$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer (raw, json) Hash identifier: IiZBJ5HYUAulKG9zQ0O8237xlBf7EKTmhKLXpZuGc5g= Subject key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: A4BA7E0C9A86E3828D373832A5B4ABD775D39B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft caRepository: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:34:34 +0000 Certificate not after: Mon 30 Jun 2025 14:39:34 +0000 Subordinate resources: IP: 103.153.40.0/23 IP: 2406:3e40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a4:ba:7e:0c:9a:86:e3:82:8d:37:38:32:a5:b4:ab:d7:75:d3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:34:34 2024 GMT Not After : Jun 30 14:39:34 2025 GMT Subject: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:bc:9e:40:1f:06:23:99:dd:c5:e0:d4:d7: 4c:ac:98:15:1e:58:5d:e3:56:35:07:a6:bf:17:98: b0:59:a0:d3:fb:0a:07:1c:8c:cf:d1:dc:77:38:34: 02:e3:40:b8:bf:a4:3b:c7:ac:b0:72:43:84:03:46: fc:1f:f8:74:81:ae:ff:ad:9f:74:46:ba:b4:2f:11: 4c:f8:58:f7:dd:c4:d1:26:ec:a8:93:4a:e2:bc:16: eb:dd:20:46:c8:f3:98:aa:1c:e6:94:e0:8a:3c:4c: 30:37:9e:33:0d:a4:cd:74:f4:6c:22:bc:6e:a4:f8: 2e:8e:e9:f5:b1:f8:8b:eb:86:03:be:2e:7e:d4:18: 26:e5:b7:37:43:c9:dd:c5:ba:6e:8d:9d:e1:4e:3f: 4f:9a:b0:be:f4:e8:3e:9a:70:75:c9:f4:43:44:31: e4:3b:b1:01:fb:b8:95:f1:23:ec:d1:3f:39:5d:bb: 0d:38:ef:2e:5b:10:cb:66:b8:d6:15:d6:de:a7:9b: 23:74:3f:16:1d:7f:51:90:27:8c:84:47:38:4a:4c: 53:49:01:6f:dc:60:99:ca:90:39:7f:60:e1:fc:c4: 4f:d0:b0:ba:a6:cc:43:0a:32:71:ce:d8:21:1a:48: 0f:21:e7:66:ba:ec:a7:f7:b6:50:ec:4f:61:73:3c: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.40.0/23 IPv6: 2406:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 90:4a:59:30:6b:94:13:1e:a9:07:35:1f:30:45:b9:92:12:fa: 2a:70:29:a4:d8:a0:95:8c:64:7b:e9:09:0c:4b:5b:f0:12:4a: 38:b1:51:db:2b:cb:ec:fc:c7:3b:4f:6c:aa:cb:d3:cc:49:fa: cd:4b:ac:17:94:cf:37:be:ac:c5:42:ee:e5:8b:bd:55:79:00: f3:6a:b5:59:91:80:73:79:26:f8:6d:44:63:e0:ee:a5:23:cd: 97:30:1f:b7:7d:a6:71:8a:57:61:b6:be:90:03:14:0b:f0:9d: 33:74:3c:20:ed:bd:90:81:91:44:27:8e:6c:2f:76:50:94:46: 3e:c2:a7:dc:63:1f:ce:db:91:fe:8a:4d:e9:35:93:14:fd:d5: ed:3c:ed:d4:7b:64:7d:c6:47:7d:02:4a:4f:df:89:cb:37:8f: cd:be:d0:fe:9f:80:0d:af:65:c1:b4:2b:08:72:91:23:d3:01: bd:f4:98:12:87:92:a5:e6:2b:47:8c:9e:32:82:1d:9e:42:62: b7:92:1f:75:b4:bf:3f:da:e9:61:0b:ff:8e:9f:48:ef:51:77: 7c:b3:3d:91:ac:1f:13:79:a8:00:d1:d6:97:16:df:42:42:d8: de:ac:40:51:f1:75:b3:aa:23:36:a1:53:fe:0b:cc:cf:b9:ad: 63:9b:2a:91 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAKS6fgyahuOCjTc4MqW0q9d105swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0MzQzNFoX DTI1MDYzMDE0MzkzNFowMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1 OUE3RUQyOEE3OUREMEM3OTk0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM9vJ5AHwYjmd3F4NTXTKyYFR5YXeNWNQemvxeYsFmg0/sKBxyMz9Hcdzg0 AuNAuL+kO8essHJDhANG/B/4dIGu/62fdEa6tC8RTPhY993E0SbsqJNK4rwW690g RsjzmKoc5pTgijxMMDeeMw2kzXT0bCK8bqT4Lo7p9bH4i+uGA74uftQYJuW3N0PJ 3cW6bo2d4U4/T5qwvvToPppwdcn0Q0Qx5DuxAfu4lfEj7NE/OV27DTjvLlsQy2a4 1hXW3qebI3Q/Fh1/UZAnjIRHOEpMU0kBb9xgmcqQOX9g4fzET9CwuqbMQwoycc7Y IRpIDyHnZrrsp/e2UOxPYXM8OxUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFsSIQPTwccwrs5Zp+0op53Qx5lIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxNzJlZWY5 LWVjNmEtNDU1OC04MTgxLWExMWZlNjViOGZmOC8wLzVCMTIyMTAzRDNDMUM3MzBB RUNFNTlBN0VEMjhBNzlERDBDNzk5NDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmSgwDQQCAAIwBwMFACQGPkAwDQYJKoZIhvcNAQELBQADggEBAJBKWTBrlBMe qQc1HzBFuZIS+ipwKaTYoJWMZHvpCQxLW/ASSjixUdsry+z8xztPbKrL08xJ+s1L rBeUzze+rMVC7uWLvVV5APNqtVmRgHN5JvhtRGPg7qUjzZcwH7d9pnGKV2G2vpAD FAvwnTN0PCDtvZCBkUQnjmwvdlCURj7Cp9xjH87bkf6KTek1kxT91e087dR7ZH3G R30CSk/fics3j82+0P6fgA2vZcG0KwhykSPTAb30mBKHkqXmK0eMnjKCHZ5CYreS H3W0vz/a6WEL/46fSO9Rd3yzPZGsHxN5qADR1pcW30JC2N6sQFHxdbOqIzahU/4L zM+5rWObKpE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:21 2024 by rpki-client on console-ams.rpki-client.org