$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer (raw, json) Hash identifier: 4JTD3HaR8w9P9OVW1pLXQaJ2YLYNRO3BS5ObxQYgrhQ= Subject key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A3ED6BE78E49A7409AA2E67D486C99D69B62634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft caRepository: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Oct 2023 19:13:48 +0000 Certificate not after: Tue 15 Oct 2024 19:18:48 +0000 Subordinate resources: AS: 136102 AS: 137286 IP: 49.128.188.0/22 IP: 103.10.148.0/22 IP: 103.90.248.0/22 IP: 2001:df0:e900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3e:d6:be:78:e4:9a:74:09:aa:2e:67:d4:86:c9:9d:69:b6:26:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 19:13:48 2023 GMT Not After : Oct 15 19:18:48 2024 GMT Subject: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:64:1b:e7:a0:2b:03:3a:74:39:f1:86:3c: b9:c8:73:fa:4b:3d:8e:e2:d7:03:1c:eb:d3:60:36: 4c:fb:c9:3c:40:80:54:7b:01:08:28:77:9b:86:e2: 53:67:12:7d:1f:23:3a:f1:46:74:bd:75:69:8e:1d: 7d:e4:06:c5:17:82:89:b4:ba:c5:79:48:9b:79:b4: 4f:c0:27:cb:de:a6:e6:f1:4d:0d:20:c1:19:3b:ed: 94:c4:f3:2b:a8:e6:48:1a:ae:3a:57:36:a8:3b:7b: 52:28:ed:72:aa:8e:97:5d:ac:9b:af:29:ed:bd:8d: 60:a5:07:25:bd:9b:2e:af:01:3e:73:91:b7:e8:d6: 06:e9:b0:53:9e:de:9b:2a:30:fd:3b:a5:cd:60:fb: b7:c4:88:5c:31:e9:7c:e6:1c:63:36:9e:13:06:e9: 8b:8b:5b:fd:fd:75:fa:dc:77:25:19:3f:23:65:b1: 2c:1f:ab:75:97:f7:50:b1:9f:9f:b4:e9:16:8e:52: 5a:24:f2:94:7c:a6:2d:08:4e:b9:ec:cc:af:ee:4b: 03:25:e9:2e:10:a2:db:48:36:89:1f:d9:b7:ad:bd: 0f:6c:0e:9e:ec:cd:b5:d5:cd:c8:e0:df:ad:8d:6c: bd:34:be:73:ca:e3:42:6f:b4:5c:8c:91:b9:4b:00: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 103.10.148.0/22 103.90.248.0/22 IPv6: 2001:df0:e900::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 136102 137286 Signature Algorithm: sha256WithRSAEncryption 50:4e:0f:88:dc:99:b9:68:c0:60:e3:dc:f9:2e:99:ae:65:e6: fb:c8:bb:ee:a7:4b:76:c7:61:1c:92:53:6e:a7:81:16:59:6d: cc:7f:7f:c0:9d:4c:e9:67:99:f3:76:a4:33:33:8f:be:08:24: c0:1a:9c:d4:ad:97:ba:59:79:13:9d:5a:4c:6d:e6:31:a5:f5: c7:8a:75:ce:e6:e5:66:01:7b:aa:35:a9:31:c7:98:54:8b:0d: f9:0f:f2:c8:65:45:33:02:58:cc:c0:bc:c6:fd:fa:05:64:da: e6:96:59:a8:af:fa:1d:87:81:bf:b0:27:ff:f9:cc:22:2f:85: 0b:35:d8:0e:04:e1:68:1c:f1:78:48:5c:18:30:87:30:2b:52: 50:18:11:76:48:ed:3d:6e:1f:7e:a9:0e:ce:7a:d1:39:eb:43: bf:8d:1e:b8:22:be:6b:29:ae:d7:91:a2:4a:71:2b:3c:cc:e9: b7:d6:6f:49:d6:d4:fb:53:3b:fd:c4:27:79:e9:9a:f3:30:32: 2b:e3:01:1a:3c:e2:e2:2f:ee:30:c9:4f:a7:79:54:73:dd:ba: 9a:e2:24:ec:e5:0c:8e:84:79:1d:86:b7:ab:f4:df:49:5b:61: 4b:3e:85:f6:a2:72:35:34:cf:3f:57:1b:88:de:02:ea:37:eb: 3a:7b:85:36 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUKj7WvnjkmnQJqi5n1IbJnWm2JjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNzE5MTM0OFoX DTI0MTAxNTE5MTg0OFowMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0Ez MkUzODJEMkMwODNFMTczRTcxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQ6ZBvnoCsDOnQ58YY8uchz+ks9juLXAxzr02A2TPvJPECAVHsBCCh3m4bi U2cSfR8jOvFGdL11aY4dfeQGxReCibS6xXlIm3m0T8Any96m5vFNDSDBGTvtlMTz K6jmSBquOlc2qDt7UijtcqqOl12sm68p7b2NYKUHJb2bLq8BPnORt+jWBumwU57e myow/TulzWD7t8SIXDHpfOYcYzaeEwbpi4tb/f11+tx3JRk/I2WxLB+rdZf3ULGf n7TpFo5SWiTylHymLQhOuezMr+5LAyXpLhCi20g2iR/Zt629D2wOnuzNtdXNyODf rY1svTS+c8rjQm+0XIyRuUsAmQkCAwEAAaOCAvYwggLyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF8ewDeMezqJEsoy44LSwIPhc+ccMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1 LWZiMGMtNGEyNC05ODg5LTMzYmQ1MGRiNGZlMC8wLzVGMUVDMDM3OEM3QjNBODkx MkNBMzJFMzgyRDJDMDgzRTE3M0U3MUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BAIxgLwDBAJnCpQDBAJnWvgwDwQCAAIwCQMHACABDfDpADAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMCE6YCAwIYRjANBgkqhkiG9w0BAQsFAAOCAQEAUE4PiNyZuWjA YOPc+S6ZrmXm+8i77qdLdsdhHJJTbqeBFlltzH9/wJ1M6WeZ83akMzOPvggkwBqc 1K2Xull5E51aTG3mMaX1x4p1zublZgF7qjWpMceYVIsN+Q/yyGVFMwJYzMC8xv36 BWTa5pZZqK/6HYeBv7An//nMIi+FCzXYDgThaBzxeEhcGDCHMCtSUBgRdkjtPW4f fqkOznrROetDv40euCK+aymu15GiSnErPMzpt9ZvSdbU+1M7/cQneema8zAyK+MB Gjzi4i/uMMlPp3lUc926muIk7OUMjoR5HYa3q/TfSVthSz6F9qJyNTTPP1cbiN4C 6jfrOnuFNg== -----END CERTIFICATE-----Generated at Fri May 3 03:08:27 2024 by rpki-client on console-ams.rpki-client.org