$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer (raw, json) Hash identifier: 4395yvTf23FDHQ1FdoD5IkgGYzxa8wH74XmzhgIQvvs= Subject key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76944E419D5C03B20179A2B2B69029B35C5BC6C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft caRepository: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:09:43 +0000 Certificate not after: Mon 29 Jul 2024 03:14:43 +0000 Subordinate resources: IP: 103.15.226.0/24 IP: 103.28.52.0/23 IP: 103.55.36.0/22 IP: 103.236.201.0/24 IP: 2001:df7:7400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:94:4e:41:9d:5c:03:b2:01:79:a2:b2:b6:90:29:b3:5c:5b:c6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:09:43 2023 GMT Not After : Jul 29 03:14:43 2024 GMT Subject: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:ec:61:13:42:ab:e2:c1:9d:3f:24:e9:bb: 2f:aa:b5:fb:a1:de:9e:1f:2a:4f:69:f0:3c:f1:26: a8:a9:a3:8a:ee:47:e4:8f:e6:2d:a9:9b:e8:53:8e: 6b:32:22:2b:c1:3d:ce:da:9a:cb:c7:42:26:7f:b6: 54:ec:f0:1d:f5:1f:1b:77:a3:47:96:47:90:31:6b: fd:bd:5b:83:fb:55:c1:9a:c6:63:e0:bd:c5:f6:6e: fe:e2:bb:3b:e7:02:0c:5b:66:22:52:dd:c6:5f:03: 9a:3a:d7:dd:22:60:98:0c:15:8c:58:cb:d1:ec:11: fd:8b:5c:50:fe:b1:e7:5f:7a:8d:55:5d:6a:62:5e: 98:99:1a:44:ad:e9:69:45:3b:fe:aa:9c:bd:91:1d: 59:93:a7:88:d4:27:2d:fc:1e:92:ed:4f:22:c0:dc: 63:83:12:5f:14:14:32:6c:a1:99:08:78:c9:98:ca: 79:34:11:ca:02:3c:96:0f:02:d7:42:52:6e:2c:07: 85:1a:2f:53:87:60:46:41:ff:92:00:5e:08:5f:29: cb:0d:dc:08:f6:93:f8:b2:3e:70:3e:80:94:39:0b: d6:3a:7e:71:77:ee:51:12:c8:c0:21:a7:6f:1c:35: b3:c8:48:07:ee:0e:06:1f:b0:27:af:28:61:06:7f: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.226.0/24 103.28.52.0/23 103.55.36.0/22 103.236.201.0/24 IPv6: 2001:df7:7400::/48 Signature Algorithm: sha256WithRSAEncryption 42:9e:c3:71:86:e4:45:cb:d0:8d:22:76:26:33:59:13:a9:03: 7f:66:34:41:67:74:0d:4c:da:90:b6:fd:23:14:47:e5:ae:20: 75:ee:b9:22:04:d3:8f:77:f2:c0:c0:ef:a7:47:55:24:03:7b: 24:16:7e:58:b6:fa:a0:9f:bd:d1:89:16:19:f2:a3:f9:b7:43: 3c:45:c4:c6:eb:b3:5f:1e:1d:86:6e:9b:7d:ac:02:e5:f4:5c: b0:de:a9:4b:ce:82:03:52:d6:03:d6:6f:7a:28:9b:27:16:27: ee:63:7a:12:b1:21:e9:85:f5:49:45:ff:e7:5f:4c:10:df:fc: 98:a5:a4:3c:c8:55:f8:b6:4a:12:0c:79:26:f2:08:bf:8a:4e: fb:c2:ef:97:2b:73:a3:bd:19:e0:0d:11:16:43:bb:13:8c:59: d0:a4:9b:a3:79:75:89:cc:38:88:66:c7:ba:06:99:f6:53:5f: e7:56:ad:27:9d:02:4c:4e:69:4f:f2:05:9b:be:7f:6e:12:fd: b7:39:ba:1b:a7:bc:d5:70:ff:e3:f0:64:83:3e:9d:68:94:7d: 62:80:a3:b3:7c:ea:4c:e6:f9:dd:f2:78:35:56:87:71:81:d6: 37:4a:6a:47:ca:e0:28:4c:8a:de:95:90:51:b2:81:22:21:50: 80:f1:39:bf -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUdpROQZ1cA7IBeaKytpAps1xbxsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMDk0M1oX DTI0MDcyOTAzMTQ0M1owMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZF QTkyRkJGNzJEQTIxMDZBNTk0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxL7GETQqviwZ0/JOm7L6q1+6Henh8qT2nwPPEmqKmjiu5H5I/mLamb6FOO azIiK8E9ztqay8dCJn+2VOzwHfUfG3ejR5ZHkDFr/b1bg/tVwZrGY+C9xfZu/uK7 O+cCDFtmIlLdxl8DmjrX3SJgmAwVjFjL0ewR/YtcUP6x5196jVVdamJemJkaRK3p aUU7/qqcvZEdWZOniNQnLfweku1PIsDcY4MSXxQUMmyhmQh4yZjKeTQRygI8lg8C 10JSbiwHhRovU4dgRkH/kgBeCF8pyw3cCPaT+LI+cD6AlDkL1jp+cXfuURLIwCGn bxw1s8hIB+4OBh+wJ68oYQZ/K4ECAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9S5xbece6pNT/qkvv3LaIQallMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyYWMwY2E1 LTVjZTctNGU2ZS05ZmZmLTcyMTNlZjFlZjM2NC8wL0FGNTJFNzE2REU3MUVFQTkz NTNGRUE5MkZCRjcyREEyMTA2QTU5NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BABnD+IDBAFnHDQDBAJnNyQDBABn7MkwDwQCAAIwCQMHACABDfd0ADANBgkqhkiG 9w0BAQsFAAOCAQEAQp7DcYbkRcvQjSJ2JjNZE6kDf2Y0QWd0DUzakLb9IxRH5a4g de65IgTTj3fywMDvp0dVJAN7JBZ+WLb6oJ+90YkWGfKj+bdDPEXExuuzXx4dhm6b fawC5fRcsN6pS86CA1LWA9ZveiibJxYn7mN6ErEh6YX1SUX/519MEN/8mKWkPMhV +LZKEgx5JvIIv4pO+8Lvlytzo70Z4A0RFkO7E4xZ0KSbo3l1icw4iGbHugaZ9lNf 51atJ50CTE5pT/IFm75/bhL9tzm6G6e81XD/4/Bkgz6daJR9YoCjs3zqTOb53fJ4 NVaHcYHWN0pqR8rgKEyK3pWQUbKBIiFQgPE5vw== -----END CERTIFICATE-----Generated at Wed May 8 10:06:51 2024 by rpki-client on console-ams.rpki-client.org