$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer (raw, json) Hash identifier: /PNlmWMSCPlyftlizy+GznDzm95fJzovTQ9TyzDkwmo= Subject key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7313F991C83FB6EE6FCBA1F57B096B2A4697AC20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 May 2024 13:34:59 +0000 Certificate not after: Thu 01 May 2025 13:39:59 +0000 Subordinate resources: IP: 103.189.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:13:f9:91:c8:3f:b6:ee:6f:cb:a1:f5:7b:09:6b:2a:46:97:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 13:34:59 2024 GMT Not After : May 1 13:39:59 2025 GMT Subject: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:39:7b:ed:3a:b4:ec:b0:28:13:24:15:9a: ca:41:23:07:fb:69:37:e2:b9:b0:4a:2f:a4:9c:92: fd:a2:6d:d0:95:fa:5f:16:e4:cf:6e:c3:e4:6d:9d: 50:84:ff:65:59:a2:b2:06:c0:b2:de:f2:32:6d:d8: 8b:9b:ad:ec:2b:56:14:f7:67:62:ba:30:25:48:3e: 3a:8f:24:84:c2:df:5f:ee:9e:e3:5c:1f:07:a7:8f: ed:83:46:13:e1:cc:95:9a:d1:9e:26:d4:1d:4d:c7: c8:e4:25:9c:24:37:bc:2b:14:26:f6:76:61:1c:33: 8f:3e:9f:18:44:72:6d:0d:3d:b8:54:9e:df:b5:13: 6e:6b:14:c3:e0:50:69:31:a5:6c:54:56:0a:ef:c6: 31:aa:71:e7:db:3a:b5:35:64:c6:26:f1:3f:88:46: ac:b5:89:4b:49:82:15:4a:ae:94:bc:c5:ed:3e:1c: ea:93:1e:dd:a8:2f:95:97:96:e4:85:00:83:62:3c: 6c:44:a2:ec:2c:92:00:76:5a:fa:a9:7c:8c:43:0b: 6c:30:4b:cf:16:27:47:aa:a6:77:ca:7b:ad:64:cc: 5c:24:57:ca:bd:b6:a0:57:03:a9:9b:a9:16:0e:68: ca:d3:a1:55:f9:d1:95:08:84:c4:2c:b4:2a:49:7f: b3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.112.0/23 Signature Algorithm: sha256WithRSAEncryption 73:bf:0c:45:a3:48:ac:ee:9b:a8:00:7e:93:6d:95:b7:3d:84: a8:b7:ca:fb:a6:aa:e5:53:b6:f7:b7:14:55:b1:4e:91:ba:86: 34:7b:e0:72:b7:9e:bf:e6:0d:77:31:c4:74:ae:5a:0f:c2:c9: 76:cd:3b:20:a7:f0:d7:15:7f:84:2f:32:cf:8d:98:a7:17:2e: 5e:a3:31:6d:ee:7a:91:2d:2d:1e:df:b1:4e:8f:55:cb:78:42: 88:e5:13:71:e3:a1:11:60:1e:bc:5f:77:3d:09:d8:22:5e:dc: d6:d4:66:32:03:28:1e:57:29:a3:c8:e7:57:05:e2:9c:87:ec: 52:22:7d:e1:e5:fc:40:f4:ac:eb:6b:b3:d2:d3:4d:c7:14:3a: b6:c4:f5:c2:93:98:e7:e8:26:49:f0:e4:ce:fa:5b:41:22:ee: 08:fe:c7:aa:ce:b7:a8:14:16:4f:f6:6e:91:93:e8:2b:f2:69: 1e:de:6b:26:08:4d:56:60:43:c5:5c:e0:b6:ee:34:3c:5d:41: 08:71:7f:76:7c:a6:e0:0c:27:27:32:ea:bb:67:3d:85:3d:6b: 7e:b2:97:35:e6:11:4a:f1:30:35:93:46:a6:1b:b9:e0:39:bd: b3:34:7f:fb:9d:ea:a4:f3:6c:7e:ab:0b:98:30:49:70:31:57: e7:81:cd:df -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcxP5kcg/tu5vy6H1ewlrKkaXrCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwMjEzMzQ1OVoX DTI1MDUwMTEzMzk1OVowMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVC REI1MzBFOTFFRkQxQkVDRUYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7QOXvtOrTssCgTJBWaykEjB/tpN+K5sEovpJyS/aJt0JX6Xxbkz27D5G2d UIT/ZVmisgbAst7yMm3Yi5ut7CtWFPdnYrowJUg+Oo8khMLfX+6e41wfB6eP7YNG E+HMlZrRnibUHU3HyOQlnCQ3vCsUJvZ2YRwzjz6fGERybQ09uFSe37UTbmsUw+BQ aTGlbFRWCu/GMapx59s6tTVkxibxP4hGrLWJS0mCFUqulLzF7T4c6pMe3agvlZeW 5IUAg2I8bESi7CySAHZa+ql8jEMLbDBLzxYnR6qmd8p7rWTMXCRXyr22oFcDqZup Fg5oytOhVfnRlQiExCy0Kkl/s1sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFVG6fHPLPWCeMW9tTDpHv0b7O8EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNDg2Y2Nk LTBjOTUtNDkxYS1iOWU2LTY2N2NlZTQ0NTk0Zi8wLzU1NDZFOUYxQ0YyQ0Y1ODI3 OEM1QkRCNTMwRTkxRUZEMUJFQ0VGMDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXAwDQYJKoZIhvcNAQELBQADggEBAHO/DEWjSKzum6gAfpNtlbc9hKi3yvum quVTtve3FFWxTpG6hjR74HK3nr/mDXcxxHSuWg/CyXbNOyCn8NcVf4QvMs+NmKcX Ll6jMW3uepEtLR7fsU6PVct4QojlE3HjoRFgHrxfdz0J2CJe3NbUZjIDKB5XKaPI 51cF4pyH7FIifeHl/ED0rOtrs9LTTccUOrbE9cKTmOfoJknw5M76W0Ei7gj+x6rO t6gUFk/2bpGT6CvyaR7eayYITVZgQ8Vc4LbuNDxdQQhxf3Z8puAMJycy6rtnPYU9 a36ylzXmEUrxMDWTRqYbueA5vbM0f/ud6qTzbH6rC5gwSXAxV+eBzd8= -----END CERTIFICATE-----Generated at Wed May 8 09:50:30 2024 by rpki-client on console-fra.rpki-client.org