$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer File: 516450A151C5487FCC5911F4C18941CA895B07A5.cer (raw, json) Hash identifier: itoJXt8HsTcocvLRD+Qd8W6Y0rVrnO7Ts79LjIxGQRI= Subject key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78F14968ABC5A2C5CCC53BC8FBA5509C94F186E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Aug 2023 17:57:31 +0000 Certificate not after: Fri 23 Aug 2024 18:02:31 +0000 Subordinate resources: IP: 103.144.18.0/23 IP: 2405:62c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f1:49:68:ab:c5:a2:c5:cc:c5:3b:c8:fb:a5:50:9c:94:f1:86:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 17:57:31 2023 GMT Not After : Aug 23 18:02:31 2024 GMT Subject: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:59:5f:f2:32:1f:e0:4a:f9:c2:e1:62:54: 9f:c9:ea:86:7b:2b:34:57:93:2e:a6:bc:19:79:d1: 75:85:4f:d8:27:a8:f4:34:cb:46:5c:6e:06:e3:b6: 1d:38:f2:7d:cf:aa:3e:f9:cf:f1:5b:09:e5:48:f6: 19:11:e9:ba:a7:38:2c:17:8a:b0:e7:0c:ce:8a:5c: 6e:fe:44:7e:41:cc:fd:2d:0c:3f:f8:9d:22:b7:0e: 75:c1:d8:8b:0a:ea:c7:d9:87:50:51:15:0b:4b:60: 9a:91:74:3d:d2:f3:89:a8:8f:db:5d:36:50:98:c6: 63:28:c8:74:25:bc:89:2a:12:39:f7:e8:18:de:94: 1e:b3:57:6d:94:43:f5:9c:82:02:c7:d2:c1:ff:0e: f1:b4:a9:a5:82:eb:b2:b4:88:fa:7e:6b:12:3b:6a: 80:6d:e8:18:3a:d0:0b:60:07:a7:ed:f2:89:c8:e7: 68:33:4d:fe:3a:4f:6c:14:09:c8:86:28:7d:1d:1c: 4c:61:23:92:9d:3a:eb:14:f5:9f:5c:a2:07:ff:0a: df:c8:ae:d8:e8:7c:ad:43:06:16:84:39:cb:8f:08: 2b:3a:91:52:3a:92:7e:ac:72:15:ee:fc:4f:28:83: a9:4b:aa:b1:d3:be:14:c3:1f:7f:71:67:7e:b1:d0: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.18.0/23 IPv6: 2405:62c0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:d0:ab:d6:cd:74:18:b1:be:55:31:fe:18:fc:cb:7b:18:c5: 44:62:f6:36:86:c7:0e:10:3d:fb:aa:6c:de:5d:fb:c8:1b:c7: c8:9a:20:a9:e8:83:83:46:73:bc:86:c1:f2:45:26:88:ca:8a: 56:56:4a:a1:f7:f5:65:cd:23:ff:58:0e:5c:db:4e:86:fd:0b: 67:25:db:e3:0b:7b:16:e6:d7:83:b2:92:07:fb:8c:cb:59:f4: 91:75:6e:3c:09:8e:da:18:f0:dc:2b:25:cc:ac:64:70:c2:fb: d4:ca:25:f8:f2:d5:01:20:02:65:aa:7d:4c:96:81:f1:78:4e: aa:77:d1:35:91:bb:7d:b6:9d:96:4c:95:1c:56:90:d9:bf:70: d7:b7:11:a2:6a:6d:6f:fc:94:fa:3a:f0:52:b1:43:45:53:f0: a7:db:db:50:f2:d4:d1:3e:21:84:d0:e8:14:7d:ae:e6:51:47: 0b:7e:13:27:f6:0d:c2:9d:25:e8:c3:21:cb:da:d0:3e:05:6d: 91:a5:76:e8:63:0c:22:c0:a2:98:0b:15:e5:cd:2e:94:75:dd: 39:32:3b:f5:0e:36:7b:bf:5c:91:fd:60:e1:6e:4b:35:09:51: 60:12:40:df:45:11:33:29:4e:d0:06:c3:16:d3:ea:39:70:e6: f1:55:63:33 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUePFJaKvFosXMxTvI+6VQnJTxhuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNTE3NTczMVoX DTI0MDgyMzE4MDIzMVowMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkx MUY0QzE4OTQxQ0E4OTVCMDdBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOT3WV/yMh/gSvnC4WJUn8nqhnsrNFeTLqa8GXnRdYVP2Ceo9DTLRlxuBuO2 HTjyfc+qPvnP8VsJ5Uj2GRHpuqc4LBeKsOcMzopcbv5EfkHM/S0MP/idIrcOdcHY iwrqx9mHUFEVC0tgmpF0PdLziaiP2102UJjGYyjIdCW8iSoSOffoGN6UHrNXbZRD 9ZyCAsfSwf8O8bSppYLrsrSI+n5rEjtqgG3oGDrQC2AHp+3yicjnaDNN/jpPbBQJ yIYofR0cTGEjkp066xT1n1yiB/8K38iu2Oh8rUMGFoQ5y48IKzqRUjqSfqxyFe78 TyiDqUuqsdO+FMMff3FnfrHQQHcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFFkUKFRxUh/zFkR9MGJQcqJWwelMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkNTk4ZTk5 LWU5ZmYtNGFiZS1iMDhlLTIyNmZkZDA3ZjlhZS8wLzUxNjQ1MEExNTFDNTQ4N0ZD QzU5MTFGNEMxODk0MUNBODk1QjA3QTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkBIwDQQCAAIwBwMFACQFYsAwDQYJKoZIhvcNAQELBQADggEBAAvQq9bNdBix vlUx/hj8y3sYxURi9jaGxw4QPfuqbN5d+8gbx8iaIKnog4NGc7yGwfJFJojKilZW SqH39WXNI/9YDlzbTob9C2cl2+MLexbm14Oykgf7jMtZ9JF1bjwJjtoY8NwrJcys ZHDC+9TKJfjy1QEgAmWqfUyWgfF4Tqp30TWRu322nZZMlRxWkNm/cNe3EaJqbW/8 lPo68FKxQ0VT8Kfb21Dy1NE+IYTQ6BR9ruZRRwt+Eyf2DcKdJejDIcva0D4FbZGl duhjDCLAopgLFeXNLpR13TkyO/UONnu/XJH9YOFuSzUJUWASQN9FETMpTtAGwxbT 6jlw5vFVYzM= -----END CERTIFICATE-----Generated at Wed May 8 10:06:48 2024 by rpki-client on console-ams.rpki-client.org