$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer (raw, json) Hash identifier: O2o+pLSRuU1Infbd2bw1LRKOjL0xsuqTNBXPvPlnyrc= Subject key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 682AC7935F272C62BF56F15BAB202B1F36EF05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft caRepository: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 01:14:28 +0000 Certificate not after: Mon 29 Jul 2024 01:19:28 +0000 Subordinate resources: IP: 103.153.40.0/23 IP: 2406:3e40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2a:c7:93:5f:27:2c:62:bf:56:f1:5b:ab:20:2b:1f:36:ef:05:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 01:14:28 2023 GMT Not After : Jul 29 01:19:28 2024 GMT Subject: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:bc:9e:40:1f:06:23:99:dd:c5:e0:d4:d7: 4c:ac:98:15:1e:58:5d:e3:56:35:07:a6:bf:17:98: b0:59:a0:d3:fb:0a:07:1c:8c:cf:d1:dc:77:38:34: 02:e3:40:b8:bf:a4:3b:c7:ac:b0:72:43:84:03:46: fc:1f:f8:74:81:ae:ff:ad:9f:74:46:ba:b4:2f:11: 4c:f8:58:f7:dd:c4:d1:26:ec:a8:93:4a:e2:bc:16: eb:dd:20:46:c8:f3:98:aa:1c:e6:94:e0:8a:3c:4c: 30:37:9e:33:0d:a4:cd:74:f4:6c:22:bc:6e:a4:f8: 2e:8e:e9:f5:b1:f8:8b:eb:86:03:be:2e:7e:d4:18: 26:e5:b7:37:43:c9:dd:c5:ba:6e:8d:9d:e1:4e:3f: 4f:9a:b0:be:f4:e8:3e:9a:70:75:c9:f4:43:44:31: e4:3b:b1:01:fb:b8:95:f1:23:ec:d1:3f:39:5d:bb: 0d:38:ef:2e:5b:10:cb:66:b8:d6:15:d6:de:a7:9b: 23:74:3f:16:1d:7f:51:90:27:8c:84:47:38:4a:4c: 53:49:01:6f:dc:60:99:ca:90:39:7f:60:e1:fc:c4: 4f:d0:b0:ba:a6:cc:43:0a:32:71:ce:d8:21:1a:48: 0f:21:e7:66:ba:ec:a7:f7:b6:50:ec:4f:61:73:3c: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.40.0/23 IPv6: 2406:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 66:96:d6:2c:ac:85:f3:eb:6e:a1:a4:f1:a1:ce:70:3b:9e:a8: dc:c7:32:bc:92:e7:bb:dd:02:7b:0c:b5:91:b2:62:64:8f:a9: d0:b5:9e:89:a9:e4:dc:71:db:09:f5:59:47:d4:de:42:bb:fc: 72:06:a9:43:6d:07:93:05:5a:33:35:18:bf:f2:e0:06:e2:66: 19:32:57:2b:27:7a:17:c0:54:dd:24:0a:56:42:26:1a:aa:13: a9:68:92:8e:cc:24:0c:6f:17:c1:b3:c0:09:43:53:e9:29:12: e3:39:6b:40:47:95:f1:72:52:0b:2a:d7:17:b7:65:eb:cb:b5: 1b:24:76:39:a7:2d:76:c0:24:c8:2d:66:d7:53:ed:cf:e4:61: 81:ac:0b:16:bb:79:6d:93:20:48:e9:60:01:a7:9f:98:4c:ff: 3a:33:1e:7a:80:19:c9:18:fc:ee:4a:b3:10:51:e2:29:ec:ab: 5d:0f:76:61:f9:c1:41:72:ca:61:04:b9:a5:dc:b3:6f:44:67: 64:56:36:09:a5:e0:cf:d6:ae:e0:ac:e2:b7:42:be:fb:ef:21: d0:37:13:b3:f5:3a:9d:49:d0:6b:7a:2d:74:1e:61:5d:8c:ac: cc:fd:55:ed:49:7c:09:b4:81:d4:79:9c:e0:9f:93:95:41:5a: c9:87:1a:8d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaCrHk18nLGK/VvFbqyArHzbvBf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAxMTQyOFoX DTI0MDcyOTAxMTkyOFowMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1 OUE3RUQyOEE3OUREMEM3OTk0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM9vJ5AHwYjmd3F4NTXTKyYFR5YXeNWNQemvxeYsFmg0/sKBxyMz9Hcdzg0 AuNAuL+kO8essHJDhANG/B/4dIGu/62fdEa6tC8RTPhY993E0SbsqJNK4rwW690g RsjzmKoc5pTgijxMMDeeMw2kzXT0bCK8bqT4Lo7p9bH4i+uGA74uftQYJuW3N0PJ 3cW6bo2d4U4/T5qwvvToPppwdcn0Q0Qx5DuxAfu4lfEj7NE/OV27DTjvLlsQy2a4 1hXW3qebI3Q/Fh1/UZAnjIRHOEpMU0kBb9xgmcqQOX9g4fzET9CwuqbMQwoycc7Y IRpIDyHnZrrsp/e2UOxPYXM8OxUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFsSIQPTwccwrs5Zp+0op53Qx5lIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxNzJlZWY5 LWVjNmEtNDU1OC04MTgxLWExMWZlNjViOGZmOC8wLzVCMTIyMTAzRDNDMUM3MzBB RUNFNTlBN0VEMjhBNzlERDBDNzk5NDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmSgwDQQCAAIwBwMFACQGPkAwDQYJKoZIhvcNAQELBQADggEBAGaW1iyshfPr bqGk8aHOcDueqNzHMryS57vdAnsMtZGyYmSPqdC1nomp5Nxx2wn1WUfU3kK7/HIG qUNtB5MFWjM1GL/y4AbiZhkyVysnehfAVN0kClZCJhqqE6loko7MJAxvF8GzwAlD U+kpEuM5a0BHlfFyUgsq1xe3ZevLtRskdjmnLXbAJMgtZtdT7c/kYYGsCxa7eW2T IEjpYAGnn5hM/zozHnqAGckY/O5KsxBR4insq10PdmH5wUFyymEEuaXcs29EZ2RW Ngml4M/WruCs4rdCvvvvIdA3E7P1Op1J0Gt6LXQeYV2MrMz9Ve1JfAm0gdR5nOCf k5VBWsmHGo0= -----END CERTIFICATE-----Generated at Tue Apr 30 21:36:15 2024 by rpki-client on console-fra.rpki-client.org