJMl8IzjFnOAotOFYGH1TnUQ7aAeUQqo N/X3puqUg/6N87d3nbxmqXc21ol2T6VXLVyvOsrtvH3S/7ViTibObZv6Ht8bTgNO LvUAz754FvP+3o1v4a5wSUd2p14oqQomTYcm8MDOBlpx9KCJQzjCXSjXuGYGDvur QHS2TiBYb68oI/NScs5Qa8leoVR6vM0V7l4vxiXA/h8NmC0C5CbCPy+YmzbG2Nrr +hynxKvYeUtD0dM6sft/TwcYo6RPHkRj9/CmluMcW/zH0CUHl3cCR24mAF8U8qnc VrE+Nh60qP2ZRtR2hvShdUMzjO6jNW40em+2k+3io3SOImEldRhGmSU= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:16 2025 by rpki-client