$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer (raw, json) Hash identifier: 4WLTzLp613MsRFR8UprClcc1Nyhen8gfKr4AHVBeAhg= Subject key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40E69ECDC1DF0F472D32A380C7AB9C1B5C56853E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Oct 2024 16:08:07 +0000 Certificate not after: Tue 14 Oct 2025 16:13:07 +0000 Subordinate resources: IP: 103.172.23.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:9e:cd:c1:df:0f:47:2d:32:a3:80:c7:ab:9c:1b:5c:56:85:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 16:08:07 2024 GMT Not After : Oct 14 16:13:07 2025 GMT Subject: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:06:15:d8:e7:0c:33:22:06:e3:1b:ba:19: 23:f9:44:6c:bf:36:a4:ac:5a:f3:f4:8b:21:4c:87: 82:71:1b:fe:69:12:18:25:81:30:37:c7:19:fa:c2: ff:7a:34:55:fa:98:c6:f8:ab:e0:50:33:63:44:11: d7:7a:79:f7:3f:76:75:b3:cb:ba:cd:c2:a6:e2:3b: 1c:98:90:7a:56:68:f4:37:4a:49:94:61:79:a5:ba: a8:c5:9b:43:b2:31:e7:60:8d:6c:b2:39:63:23:89: f6:f0:69:66:2a:82:90:89:d1:ae:ef:b4:33:28:79: 7a:5c:96:4d:bf:1d:c6:1f:60:cc:b5:91:67:50:23: e6:53:6d:9f:b3:51:b3:43:45:e7:76:d5:2c:a4:35: a8:1f:fd:16:f6:2e:1a:89:ed:6c:93:3e:0c:48:20: d5:7f:c1:24:ba:c6:75:65:db:b8:87:19:e0:7c:5b: 21:b7:41:bd:8a:fb:86:ad:bd:99:56:e7:e7:94:6e: 1e:9e:a9:4f:3f:a3:f7:eb:bb:e1:cd:45:67:6f:cc: bf:84:a1:98:9c:e9:15:89:be:ad:be:e0:68:5c:96: db:bc:ed:59:c8:5f:62:19:ad:65:17:58:90:3f:d6: 12:05:75:a8:bd:41:f3:2f:05:43:cd:55:80:c4:28: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.23.0/24 Signature Algorithm: sha256WithRSAEncryption 79:31:35:fd:a0:83:76:11:8e:7a:1e:c9:75:75:8d:07:d1:c5: e6:5f:91:76:b7:43:d5:d7:be:40:52:34:2b:1e:52:42:76:78: f7:09:8e:ba:aa:d5:10:4b:89:51:d3:5a:25:35:78:b0:07:9f: ca:de:06:6a:2e:02:d4:21:5f:95:ba:f7:35:ec:63:7b:5f:eb: e8:6b:24:5d:af:6b:4d:70:da:b0:37:7f:88:ae:46:e2:08:62: 12:23:fa:b2:db:7b:b3:fa:b5:06:29:9d:e5:24:29:1d:56:d2: 4d:e9:7b:0b:bf:e8:79:3d:b9:d4:d8:0f:69:8b:d1:f4:16:7a: 90:2b:09:8b:3a:e4:87:61:d2:ed:c4:42:3f:e8:93:b1:e5:bb: e1:a2:36:d6:36:fb:bd:bb:38:a1:d1:49:f0:84:82:11:8b:68: 78:02:3b:f1:79:4e:59:90:b1:25:1c:09:85:9a:88:32:be:53: a9:55:36:57:5b:2b:e0:de:50:24:5f:e9:87:b5:66:a4:76:41: 2b:dd:61:b3:d2:7c:9f:a7:02:ee:4a:5b:0c:0f:81:e5:b3:e1: eb:d5:aa:5b:7d:16:c4:39:83:67:ac:bb:be:7c:6d:10:4c:f0: c7:cf:07:92:ac:4a:56:f0:7c:9b:c1:00:3c:1c:32:cf:68:cf: c0:dd:d8:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQOaezcHfD0ctMqOAx6ucG1xWhT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNTE2MDgwN1oX DTI1MTAxNDE2MTMwN1owMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0Mx QTU4Q0U5MTVGREI4MkMzQzJGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrZBhXY5wwzIgbjG7oZI/lEbL82pKxa8/SLIUyHgnEb/mkSGCWBMDfHGfrC /3o0VfqYxvir4FAzY0QR13p59z92dbPLus3CpuI7HJiQelZo9DdKSZRheaW6qMWb Q7Ix52CNbLI5YyOJ9vBpZiqCkInRru+0Myh5elyWTb8dxh9gzLWRZ1Aj5lNtn7NR s0NF53bVLKQ1qB/9FvYuGontbJM+DEgg1X/BJLrGdWXbuIcZ4HxbIbdBvYr7hq29 mVbn55RuHp6pTz+j9+u74c1FZ2/Mv4ShmJzpFYm+rb7gaFyW27ztWchfYhmtZRdY kD/WEgV1qL1B8y8FQ81VgMQoD5cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK+VjeDs6DCywHwaWM6RX9uCw8L2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZGUwYzM5 LTg0ZDUtNDQwNS05NTRkLTRkM2Q3MTI2OTNjZS8wL0FGOTU4REUwRUNFODMwQjJD MDdDMUE1OENFOTE1RkRCODJDM0MyRjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrBcwDQYJKoZIhvcNAQELBQADggEBAHkxNf2gg3YRjnoeyXV1jQfRxeZfkXa3 Q9XXvkBSNCseUkJ2ePcJjrqq1RBLiVHTWiU1eLAHn8reBmouAtQhX5W69zXsY3tf 6+hrJF2va01w2rA3f4iuRuIIYhIj+rLbe7P6tQYpneUkKR1W0k3pewu/6Hk9udTY D2mL0fQWepArCYs65Idh0u3EQj/ok7Hlu+GiNtY2+727OKHRSfCEghGLaHgCO/F5 TlmQsSUcCYWaiDK+U6lVNldbK+DeUCRf6Ye1ZqR2QSvdYbPSfJ+nAu5KWwwPgeWz 4evVqlt9FsQ5g2esu758bRBM8MfPB5KsSlbwfJvBADwcMs9oz8Dd2MI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:46 2024 by rpki-client on console-ams.rpki-client.org