$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer (raw, json) Hash identifier: WoKACoYj72amlCvpOQu3k09jUqtWoVeicbF/l7q1y24= Subject key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 39D9A245455E8CAD7CD1B9495424E351FC8A57B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft caRepository: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 09:19:12 +0000 Certificate not after: Mon 29 Jul 2024 09:24:12 +0000 Subordinate resources: IP: 103.148.110.0/23 IP: 2405:cec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d9:a2:45:45:5e:8c:ad:7c:d1:b9:49:54:24:e3:51:fc:8a:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:19:12 2023 GMT Not After : Jul 29 09:24:12 2024 GMT Subject: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:e3:78:ba:ef:1b:51:d7:42:20:d1:6d:a4: fb:28:86:54:d2:78:8e:57:8a:42:fe:2f:0c:f8:75: 35:0b:dd:16:90:e9:68:f4:38:16:15:87:09:10:51: 1c:9f:d7:c5:af:61:ef:6b:67:9c:ab:6f:c6:c0:ac: 11:90:47:75:d2:c1:b1:c6:8b:76:48:67:9d:5d:06: d2:c3:58:f4:4e:c1:99:df:63:3e:99:99:90:fb:29: 7f:c1:4f:fc:2c:8e:8f:45:04:91:56:35:df:9e:88: 41:3c:96:f9:06:93:13:2d:7e:5f:29:29:c4:59:d5: 0a:c9:b4:4b:5a:65:32:03:fa:44:5a:fa:3b:19:f8: 3b:c0:3f:99:40:b2:aa:a9:b2:1a:91:07:42:04:f1: f1:13:0d:cd:98:b2:3c:3e:c0:79:8f:01:b8:50:89: ef:1f:37:20:fa:51:7a:48:b8:31:c3:93:56:58:20: 3a:b5:47:55:17:08:cc:12:ee:92:6d:41:d2:a9:35: ed:8e:32:cd:6a:0b:70:3b:d4:75:41:5c:64:6a:ab: 27:30:16:d3:5e:ed:ba:11:4c:4c:d8:ac:da:c3:b9: 97:e3:84:f8:28:ca:83:8b:58:79:e5:ef:5e:b3:f7: 5e:a3:d5:53:8b:c2:c6:6c:76:5d:4e:1c:a8:e6:87: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.110.0/23 IPv6: 2405:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 45:25:1d:16:36:ec:39:c6:06:6b:8e:d7:4f:42:b4:88:6e:90: bc:c4:3a:61:fd:2a:82:97:97:ea:8d:b7:5a:e1:d8:25:11:78: 5c:12:35:89:64:c3:d9:a5:11:4b:1e:0e:02:09:81:7f:cc:63: 7c:49:59:35:b1:70:23:cb:37:0f:8a:ca:b0:c4:19:09:6c:75: be:8d:d0:31:20:ae:d0:0d:7a:e0:fe:dc:a5:d9:30:38:f0:a8: fc:a9:28:c2:fe:76:e5:24:04:54:58:2f:7c:10:6c:11:d8:64: 89:43:b6:14:79:29:d0:3c:f0:63:9a:b7:b4:6e:39:3a:ee:02: 7e:8d:c7:74:61:f4:9a:99:30:50:2e:77:12:57:cf:be:ef:a2: 03:5e:2f:67:59:3e:3a:99:e4:20:7e:3d:98:af:9d:1b:bc:ee: c2:ae:75:0f:62:6f:d7:bd:c2:eb:21:dd:29:1f:23:b8:4c:7d: a0:1f:f3:ed:42:ac:84:38:0c:07:db:3f:5b:8f:85:0b:ff:c8: b5:ae:1c:4f:47:45:77:43:ff:11:b0:e3:f5:e2:ce:e7:9a:46: 64:5f:b0:d9:83:ba:e5:e9:95:c2:68:5a:f4:95:2b:e7:52:ee: 78:b8:2d:c3:09:eb:7d:7a:dc:eb:72:4c:f3:58:be:0d:31:a0: 3c:8b:9e:98 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUOdmiRUVejK180blJVCTjUfyKV7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA5MTkxMloX DTI0MDcyOTA5MjQxMlowMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZC REJFNzE4Qjk0OTUwMUQ5N0RDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKet43i67xtR10Ig0W2k+yiGVNJ4jleKQv4vDPh1NQvdFpDpaPQ4FhWHCRBR HJ/Xxa9h72tnnKtvxsCsEZBHddLBscaLdkhnnV0G0sNY9E7Bmd9jPpmZkPspf8FP /CyOj0UEkVY1356IQTyW+QaTEy1+XykpxFnVCsm0S1plMgP6RFr6Oxn4O8A/mUCy qqmyGpEHQgTx8RMNzZiyPD7AeY8BuFCJ7x83IPpReki4McOTVlggOrVHVRcIzBLu km1B0qk17Y4yzWoLcDvUdUFcZGqrJzAW017tuhFMTNis2sO5l+OE+CjKg4tYeeXv XrP3XqPVU4vCxmx2XU4cqOaHVnkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/N+qq4SQWGjU+9vnGLlJUB2X3EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3 LWFjZDMtNDI3Yy1iNWU3LWRiMzkxN2YxODVjOC8wLzVGQ0RGQUFBQjg0OTA1ODY4 RDRGQkRCRTcxOEI5NDk1MDFEOTdEQzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlG4wDQQCAAIwBwMFACQFzsAwDQYJKoZIhvcNAQELBQADggEBAEUlHRY27DnG BmuO109CtIhukLzEOmH9KoKXl+qNt1rh2CUReFwSNYlkw9mlEUseDgIJgX/MY3xJ WTWxcCPLNw+KyrDEGQlsdb6N0DEgrtANeuD+3KXZMDjwqPypKML+duUkBFRYL3wQ bBHYZIlDthR5KdA88GOat7RuOTruAn6Nx3Rh9JqZMFAudxJXz77vogNeL2dZPjqZ 5CB+PZivnRu87sKudQ9ib9e9wush3SkfI7hMfaAf8+1CrIQ4DAfbP1uPhQv/yLWu HE9HRXdD/xGw4/XizueaRmRfsNmDuuXplcJoWvSVK+dS7ni4LcMJ63163OtyTPNY vg0xoDyLnpg= -----END CERTIFICATE-----Generated at Thu May 2 20:47:23 2024 by rpki-client on console-fra.rpki-client.org