$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer (raw, json) Hash identifier: GCRvRaV4PYknYS1urUgHPPbci4pAUG5hDiBHDli8LvQ= Subject key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68312BDA46292A3B7B3DD7F0ADC5B6B4269004B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft caRepository: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 16:19:25 +0000 Certificate not after: Mon 30 Jun 2025 16:24:25 +0000 Subordinate resources: IP: 103.15.226.0/24 IP: 103.28.52.0/23 IP: 103.55.36.0/22 IP: 103.236.201.0/24 IP: 2001:df7:7400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:31:2b:da:46:29:2a:3b:7b:3d:d7:f0:ad:c5:b6:b4:26:90:04:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 16:19:25 2024 GMT Not After : Jun 30 16:24:25 2025 GMT Subject: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:ec:61:13:42:ab:e2:c1:9d:3f:24:e9:bb: 2f:aa:b5:fb:a1:de:9e:1f:2a:4f:69:f0:3c:f1:26: a8:a9:a3:8a:ee:47:e4:8f:e6:2d:a9:9b:e8:53:8e: 6b:32:22:2b:c1:3d:ce:da:9a:cb:c7:42:26:7f:b6: 54:ec:f0:1d:f5:1f:1b:77:a3:47:96:47:90:31:6b: fd:bd:5b:83:fb:55:c1:9a:c6:63:e0:bd:c5:f6:6e: fe:e2:bb:3b:e7:02:0c:5b:66:22:52:dd:c6:5f:03: 9a:3a:d7:dd:22:60:98:0c:15:8c:58:cb:d1:ec:11: fd:8b:5c:50:fe:b1:e7:5f:7a:8d:55:5d:6a:62:5e: 98:99:1a:44:ad:e9:69:45:3b:fe:aa:9c:bd:91:1d: 59:93:a7:88:d4:27:2d:fc:1e:92:ed:4f:22:c0:dc: 63:83:12:5f:14:14:32:6c:a1:99:08:78:c9:98:ca: 79:34:11:ca:02:3c:96:0f:02:d7:42:52:6e:2c:07: 85:1a:2f:53:87:60:46:41:ff:92:00:5e:08:5f:29: cb:0d:dc:08:f6:93:f8:b2:3e:70:3e:80:94:39:0b: d6:3a:7e:71:77:ee:51:12:c8:c0:21:a7:6f:1c:35: b3:c8:48:07:ee:0e:06:1f:b0:27:af:28:61:06:7f: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.226.0/24 103.28.52.0/23 103.55.36.0/22 103.236.201.0/24 IPv6: 2001:df7:7400::/48 Signature Algorithm: sha256WithRSAEncryption 54:c4:8c:52:5e:29:00:84:4d:fd:8a:9e:75:cb:f4:18:9a:9b: b5:9f:36:d1:e3:95:cc:75:9d:44:18:33:7b:33:5f:37:54:1b: 2c:68:7a:3e:40:03:2b:9f:9f:25:94:0a:44:8d:04:00:3c:f6: 92:fa:be:7c:c2:01:17:39:7a:6e:0c:83:2b:17:cf:f4:ae:fd: 40:ad:48:e8:31:57:c9:f5:61:96:38:c4:3d:3a:2a:71:dd:92: 08:2f:21:a3:42:06:51:5f:8b:8e:6a:01:2c:14:9e:d8:1d:62: 7a:4e:a1:15:3f:fc:94:89:12:1e:96:5f:4f:20:11:ff:cf:86: 51:ef:6c:43:92:ee:cb:6a:b6:6d:b5:c8:98:c1:e4:43:d6:8e: 04:5c:1a:81:ec:2c:2e:44:21:ea:82:5c:76:eb:fd:72:5d:e9: b7:3e:05:d2:16:ee:bb:90:6a:55:cf:cb:e2:b9:9b:d7:54:43: ea:d6:55:bd:e5:fa:b5:22:e3:42:57:1e:6c:c2:fe:3d:9d:da: a4:d9:e0:e5:cd:74:dc:9a:8d:e1:08:cb:41:81:f0:5d:35:4f: 55:65:85:6d:5c:2b:5e:20:38:8b:09:61:47:5c:5a:bf:d9:82: 97:22:e7:a0:a3:99:15:f3:ee:04:ac:34:61:a7:36:83:f3:f7: 8a:4b:c6:e8 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUaDEr2kYpKjt7PdfwrcW2tCaQBLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MTkyNVoX DTI1MDYzMDE2MjQyNVowMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZF QTkyRkJGNzJEQTIxMDZBNTk0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxL7GETQqviwZ0/JOm7L6q1+6Henh8qT2nwPPEmqKmjiu5H5I/mLamb6FOO azIiK8E9ztqay8dCJn+2VOzwHfUfG3ejR5ZHkDFr/b1bg/tVwZrGY+C9xfZu/uK7 O+cCDFtmIlLdxl8DmjrX3SJgmAwVjFjL0ewR/YtcUP6x5196jVVdamJemJkaRK3p aUU7/qqcvZEdWZOniNQnLfweku1PIsDcY4MSXxQUMmyhmQh4yZjKeTQRygI8lg8C 10JSbiwHhRovU4dgRkH/kgBeCF8pyw3cCPaT+LI+cD6AlDkL1jp+cXfuURLIwCGn bxw1s8hIB+4OBh+wJ68oYQZ/K4ECAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9S5xbece6pNT/qkvv3LaIQallMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyYWMwY2E1 LTVjZTctNGU2ZS05ZmZmLTcyMTNlZjFlZjM2NC8wL0FGNTJFNzE2REU3MUVFQTkz NTNGRUE5MkZCRjcyREEyMTA2QTU5NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BABnD+IDBAFnHDQDBAJnNyQDBABn7MkwDwQCAAIwCQMHACABDfd0ADANBgkqhkiG 9w0BAQsFAAOCAQEAVMSMUl4pAIRN/Yqedcv0GJqbtZ820eOVzHWdRBgzezNfN1Qb LGh6PkADK5+fJZQKRI0EADz2kvq+fMIBFzl6bgyDKxfP9K79QK1I6DFXyfVhljjE PToqcd2SCC8ho0IGUV+LjmoBLBSe2B1iek6hFT/8lIkSHpZfTyAR/8+GUe9sQ5Lu y2q2bbXImMHkQ9aOBFwagewsLkQh6oJcduv9cl3ptz4F0hbuu5BqVc/L4rmb11RD 6tZVveX6tSLjQlcebML+PZ3apNng5c103JqN4QjLQYHwXTVPVWWFbVwrXiA4iwlh R1xav9mClyLnoKOZFfPuBKw0Yac2g/P3ikvG6A== -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:19 2025 by rpki-client