$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer File: A5D12164B9484E51D4BE4B03823526989B147558.cer (raw, json) Hash identifier: uxxbWe3PceZ+Lw9pncrL2n9RogV0lJEmGGoeZrqHOjE= Subject key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B60188273758D2B4A597BCFF0880B89B4E72FAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 May 2024 20:33:48 +0000 Certificate not after: Mon 12 May 2025 20:38:48 +0000 Subordinate resources: IP: 103.190.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:60:18:82:73:75:8d:2b:4a:59:7b:cf:f0:88:0b:89:b4:e7:2f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 13 20:33:48 2024 GMT Not After : May 12 20:38:48 2025 GMT Subject: CN=A5D12164B9484E51D4BE4B03823526989B147558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:18:89:aa:07:5f:c7:59:79:65:05:2c:96: 12:85:5c:51:79:50:dd:48:77:f6:49:e4:eb:ef:42: 5f:59:bc:e5:cf:3c:23:0d:5a:60:a9:8f:60:20:3b: ea:91:68:52:a4:99:51:dd:a3:31:06:0e:9d:b5:3c: 94:49:3c:0d:ed:20:c7:de:0b:db:5d:fd:f9:12:35: 5d:05:ea:c9:87:ae:62:bf:88:a8:eb:2a:62:06:b8: 96:c9:02:1a:22:58:ea:0c:2a:61:04:e9:84:5c:5d: 22:b7:d7:b0:9e:62:0b:06:5a:c0:0c:42:f1:9e:d6: 0b:93:58:28:f0:fb:70:0c:13:4d:89:5b:49:ab:5b: a5:6e:10:f9:33:9a:e1:33:d1:5f:d8:f0:c5:69:d1: 15:fc:85:cd:65:f0:9f:fc:39:40:1a:51:24:3b:87: 09:f4:ef:b4:c4:98:93:1c:38:08:ae:44:f9:45:37: 6b:22:8c:2f:37:aa:9c:c0:49:05:63:fb:e7:4a:b3: 53:ae:2d:f4:09:e5:2b:8f:69:2a:aa:18:e5:b1:1a: af:47:6f:ba:82:e0:55:ca:4d:1b:d1:95:9d:50:8f: f6:f0:50:41:16:40:0c:d5:15:a1:0a:9f:9b:7c:4b: d1:59:03:86:9f:df:3f:bf:b0:dd:c9:22:e6:60:03: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.76.0/23 Signature Algorithm: sha256WithRSAEncryption 30:7d:26:7a:22:fb:5a:77:f0:30:17:29:5c:05:2b:90:a3:57: 7a:fc:99:5f:ab:cb:a1:38:d0:65:f4:8b:0c:80:af:b7:47:fb: 31:3c:75:7a:5e:ec:3f:dc:86:27:f4:9f:9d:f1:a4:5d:93:95: 06:85:96:c8:7c:7e:27:5c:99:4b:ef:72:4b:61:d1:4f:ed:af: 86:13:71:4a:7a:e7:c0:75:fb:24:ef:b3:85:07:be:af:f1:da: 8a:3e:68:f1:a9:ec:ff:2d:4b:a3:9e:ad:b7:4f:1a:3f:31:5e: db:31:c1:ae:17:86:39:a0:9a:d0:18:ae:e6:99:60:fa:d2:b4: dd:1c:31:76:a1:6d:b7:7a:09:4f:c3:83:94:e9:68:59:94:b5: 7b:19:dd:ad:40:4d:db:76:09:20:bb:dc:d8:bb:28:89:c2:71: 2e:28:c1:af:f5:5d:08:47:9a:1b:55:5e:fa:32:de:9b:32:a5: 9c:7a:69:67:c9:c8:34:7c:0f:c4:5c:91:85:f6:7d:c9:92:f1: f6:d1:7d:dd:29:a2:ed:ed:6c:a4:ef:09:11:4f:49:2b:cb:61: 64:9e:e8:8b:0a:b9:2f:76:27:bc:4f:bc:ea:cb:8f:28:8d:be: 24:ba:11:25:38:de:3d:31:ed:1d:3f:db:c0:23:82:be:b1:3d: ff:79:f5:d1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG2AYgnN1jStKWXvP8IgLibTnL64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMzIwMzM0OFoX DTI1MDUxMjIwMzg0OFowMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0 QjAzODIzNTI2OTg5QjE0NzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG1GImqB1/HWXllBSyWEoVcUXlQ3Uh39knk6+9CX1m85c88Iw1aYKmPYCA7 6pFoUqSZUd2jMQYOnbU8lEk8De0gx94L2139+RI1XQXqyYeuYr+IqOsqYga4lskC GiJY6gwqYQTphFxdIrfXsJ5iCwZawAxC8Z7WC5NYKPD7cAwTTYlbSatbpW4Q+TOa 4TPRX9jwxWnRFfyFzWXwn/w5QBpRJDuHCfTvtMSYkxw4CK5E+UU3ayKMLzeqnMBJ BWP750qzU64t9AnlK49pKqoY5bEar0dvuoLgVcpNG9GVnVCP9vBQQRZADNUVoQqf m3xL0VkDhp/fP7+w3cki5mADd9MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKXRIWS5SE5R1L5LA4I1JpibFHVYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2Nm LTMyN2UtNDJiZC05YjMxLTBhODczZDJlNjY5Mi8wL0E1RDEyMTY0Qjk0ODRFNTFE NEJFNEIwMzgyMzUyNjk4OUIxNDc1NTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvkwwDQYJKoZIhvcNAQELBQADggEBADB9Jnoi+1p38DAXKVwFK5CjV3r8mV+r y6E40GX0iwyAr7dH+zE8dXpe7D/chif0n53xpF2TlQaFlsh8fidcmUvvckth0U/t r4YTcUp658B1+yTvs4UHvq/x2oo+aPGp7P8tS6OerbdPGj8xXtsxwa4XhjmgmtAY ruaZYPrStN0cMXahbbd6CU/Dg5TpaFmUtXsZ3a1ATdt2CSC73Ni7KInCcS4owa/1 XQhHmhtVXvoy3psypZx6aWfJyDR8D8RckYX2fcmS8fbRfd0pou3tbKTvCRFPSSvL YWSe6IsKuS92J7xPvOrLjyiNviS6ESU43j0x7R0/28Ajgr6xPf959dE= -----END CERTIFICATE-----Generated at Mon May 27 22:50:26 2024 by rpki-client on console-ams.rpki-client.org