$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer File: 5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer (raw, json) Hash identifier: oFi9LkmbEhKgCkKq7J2SWhgQqmRQUFRDP4CmRhONfK0= Subject key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A127FEC8CD68267FBB9F503B7BB88A508DCECCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Oct 2023 09:00:13 +0000 Certificate not after: Fri 11 Oct 2024 09:05:13 +0000 Subordinate resources: IP: 116.212.72.0/21 IP: 182.48.160.0/19 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:12:7f:ec:8c:d6:82:67:fb:b9:f5:03:b7:bb:88:a5:08:dc:ec:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 13 09:00:13 2023 GMT Not After : Oct 11 09:05:13 2024 GMT Subject: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:d1:1a:f4:26:8d:36:c7:21:ac:e0:1b:e7: 38:f2:5c:d2:58:9e:1d:f2:01:47:c4:1a:27:ad:76: b6:ad:d8:b7:0f:62:fe:63:a1:cc:5e:1f:cf:c3:08: 77:e5:9b:bc:07:41:15:c0:0b:f2:cf:08:c0:2a:b3: 1e:df:2f:f3:52:39:db:43:46:43:ce:8e:c1:4b:85: c4:62:bf:a7:cb:56:44:c8:67:62:bf:17:0e:28:34: 97:8b:50:43:54:bc:91:ac:b3:67:4d:9c:bd:3d:9a: 44:22:e8:5b:96:18:cb:10:25:29:9e:7e:8f:e0:a5: 7f:2a:fe:ad:22:66:46:25:4b:b9:a1:cd:39:45:f1: a6:7b:4f:2b:06:5e:24:68:c9:b1:b7:a7:55:01:76: 2c:80:77:81:24:2f:4f:24:c9:b6:1c:aa:cd:68:80: 5a:c9:54:66:6a:d0:bc:3e:5c:46:61:b5:09:0f:02: 05:0f:9e:5f:99:17:2d:f6:96:a1:01:1c:e6:dd:7c: 35:32:3e:90:dc:fc:3e:2e:9b:77:1f:33:d4:94:d4: 9f:6d:17:4e:fc:56:54:59:7e:63:50:10:4c:4e:53: f3:36:04:4a:b9:0c:7d:99:ad:55:37:a6:6c:ef:fc: f5:ff:75:cd:e0:93:ad:1e:03:b0:69:b2:f1:74:fe: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.212.72.0/21 182.48.160.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:62:1f:21:be:7c:cf:69:4f:ad:13:46:01:51:d0:ea:01:c1: 67:73:cc:05:de:40:17:37:a2:2e:3f:11:47:4e:3b:60:ba:4d: 2b:3a:8e:4d:3a:e6:ad:31:a5:e1:ce:83:a2:44:3c:28:22:0e: 3a:26:37:ac:94:af:e6:f0:a4:eb:6e:cc:a3:3b:23:84:5d:76: 6b:d0:ee:7f:55:b6:2d:cd:dc:dd:a8:75:60:eb:08:eb:08:49: 35:ac:77:83:c7:2f:32:86:f4:bc:10:d2:a6:83:a3:2d:22:73: 7b:10:e3:8f:3e:3c:41:23:eb:a0:58:69:9a:92:fc:f5:2a:1c: 19:e6:58:ab:ba:df:4d:0e:03:d7:7d:1f:2a:94:82:b3:3a:39: 46:06:da:81:17:e3:a8:2c:53:77:05:66:d3:2f:4a:56:a6:6c: 7f:ee:ba:16:d1:a1:a2:f3:0f:9b:42:5a:6c:40:74:f4:93:99: 26:15:b7:c1:94:92:32:cb:59:38:99:03:8d:07:07:c0:21:33: 3e:9d:34:3f:8f:52:5d:9a:1d:36:17:9f:7e:27:6b:cc:e1:65: 34:05:19:c1:bf:3f:f4:24:5e:2c:93:c4:6d:d0:a9:c7:f4:96: 3c:e7:63:7a:28:6b:3c:b2:be:8d:53:70:32:16:6e:61:93:74: 2f:7d:a0:7c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUOhJ/7IzWgmf7ufUDt7uIpQjc7M8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMzA5MDAxM1oX DTI0MTAxMTA5MDUxM1owMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhC QkE5OTZBOTc1N0I0MEZCMDU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVu0Rr0Jo02xyGs4BvnOPJc0lieHfIBR8QaJ612tq3Ytw9i/mOhzF4fz8MI d+WbvAdBFcAL8s8IwCqzHt8v81I520NGQ86OwUuFxGK/p8tWRMhnYr8XDig0l4tQ Q1S8kayzZ02cvT2aRCLoW5YYyxAlKZ5+j+Clfyr+rSJmRiVLuaHNOUXxpntPKwZe JGjJsbenVQF2LIB3gSQvTyTJthyqzWiAWslUZmrQvD5cRmG1CQ8CBQ+eX5kXLfaW oQEc5t18NTI+kNz8Pi6bdx8z1JTUn20XTvxWVFl+Y1AQTE5T8zYESrkMfZmtVTem bO/89f91zeCTrR4DsGmy8XT+a/cCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFZg2zgRwWRqwfi7qZapdXtA+wVWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZj LTA5ZTMtNDYyMS1hNjNiLTIwYTUxM2NkNDhiOS8wLzU2NjBEQjM4MTFDMTY0NkFD MUY4QkJBOTk2QTk3NTdCNDBGQjA1NTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAN01EgDBAW2MKAwDQYJKoZIhvcNAQELBQADggEBAI5iHyG+fM9pT60TRgFR0OoB wWdzzAXeQBc3oi4/EUdOO2C6TSs6jk065q0xpeHOg6JEPCgiDjomN6yUr+bwpOtu zKM7I4RddmvQ7n9Vti3N3N2odWDrCOsISTWsd4PHLzKG9LwQ0qaDoy0ic3sQ448+ PEEj66BYaZqS/PUqHBnmWKu6300OA9d9HyqUgrM6OUYG2oEX46gsU3cFZtMvSlam bH/uuhbRoaLzD5tCWmxAdPSTmSYVt8GUkjLLWTiZA40HB8AhMz6dND+PUl2aHTYX n34na8zhZTQFGcG/P/QkXiyTxG3Qqcf0ljznY3ooazyyvo1TcDIWbmGTdC99oHw= -----END CERTIFICATE-----Generated at Thu May 9 00:37:00 2024 by rpki-client on console-fra.rpki-client.org