$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer File: 05BC764F85F9F88CE41FD879C6125E65117E8E79.cer (raw, json) Hash identifier: H05eydCbh84qKoVvoFMeqXtSyX7XpilpVXJdBnEkok4= Subject key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40A45E8930FED3A50ADA88D0767B0AF9A52129C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft caRepository: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 16:38:33 +0000 Certificate not after: Mon 30 Jun 2025 16:43:33 +0000 Subordinate resources: IP: 103.65.238.0/24 IP: 103.96.116.0/24 IP: 103.96.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:5e:89:30:fe:d3:a5:0a:da:88:d0:76:7b:0a:f9:a5:21:29:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 16:38:33 2024 GMT Not After : Jun 30 16:43:33 2025 GMT Subject: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:7a:5e:e0:93:04:c6:36:e2:ac:37:3a:67: 04:c9:f7:70:16:3b:c2:40:b1:ee:ed:cb:d1:27:cb: 93:92:14:d4:aa:71:61:97:79:b4:68:b7:50:30:b7: 67:5a:b2:9a:a6:23:03:26:52:cc:6c:c1:37:25:f8: b2:01:1b:89:9a:a9:a8:e4:be:59:a2:2a:fa:a0:6d: 4f:14:8c:75:ab:f6:d0:30:1c:66:8e:3e:62:39:5e: ab:ea:bb:83:b9:19:2d:1c:3d:d3:b1:c5:54:cc:6d: d1:81:eb:97:c9:c0:45:bd:a3:f4:09:d1:72:d8:73: 5a:dc:b8:d3:f4:42:31:cf:e8:85:c6:37:11:ce:a1: e4:2d:ea:d5:e2:8a:8c:d9:7a:43:ad:47:1d:52:03: 3b:85:e3:f6:3f:e9:57:d6:bc:7c:c4:c9:76:ff:f2: 43:07:f2:38:1b:9c:47:09:e2:16:b2:81:6b:f3:0b: 8c:9c:c1:4c:ce:68:c0:e3:f6:b5:53:09:2a:b6:e9: f5:ef:a7:53:a3:d8:ce:06:33:e8:36:7e:c3:22:75: 67:00:fb:cb:9a:aa:4b:5e:fd:b2:8b:3e:1a:cb:a6: c3:93:89:65:91:c5:78:55:46:2b:88:f3:8d:80:f6: d4:f6:04:9b:00:a9:fe:87:97:44:a4:0c:67:f8:90: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.238.0/24 103.96.116.0/24 103.96.118.0/23 Signature Algorithm: sha256WithRSAEncryption 41:e7:b5:8d:35:38:11:18:28:21:c0:9b:4e:b0:ea:71:05:6b: af:8c:b2:ad:77:bb:4b:e0:38:48:85:99:c3:10:2f:a2:4a:a4: 44:92:d9:32:99:f6:7b:50:72:db:62:30:9f:76:11:13:25:ef: bc:ad:c9:d9:02:15:55:f9:10:17:64:db:dd:69:55:b4:35:3c: 19:5b:88:44:4d:5b:64:59:40:d6:fe:f1:7d:04:3c:56:57:3a: 0b:22:30:7b:4b:3b:9b:da:e5:3e:69:d4:44:61:e2:78:78:86: df:a6:30:84:1e:96:84:c7:ac:68:a6:80:aa:25:c6:46:c3:fb: db:4f:57:8c:22:18:ef:54:0d:0d:6a:c4:ac:03:72:48:4c:64: bb:81:73:53:e7:b3:bb:3d:42:23:f6:67:ca:e1:b1:4c:c7:e6: a6:36:66:fe:72:7b:85:b9:22:89:3e:c1:9e:2f:a9:a3:6a:ce: b1:03:9f:b4:94:e0:3f:68:4b:63:86:33:fa:ad:d3:47:96:a4: 8d:80:ca:3b:64:55:7a:e2:e5:16:88:8d:15:55:91:7f:1d:56: 2c:7a:a4:b3:3a:cf:54:a9:78:45:ff:68:f5:89:7b:9f:23:37: a2:68:b4:71:5c:dd:00:b1:12:ea:05:6a:79:cb:d1:27:94:8d: f6:4f:af:21 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUQKReiTD+06UK2ojQdnsK+aUhKcEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MzgzM1oX DTI1MDYzMDE2NDMzM1owMzExMC8GA1UEAxMoMDVCQzc2NEY4NUY5Rjg4Q0U0MUZE ODc5QzYxMjVFNjUxMTdFOEU3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSGel7gkwTGNuKsNzpnBMn3cBY7wkCx7u3L0SfLk5IU1KpxYZd5tGi3UDC3 Z1qymqYjAyZSzGzBNyX4sgEbiZqpqOS+WaIq+qBtTxSMdav20DAcZo4+Yjleq+q7 g7kZLRw907HFVMxt0YHrl8nARb2j9AnRcthzWty40/RCMc/ohcY3Ec6h5C3q1eKK jNl6Q61HHVIDO4Xj9j/pV9a8fMTJdv/yQwfyOBucRwniFrKBa/MLjJzBTM5owOP2 tVMJKrbp9e+nU6PYzgYz6DZ+wyJ1ZwD7y5qqS179sos+Gsumw5OJZZHFeFVGK4jz jYD21PYEmwCp/oeXRKQMZ/iQuAkCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAW8dk+F+fiM5B/YecYSXmURfo55MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMWMxZDU2ZS0xNWM2LTRiNjUtYTlhOC1mOTBhZDZmYmEwOTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExYzFkNTZl LTE1YzYtNGI2NS1hOWE4LWY5MGFkNmZiYTA5MC8wLzA1QkM3NjRGODVGOUY4OENF NDFGRDg3OUM2MTI1RTY1MTE3RThFNzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BABnQe4DBABnYHQDBAFnYHYwDQYJKoZIhvcNAQELBQADggEBAEHntY01OBEYKCHA m06w6nEFa6+Msq13u0vgOEiFmcMQL6JKpESS2TKZ9ntQcttiMJ92ERMl77ytydkC FVX5EBdk291pVbQ1PBlbiERNW2RZQNb+8X0EPFZXOgsiMHtLO5va5T5p1ERh4nh4 ht+mMIQeloTHrGimgKolxkbD+9tPV4wiGO9UDQ1qxKwDckhMZLuBc1Pns7s9QiP2 Z8rhsUzH5qY2Zv5ye4W5Iok+wZ4vqaNqzrEDn7SU4D9oS2OGM/qt00eWpI2Ayjtk VXri5RaIjRVVkX8dVix6pLM6z1SpeEX/aPWJe58jN6JotHFc3QCxEuoFannL0SeU jfZPryE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org