$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.cer (raw, json) Hash identifier: b6D9P5AaeCpWkV56kNe16tURM0v6h7FNd+IE9fsH6S0= Subject key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78E7D0CE5876E417D5B95A6DB8950CC19A6FE39C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 13 Apr 2024 06:11:59 +0000 Certificate not after: Sat 12 Apr 2025 06:16:59 +0000 Subordinate resources: IP: 103.150.60.0/23 IP: 2001:df3:5b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:d0:ce:58:76:e4:17:d5:b9:5a:6d:b8:95:0c:c1:9a:6f:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 13 06:11:59 2024 GMT Not After : Apr 12 06:16:59 2025 GMT Subject: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:d1:91:87:8e:f3:8b:34:b9:71:88:b9:14: b9:84:e6:84:9e:29:cf:da:e3:39:48:53:7b:37:6a: 2c:f2:a4:93:26:30:e5:a9:c9:a6:35:22:fd:a2:b7: b3:9f:89:a5:c4:c0:47:a3:67:e4:4b:ea:55:be:d4: 77:73:b5:10:47:4a:1b:a3:b3:54:c8:ba:17:0c:f6: a8:f0:a7:9a:c3:b6:09:b2:b8:e5:44:4c:4f:36:e3: 05:44:72:28:9b:f8:16:a6:9e:6a:a6:18:54:04:8e: c1:f0:11:f9:4b:fe:31:5b:88:77:2e:05:17:39:b4: 2a:40:4e:25:86:3f:a6:8d:5c:76:37:71:55:96:4b: d1:94:4c:37:18:e3:7c:69:ca:10:35:69:ec:85:be: 0e:10:f7:6a:78:93:32:05:5a:f7:9b:c9:24:09:28: da:ed:a2:c5:f9:92:f9:9d:4a:5e:4f:21:58:1f:2e: e6:6c:49:6d:e1:83:c5:52:26:49:65:bf:b9:e9:28: 1b:84:da:cd:13:18:c1:cd:2c:95:45:17:a9:4c:b2: 0d:2d:17:8c:41:a6:a7:42:48:91:74:b2:65:aa:57: d1:32:35:08:3a:63:b7:22:17:78:19:df:34:e6:22: 28:e4:f0:b0:69:fa:5f:e9:1e:04:0d:90:c2:fd:a2: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.60.0/23 IPv6: 2001:df3:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 67:e6:87:55:b0:9f:ad:c2:85:d4:cc:69:1b:f4:c1:d1:63:aa: 97:7f:8f:99:3e:bc:92:40:2c:9b:13:41:c6:9d:1f:0a:37:f4: 4c:aa:14:ca:92:5d:aa:a8:6f:cd:ee:20:81:12:59:0e:f6:37: 78:e4:8b:39:bd:71:a0:5e:72:2b:04:2c:92:f7:c5:33:10:d0: d3:a9:a5:37:65:ec:17:2e:43:66:fb:fd:4b:59:10:7a:f2:cb: 5a:48:66:ec:32:bd:85:4f:d4:b3:c8:ad:82:e4:80:d2:b8:9a: 1d:72:97:e0:25:68:05:54:47:8f:58:0b:ec:8d:e3:01:38:4d: e1:49:03:16:7c:a0:ca:8a:a8:0a:a9:4e:2f:3d:d8:d2:f1:93: 87:d3:6d:00:f1:2b:d8:b5:d2:1f:8e:9e:01:7e:23:ef:f7:9c: 71:51:9f:9e:5a:25:5b:bc:f6:e9:8b:b3:42:ce:67:e8:db:59: 7a:b1:af:64:11:30:c6:2a:5c:c7:12:f1:4f:75:6b:2f:f4:87: c1:cd:58:5e:b9:18:28:e8:08:52:4f:39:ff:9d:21:0f:90:0f: ff:64:4d:c0:9d:28:9e:e5:3f:64:5b:04:33:bf:fa:3a:05:c3: cd:a4:5a:bc:ba:84:c2:07:64:64:ce:85:e6:99:18:6c:be:d2: c6:bb:71:41 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeOfQzlh25BfVuVptuJUMwZpv45wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxMzA2MTE1OVoX DTI1MDQxMjA2MTY1OVowMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3 OEI3Mjk2QTlEQTg5M0MzMkNBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUH0ZGHjvOLNLlxiLkUuYTmhJ4pz9rjOUhTezdqLPKkkyYw5anJpjUi/aK3 s5+JpcTAR6Nn5EvqVb7Ud3O1EEdKG6OzVMi6Fwz2qPCnmsO2CbK45URMTzbjBURy KJv4FqaeaqYYVASOwfAR+Uv+MVuIdy4FFzm0KkBOJYY/po1cdjdxVZZL0ZRMNxjj fGnKEDVp7IW+DhD3aniTMgVa95vJJAko2u2ixfmS+Z1KXk8hWB8u5mxJbeGDxVIm SWW/uekoG4TazRMYwc0slUUXqUyyDS0XjEGmp0JIkXSyZapX0TI1CDpjtyIXeBnf NOYiKOTwsGn6X+keBA2Qwv2itwcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxBPVYpTZ0g5kl4tylqnaiTwyyrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0 LTRkYjMtNDM3My1hMzQ4LWZiMWVkNzA1NTY1MS8wLzVDNDEzRDU2Mjk0RDlEMjBF NjQ5NzhCNzI5NkE5REE4OTNDMzJDQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnljwwDwQCAAIwCQMHACABDfNbgDANBgkqhkiG9w0BAQsFAAOCAQEAZ+aHVbCf rcKF1MxpG/TB0WOql3+PmT68kkAsmxNBxp0fCjf0TKoUypJdqqhvze4ggRJZDvY3 eOSLOb1xoF5yKwQskvfFMxDQ06mlN2XsFy5DZvv9S1kQevLLWkhm7DK9hU/Us8it guSA0riaHXKX4CVoBVRHj1gL7I3jAThN4UkDFnygyoqoCqlOLz3Y0vGTh9NtAPEr 2LXSH46eAX4j7/eccVGfnlolW7z26YuzQs5n6NtZerGvZBEwxipcxxLxT3VrL/SH wc1YXrkYKOgIUk85/50hD5AP/2RNwJ0onuU/ZFsEM7/6OgXDzaRavLqEwgdkZM6F 5pkYbL7SxrtxQQ== -----END CERTIFICATE-----Generated at Wed May 8 15:17:37 2024 by rpki-client on console-fra.rpki-client.org