$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer (raw, json) Hash identifier: mWqds7j0QBv18zWKFFW9LyQ3Kt7IXEP1M4y2BkDXPIA= Subject key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73414C2CA603A47CA86FCAC0F667D9CAA89BBBF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft caRepository: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 05:23:18 +0000 Certificate not after: Mon 29 Jul 2024 05:28:18 +0000 Subordinate resources: IP: 103.23.232.0/23 IP: 103.81.100.0/23 IP: 2405:1e40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:41:4c:2c:a6:03:a4:7c:a8:6f:ca:c0:f6:67:d9:ca:a8:9b:bb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 05:23:18 2023 GMT Not After : Jul 29 05:28:18 2024 GMT Subject: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:54:3c:25:03:e2:b8:c9:ea:ac:55:39:f6: 12:2d:fa:b8:7c:81:9a:97:8f:c0:bc:1b:14:b8:84: 45:37:f7:ac:55:aa:46:b1:2d:3e:4f:f4:28:c3:07: e2:e6:6d:4c:4c:c8:f1:4c:26:c3:6e:ab:e5:96:48: 9a:91:40:1d:65:81:ba:f0:47:41:3e:96:fb:cd:1d: 74:21:6d:35:cd:bb:ac:06:3e:53:fc:aa:c3:6e:93: 6e:7f:40:0a:7a:70:e1:7e:76:32:ea:39:48:ee:f6: a8:05:d9:4f:2f:59:10:2d:d9:2e:b8:39:a7:9b:c6: bc:a4:84:be:dd:c3:07:57:6e:45:5d:3b:7a:6d:08: ec:19:7a:f3:2f:93:d5:60:27:39:50:8e:16:00:5d: c8:11:45:bd:cf:53:a1:84:e8:ee:f2:5f:7c:11:96: b1:be:f1:00:36:ab:16:45:db:c5:25:ec:e1:04:bf: bb:f3:31:4e:f0:d8:4b:af:0a:44:cc:1f:db:8a:d2: 31:26:3a:7d:dc:1e:cd:9c:8d:b5:b5:ce:10:7a:f8: 73:64:75:b0:8f:f7:94:d9:83:13:3d:7a:3f:cf:74: 1b:26:28:d1:4b:c0:4c:c4:5d:e7:54:da:d4:0f:1c: d0:3b:f4:f0:a8:e7:2f:77:bf:30:9a:b6:f1:d5:04: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.232.0/23 103.81.100.0/23 IPv6: 2405:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 7b:23:49:02:39:39:b4:29:27:5d:15:94:86:a0:d0:2c:9a:bc: f8:a8:51:95:7e:84:84:ef:df:40:9f:40:70:41:d3:4a:b0:af: 35:04:4e:ee:fa:32:3b:51:af:22:e9:ed:0a:50:98:52:0b:0e: bb:77:93:21:7b:53:10:bb:dd:ff:29:18:fe:36:dc:53:aa:eb: b2:22:ef:dd:81:28:fb:b6:39:72:ba:08:10:51:ce:a3:27:76: 82:09:ac:60:0d:34:ac:ff:cf:0c:32:7a:d2:b9:22:be:13:43: eb:b9:57:d8:4b:43:7e:e5:ac:75:0c:66:49:1a:06:35:9e:d8: 42:58:37:f0:7f:57:c0:e8:28:59:ab:d3:eb:fa:5a:bb:66:e3: 50:2c:36:5c:b5:21:37:ca:fe:97:50:08:97:78:a2:ee:58:e3: c2:0a:16:48:11:e3:ce:52:e7:4b:ff:c4:8d:36:1a:d3:1a:8b: 0c:98:77:c7:c3:d0:4d:88:7d:24:3b:7c:3f:4a:16:95:b8:67: 5d:7e:b4:b5:52:74:e6:73:58:79:24:bb:6e:37:1c:4c:f3:f2: 51:3f:b3:43:26:80:9e:14:ca:87:3e:12:fb:c3:91:3b:fb:df: 36:c0:25:f8:98:4f:b6:e2:0f:d0:10:dd:9f:f7:aa:50:af:29: 93:11:54:9e -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUc0FMLKYDpHyob8rA9mfZyqibu/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA1MjMxOFoX DTI0MDcyOTA1MjgxOFowMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5 NzdDRjRBQzY1OTZGREQ5N0I5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuoVDwlA+K4yeqsVTn2Ei36uHyBmpePwLwbFLiERTf3rFWqRrEtPk/0KMMH 4uZtTEzI8Uwmw26r5ZZImpFAHWWBuvBHQT6W+80ddCFtNc27rAY+U/yqw26Tbn9A Cnpw4X52Muo5SO72qAXZTy9ZEC3ZLrg5p5vGvKSEvt3DB1duRV07em0I7Bl68y+T 1WAnOVCOFgBdyBFFvc9ToYTo7vJffBGWsb7xADarFkXbxSXs4QS/u/MxTvDYS68K RMwf24rSMSY6fdwezZyNtbXOEHr4c2R1sI/3lNmDEz16P890GyYo0UvATMRd51Ta 1A8c0Dv08KjnL3e/MJq28dUEwxcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUeN1I7BbFmt96XfPSsZZb92XuYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0 LWNkYWMtNDFjZi04ODU4LWQ3NDEwZjY0ZDE1NS8wL0E1MUUzNzUyM0IwNUIxNjZC N0RFOTc3Q0Y0QUM2NTk2RkREOTdCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAFnF+gDBAFnUWQwDQQCAAIwBwMFACQFHkAwDQYJKoZIhvcNAQELBQADggEBAHsj SQI5ObQpJ10VlIag0CyavPioUZV+hITv30CfQHBB00qwrzUETu76MjtRryLp7QpQ mFILDrt3kyF7UxC73f8pGP423FOq67Ii792BKPu2OXK6CBBRzqMndoIJrGANNKz/ zwwyetK5Ir4TQ+u5V9hLQ37lrHUMZkkaBjWe2EJYN/B/V8DoKFmr0+v6Wrtm41As Nly1ITfK/pdQCJd4ou5Y48IKFkgR485S50v/xI02GtMaiwyYd8fD0E2IfSQ7fD9K FpW4Z11+tLVSdOZzWHkku243HEzz8lE/s0MmgJ4Uyoc+EvvDkTv73zbAJfiYT7bi D9AQ3Z/3qlCvKZMRVJ4= -----END CERTIFICATE-----Generated at Wed May 1 22:05:35 2024 by rpki-client on console-fra.rpki-client.org