$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer (raw, json) Hash identifier: l4KfF812LGWc/vGqHOhCVeaGTVwX+LFwAzM1NNG95BQ= Subject key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 17163D87ED132F00ED7CB77A66FA246538211845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Nov 2023 09:48:30 +0000 Certificate not after: Tue 12 Nov 2024 09:53:30 +0000 Subordinate resources: IP: 103.172.23.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:16:3d:87:ed:13:2f:00:ed:7c:b7:7a:66:fa:24:65:38:21:18:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 09:48:30 2023 GMT Not After : Nov 12 09:53:30 2024 GMT Subject: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:06:15:d8:e7:0c:33:22:06:e3:1b:ba:19: 23:f9:44:6c:bf:36:a4:ac:5a:f3:f4:8b:21:4c:87: 82:71:1b:fe:69:12:18:25:81:30:37:c7:19:fa:c2: ff:7a:34:55:fa:98:c6:f8:ab:e0:50:33:63:44:11: d7:7a:79:f7:3f:76:75:b3:cb:ba:cd:c2:a6:e2:3b: 1c:98:90:7a:56:68:f4:37:4a:49:94:61:79:a5:ba: a8:c5:9b:43:b2:31:e7:60:8d:6c:b2:39:63:23:89: f6:f0:69:66:2a:82:90:89:d1:ae:ef:b4:33:28:79: 7a:5c:96:4d:bf:1d:c6:1f:60:cc:b5:91:67:50:23: e6:53:6d:9f:b3:51:b3:43:45:e7:76:d5:2c:a4:35: a8:1f:fd:16:f6:2e:1a:89:ed:6c:93:3e:0c:48:20: d5:7f:c1:24:ba:c6:75:65:db:b8:87:19:e0:7c:5b: 21:b7:41:bd:8a:fb:86:ad:bd:99:56:e7:e7:94:6e: 1e:9e:a9:4f:3f:a3:f7:eb:bb:e1:cd:45:67:6f:cc: bf:84:a1:98:9c:e9:15:89:be:ad:be:e0:68:5c:96: db:bc:ed:59:c8:5f:62:19:ad:65:17:58:90:3f:d6: 12:05:75:a8:bd:41:f3:2f:05:43:cd:55:80:c4:28: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.23.0/24 Signature Algorithm: sha256WithRSAEncryption 49:08:b0:cf:ce:d1:a1:c3:e0:d5:83:75:95:d4:d4:24:2c:93: c1:46:c3:8f:7f:02:57:df:4a:a1:16:18:42:f3:7e:c5:0d:d8: a0:7a:1b:a2:9a:16:d2:87:1e:f8:54:f5:a0:7a:74:07:68:c0: 17:aa:b8:7f:f5:fc:26:78:0e:7e:3c:0b:e2:9f:26:81:39:35: 56:a9:61:3a:04:d1:8e:df:26:db:f8:ac:5f:7c:6c:8d:76:22: 76:ae:ba:ec:97:7a:9b:8e:a7:04:83:43:da:c0:39:1f:39:1e: c1:87:fa:17:02:d8:cf:21:bb:ed:12:c7:b8:83:3d:87:3b:b3: a6:0b:7a:35:76:41:fb:d5:8f:69:cb:99:13:45:d2:a6:1c:fe: e3:f8:87:aa:88:78:41:63:8a:df:dc:b8:5c:4c:9b:81:39:ac: b5:7e:51:67:80:7a:3e:8d:d1:66:c0:96:d6:a0:ba:ac:96:32: c9:09:1c:45:2d:59:07:3d:99:42:d6:29:f1:72:79:eb:ba:15: f2:59:84:82:dc:8a:e4:51:6b:90:78:da:7a:4d:d7:e7:5f:7c: 52:66:34:e5:18:ac:7b:bd:ae:46:c3:ed:3c:8c:00:29:28:6b: bd:5a:62:46:05:3b:a7:31:5a:c5:33:9d:09:0c:c1:bc:cc:52: a6:f6:e8:cd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFxY9h+0TLwDtfLd6ZvokZTghGEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExNDA5NDgzMFoX DTI0MTExMjA5NTMzMFowMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0Mx QTU4Q0U5MTVGREI4MkMzQzJGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrZBhXY5wwzIgbjG7oZI/lEbL82pKxa8/SLIUyHgnEb/mkSGCWBMDfHGfrC /3o0VfqYxvir4FAzY0QR13p59z92dbPLus3CpuI7HJiQelZo9DdKSZRheaW6qMWb Q7Ix52CNbLI5YyOJ9vBpZiqCkInRru+0Myh5elyWTb8dxh9gzLWRZ1Aj5lNtn7NR s0NF53bVLKQ1qB/9FvYuGontbJM+DEgg1X/BJLrGdWXbuIcZ4HxbIbdBvYr7hq29 mVbn55RuHp6pTz+j9+u74c1FZ2/Mv4ShmJzpFYm+rb7gaFyW27ztWchfYhmtZRdY kD/WEgV1qL1B8y8FQ81VgMQoD5cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK+VjeDs6DCywHwaWM6RX9uCw8L2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZGUwYzM5 LTg0ZDUtNDQwNS05NTRkLTRkM2Q3MTI2OTNjZS8wL0FGOTU4REUwRUNFODMwQjJD MDdDMUE1OENFOTE1RkRCODJDM0MyRjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrBcwDQYJKoZIhvcNAQELBQADggEBAEkIsM/O0aHD4NWDdZXU1CQsk8FGw49/ AlffSqEWGELzfsUN2KB6G6KaFtKHHvhU9aB6dAdowBequH/1/CZ4Dn48C+KfJoE5 NVapYToE0Y7fJtv4rF98bI12InauuuyXepuOpwSDQ9rAOR85HsGH+hcC2M8hu+0S x7iDPYc7s6YLejV2QfvVj2nLmRNF0qYc/uP4h6qIeEFjit/cuFxMm4E5rLV+UWeA ej6N0WbAltaguqyWMskJHEUtWQc9mULWKfFyeeu6FfJZhILciuRRa5B42npN1+df fFJmNOUYrHu9rkbD7TyMACkoa71aYkYFO6cxWsUznQkMwbzMUqb26M0= -----END CERTIFICATE-----Generated at Wed May 8 17:45:21 2024 by rpki-client on console-ams.rpki-client.org