$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer File: 5561020450CCF35D395065D493AABB1C3F275482.cer (raw, json) Hash identifier: wCUXQdiN1c1xSzB3u4dQ6fxlg7igEhp9CGBaE0qiEHo= Subject key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E380DB4623AB67E469FDDDA682D34FEB749EDB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft caRepository: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Apr 2024 14:19:34 +0000 Certificate not after: Tue 01 Apr 2025 14:24:34 +0000 Subordinate resources: IP: 103.188.12.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:38:0d:b4:62:3a:b6:7e:46:9f:dd:da:68:2d:34:fe:b7:49:ed:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 14:19:34 2024 GMT Not After : Apr 1 14:24:34 2025 GMT Subject: CN=5561020450CCF35D395065D493AABB1C3F275482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:e6:dc:93:83:87:d8:2b:7c:db:34:38:f9: 0b:31:83:98:e9:0f:d6:22:6f:93:6b:d8:74:1d:de: 98:62:eb:4e:af:00:ba:ad:4e:f0:d0:13:e9:60:fd: a9:fc:ab:e2:c1:ab:6a:45:11:49:26:64:f2:a8:6b: a9:a1:f9:cb:5d:fb:43:76:e1:9d:28:f8:27:58:1c: 19:30:43:ab:1c:a0:b2:fc:58:21:94:04:da:02:67: e7:9a:60:2b:2a:20:50:04:e0:e0:99:07:42:cc:27: 45:84:1e:ab:66:c7:0b:0d:86:ad:c8:8e:50:1f:c9: 43:fb:4b:25:ab:b0:ee:af:89:9e:e5:41:6f:45:23: 15:51:6c:8a:24:af:ca:40:3f:57:ed:e6:28:34:74: b6:18:c2:03:59:f4:b1:09:e7:fc:cd:ee:39:b4:14: a7:e1:3a:8e:49:0e:b6:03:43:3d:ec:27:ab:55:2a: f5:90:e6:7a:b4:7f:4f:dd:15:fc:96:89:2e:ad:c6: d7:aa:f1:38:c2:60:2c:5d:75:3a:a3:a3:54:14:b3: ba:50:91:34:12:53:32:51:9b:88:5a:f8:b0:dc:65: 0f:bd:79:b3:eb:7f:23:90:e0:bb:d3:77:c5:62:23: dc:1d:e1:71:d9:65:a4:9f:9f:07:67:b7:6b:aa:10: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.12.0/24 Signature Algorithm: sha256WithRSAEncryption 10:52:cf:6d:4c:ef:76:84:41:02:19:16:19:fd:97:4d:ea:86: 31:4f:d7:8d:f3:fb:5a:2a:2c:5a:b9:1b:73:ab:50:2b:82:a4: 3c:a4:00:a8:ce:dc:af:15:03:9e:5b:89:b1:24:c4:a0:b9:b1: 58:42:10:eb:1b:f7:42:6d:24:ec:44:dd:0e:85:58:d1:43:74: 8f:f3:93:9b:2f:84:02:fd:2c:42:41:79:a4:be:0d:42:47:57: 74:50:5a:7d:7a:12:df:10:53:06:f7:f9:6d:8a:ca:ed:a4:95: fa:46:17:46:13:03:17:92:33:61:d0:8c:37:e8:dd:5b:ac:3a: 26:96:24:25:7e:0a:73:fa:6e:db:f6:d6:01:cb:2d:68:b1:78: 3c:20:be:63:cd:a1:08:ea:08:ca:28:15:55:6d:f3:44:4d:34: 4c:d5:60:5a:6f:ee:12:fa:b1:69:e2:fb:48:07:98:b6:30:66: ab:26:96:f6:d1:b5:88:b0:78:bf:a1:4e:1e:8c:9c:58:a6:1d: 7f:4d:86:5f:ae:9f:6a:8b:d9:ea:da:55:a8:1c:41:40:97:aa: c7:ec:43:da:85:c3:74:c1:08:55:50:d9:9d:e7:f1:2e:07:4d: 93:00:69:24:bc:b0:14:f6:86:33:09:21:a5:eb:fe:ec:6c:fa: 0c:d8:6d:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHjgNtGI6tn5Gn93aaC00/rdJ7bIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQwMjE0MTkzNFoX DTI1MDQwMTE0MjQzNFowMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2 NUQ0OTNBQUJCMUMzRjI3NTQ4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDu5tyTg4fYK3zbNDj5CzGDmOkP1iJvk2vYdB3emGLrTq8Auq1O8NAT6WD9 qfyr4sGrakURSSZk8qhrqaH5y137Q3bhnSj4J1gcGTBDqxygsvxYIZQE2gJn55pg KyogUATg4JkHQswnRYQeq2bHCw2GrciOUB/JQ/tLJauw7q+JnuVBb0UjFVFsiiSv ykA/V+3mKDR0thjCA1n0sQnn/M3uObQUp+E6jkkOtgNDPewnq1Uq9ZDmerR/T90V /JaJLq3G16rxOMJgLF11OqOjVBSzulCRNBJTMlGbiFr4sNxlD715s+t/I5Dgu9N3 xWIj3B3hcdllpJ+fB2e3a6oQGDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFVhAgRQzPNdOVBl1JOquxw/J1SCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwN2Q1YmI2 LTlkYTAtNGMzYy05Mzk1LTA2NDU5NmE0Zjc4OS8wLzU1NjEwMjA0NTBDQ0YzNUQz OTUwNjVENDkzQUFCQjFDM0YyNzU0ODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvAwwDQYJKoZIhvcNAQELBQADggEBABBSz21M73aEQQIZFhn9l03qhjFP143z +1oqLFq5G3OrUCuCpDykAKjO3K8VA55bibEkxKC5sVhCEOsb90JtJOxE3Q6FWNFD dI/zk5svhAL9LEJBeaS+DUJHV3RQWn16Et8QUwb3+W2Kyu2klfpGF0YTAxeSM2HQ jDfo3VusOiaWJCV+CnP6btv21gHLLWixeDwgvmPNoQjqCMooFVVt80RNNEzVYFpv 7hL6sWni+0gHmLYwZqsmlvbRtYiweL+hTh6MnFimHX9Nhl+un2qL2eraVagcQUCX qsfsQ9qFw3TBCFVQ2Z3n8S4HTZMAaSS8sBT2hjMJIaXr/uxs+gzYbSI= -----END CERTIFICATE-----Generated at Wed May 8 09:50:30 2024 by rpki-client on console-fra.rpki-client.org