$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer File: 5058CBC5AF21280546887DEF6CFA4341A8F99150.cer (raw, json) Hash identifier: zaKc+IgCpKNolKux2gD/7xmKBjh5tSAxw1R0WY9X62M= Subject key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E89D6E381B9238FA617BFA4DC0613A859768C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft caRepository: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Sep 2024 00:23:34 +0000 Certificate not after: Tue 16 Sep 2025 00:28:34 +0000 Subordinate resources: IP: 103.3.212.0/22 IP: 150.129.188.0/22 IP: 202.152.192.0/20 IP: 2407:f200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:89:d6:e3:81:b9:23:8f:a6:17:bf:a4:dc:06:13:a8:59:76:8c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 00:23:34 2024 GMT Not After : Sep 16 00:28:34 2025 GMT Subject: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:88:76:95:66:8a:df:94:60:b0:fb:fa:75: c9:50:a5:50:24:e6:47:e5:17:3a:36:a2:7c:05:84: 8b:36:a2:b5:c3:14:db:45:3d:d6:e4:69:7f:01:34: f5:7a:4c:d9:c1:d9:ea:94:34:12:36:c7:bc:78:45: 2e:88:27:5d:a2:ad:87:96:03:37:a3:27:e6:81:d2: 10:39:4c:ec:57:64:a5:e1:41:f9:0b:d7:02:7a:2e: 6b:bb:55:c1:28:c8:8e:2c:0f:c4:f1:ee:96:fb:e1: 4d:b2:79:46:b9:e0:a3:c2:a6:14:ea:9e:c4:fd:a2: 6e:16:20:ef:47:cb:6e:47:93:86:84:b6:c9:21:79: 6a:d9:79:3c:4f:65:d8:43:83:6b:52:0b:54:9b:f9: 47:6c:9e:ed:81:a0:67:fe:87:3f:af:08:8a:ec:2f: 64:d6:1e:4e:c8:34:70:72:cb:e3:09:30:28:ee:ee: af:01:cf:50:aa:6f:f0:de:72:ec:77:a2:ca:52:99: cc:9f:ae:55:9a:2c:18:9d:4b:1d:cc:70:36:b5:b8: c9:12:5e:3c:57:b5:c0:f7:5f:2b:cc:dc:59:36:b0: cf:cb:e1:a1:37:93:06:62:d2:79:99:0f:c0:b9:cd: 15:bf:d1:57:fa:4e:9b:d0:3e:cf:aa:87:fd:df:78: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 150.129.188.0/22 202.152.192.0/20 IPv6: 2407:f200::/32 Signature Algorithm: sha256WithRSAEncryption 82:60:e3:8a:a2:b1:42:43:23:e8:4c:65:e7:13:18:a7:8a:94: 7a:1f:66:b8:f7:78:06:fd:e3:fd:b8:f1:f5:44:10:1a:a4:7c: 0b:be:b2:33:01:b7:ca:3e:12:60:67:11:71:7f:2a:a3:c1:05: 78:bf:88:f7:41:4e:c5:f6:e3:e6:eb:a5:81:3d:6a:f4:1f:58: 73:c6:cf:26:90:3e:f0:04:03:50:d3:21:1b:a3:56:c1:90:ee: 41:61:c9:f2:16:22:d9:e5:45:31:4b:ff:0f:69:fc:f5:3d:54: 08:c4:6b:ad:2e:84:57:69:ab:4a:95:2e:82:d1:b2:4a:cb:33: 86:21:5c:99:84:5a:5a:a3:2e:5a:4a:22:29:00:4c:33:d5:8a: f0:58:a7:15:14:04:f0:01:6a:8b:5f:70:b0:4e:1f:3b:8b:4c: 3c:4d:fb:19:2a:5f:e1:c1:e6:f3:62:3a:5d:87:f5:9f:41:cd: a2:00:1f:f9:e7:b3:5a:e6:f6:f9:94:6e:cd:ee:6f:22:6e:37: dc:1c:6b:a9:0a:68:bb:54:4b:73:97:ce:50:20:31:4d:10:f8: 12:40:c2:80:5c:d0:b2:6f:f2:5e:00:44:ad:64:c4:fb:07:15: 9f:6a:36:9e:bf:14:09:56:9e:f4:30:03:d1:54:53:a3:cb:64: 30:79:26:fa -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUfonW44G5I4+mF7+k3AYTqFl2jFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNzAwMjMzNFoX DTI1MDkxNjAwMjgzNFowMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3 REVGNkNGQTQzNDFBOEY5OTE1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG9iHaVZorflGCw+/p1yVClUCTmR+UXOjaifAWEizaitcMU20U91uRpfwE0 9XpM2cHZ6pQ0EjbHvHhFLognXaKth5YDN6Mn5oHSEDlM7FdkpeFB+QvXAnoua7tV wSjIjiwPxPHulvvhTbJ5Rrngo8KmFOqexP2ibhYg70fLbkeThoS2ySF5atl5PE9l 2EODa1ILVJv5R2ye7YGgZ/6HP68IiuwvZNYeTsg0cHLL4wkwKO7urwHPUKpv8N5y 7HeiylKZzJ+uVZosGJ1LHcxwNrW4yRJePFe1wPdfK8zcWTawz8vhoTeTBmLSeZkP wLnNFb/RV/pOm9A+z6qH/d94lY0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFBYy8WvISgFRoh972z6Q0Go+ZFQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzlj LWRhMTEtNDVlZS1hYWIzLTVjYjE0ZWM0NDcwYy8wLzUwNThDQkM1QUYyMTI4MDU0 Njg4N0RFRjZDRkE0MzQxQThGOTkxNTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAJnA9QDBAKWgbwDBATKmMAwDQQCAAIwBwMFACQH8gAwDQYJKoZIhvcNAQELBQAD ggEBAIJg44qisUJDI+hMZecTGKeKlHofZrj3eAb94/248fVEEBqkfAu+sjMBt8o+ EmBnEXF/KqPBBXi/iPdBTsX24+brpYE9avQfWHPGzyaQPvAEA1DTIRujVsGQ7kFh yfIWItnlRTFL/w9p/PU9VAjEa60uhFdpq0qVLoLRskrLM4YhXJmEWlqjLlpKIikA TDPVivBYpxUUBPABaotfcLBOHzuLTDxN+xkqX+HB5vNiOl2H9Z9BzaIAH/nns1rm 9vmUbs3ubyJuN9wca6kKaLtUS3OXzlAgMU0Q+BJAwoBc0LJv8l4ARK1kxPsHFZ9q Np6/FAlWnvQwA9FUU6PLZDB5Jvo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org