$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.cer (raw, json) Hash identifier: F/BnaEGXmNysIWJ2zS3KvfHk1/zBu0q3aU4EUWheeCM= Subject key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CFBE4621C453E1C418356B87134D0C645F37ED0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Jan 2024 11:27:22 +0000 Certificate not after: Wed 01 Jan 2025 11:32:22 +0000 Subordinate resources: IP: 103.121.136.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:e4:62:1c:45:3e:1c:41:83:56:b8:71:34:d0:c6:45:f3:7e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 3 11:27:22 2024 GMT Not After : Jan 1 11:32:22 2025 GMT Subject: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:c4:8a:85:d0:2a:0e:32:e3:bc:8d:0b:f1: 55:ea:73:f8:4a:d2:7b:2d:c9:65:ea:c0:e0:6a:80: 9d:0d:5f:b5:cb:d0:25:d1:b3:06:93:ec:5b:ad:16: 91:14:4f:eb:08:8f:6b:5f:11:0c:e0:7c:de:39:56: b8:ee:88:07:75:13:d3:87:50:b8:fc:ed:0c:dc:ca: 80:09:76:bb:ae:03:bc:6e:5e:ab:fb:74:53:40:06: 9d:90:ab:2e:e0:18:64:5e:07:58:85:fa:b7:43:ae: af:a9:14:fa:77:ad:77:64:72:b4:3a:90:f1:3e:58: aa:e0:7a:94:2a:1e:58:42:08:62:eb:c0:e4:4a:01: 90:7e:7e:0b:68:a1:e7:11:1a:81:69:4b:b4:8e:18: f1:ba:d9:31:a4:7a:fe:d9:56:39:38:f4:0e:3f:8d: 41:d7:8f:84:5d:a6:db:39:4c:60:61:19:77:aa:ea: 04:55:59:3b:00:54:ed:6c:5a:2e:bc:f2:61:ce:09: 45:63:00:02:64:1e:0a:aa:d1:21:0e:75:82:20:6d: c8:d6:47:3c:26:96:9f:b8:a5:7f:d9:48:3a:61:a0: 47:32:52:5c:65:5f:68:8f:da:fa:20:ba:a0:56:84: 3c:56:34:ac:b3:19:c5:63:2d:4a:70:54:d8:e3:ac: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.136.0/22 Signature Algorithm: sha256WithRSAEncryption 27:94:fd:bc:15:bf:9b:90:36:39:38:04:62:54:56:0d:44:87: 74:ca:52:02:ad:4b:b7:19:ee:fb:8a:72:d9:af:6b:f6:b0:13: ab:03:9d:6e:52:e9:4d:b3:68:82:9f:ba:28:3e:9a:4a:98:c4: c0:55:a9:1b:83:50:8d:de:46:f0:ce:ed:fe:ee:95:76:1a:bb: 04:44:a4:e9:b8:03:04:9d:74:54:64:91:44:76:cb:e1:38:3b: d9:b1:0d:f5:f0:fe:25:49:be:f3:27:55:1e:2b:4f:b0:be:d5: d6:67:81:89:39:f5:64:9f:32:38:d4:78:15:f9:8b:8e:7a:ed: fc:58:25:9d:8d:e7:9c:ac:cb:88:d0:0f:69:af:72:82:f8:26: 36:ca:f5:41:e7:15:56:b8:16:9b:8c:69:50:f6:58:3c:a1:87: 24:d3:43:06:06:7a:e0:25:e0:ed:5a:cd:d6:0c:b3:94:5e:32: 22:6c:b3:ad:32:d5:35:63:36:59:3b:a0:3e:38:68:4c:75:ec: e9:f1:f2:fc:1c:38:ce:47:60:f8:2b:b7:66:7b:6e:c3:60:63: 54:6b:e0:c6:34:d9:58:08:6e:a2:23:ee:ef:b6:eb:7d:e1:b0: 14:4e:9b:be:82:22:62:fd:38:a6:e0:3a:f1:69:2e:42:12:23: 07:14:0e:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULPvkYhxFPhxBg1a4cTTQxkXzftAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMzExMjcyMloX DTI1MDEwMTExMzIyMlowMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJC NjI2MTk1QTBBQTA1NjBEQzc5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4XxIqF0CoOMuO8jQvxVepz+ErSey3JZerA4GqAnQ1ftcvQJdGzBpPsW60W kRRP6wiPa18RDOB83jlWuO6IB3UT04dQuPztDNzKgAl2u64DvG5eq/t0U0AGnZCr LuAYZF4HWIX6t0Our6kU+netd2RytDqQ8T5YquB6lCoeWEIIYuvA5EoBkH5+C2ih 5xEagWlLtI4Y8brZMaR6/tlWOTj0Dj+NQdePhF2m2zlMYGEZd6rqBFVZOwBU7Wxa LrzyYc4JRWMAAmQeCqrRIQ51giBtyNZHPCaWn7ilf9lIOmGgRzJSXGVfaI/a+iC6 oFaEPFY0rLMZxWMtSnBU2OOsCKcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFzGsEieV2vA1kK2JhlaCqBWDceSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNGZhN2I4 LTUzMDItNDkwYi05MmU0LTI3ZjI4YzY2NTc1Yy8wLzVDQzZCMDQ4OUU1NzZCQzBE NjQyQjYyNjE5NUEwQUEwNTYwREM3OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneYgwDQYJKoZIhvcNAQELBQADggEBACeU/bwVv5uQNjk4BGJUVg1Eh3TKUgKt S7cZ7vuKctmva/awE6sDnW5S6U2zaIKfuig+mkqYxMBVqRuDUI3eRvDO7f7ulXYa uwREpOm4AwSddFRkkUR2y+E4O9mxDfXw/iVJvvMnVR4rT7C+1dZngYk59WSfMjjU eBX5i4567fxYJZ2N55ysy4jQD2mvcoL4JjbK9UHnFVa4FpuMaVD2WDyhhyTTQwYG euAl4O1azdYMs5ReMiJss60y1TVjNlk7oD44aEx17Onx8vwcOM5HYPgrt2Z7bsNg Y1Rr4MY02VgIbqIj7u+2633hsBROm76CImL9OKbgOvFpLkISIwcUDrg= -----END CERTIFICATE-----Generated at Thu May 9 00:29:11 2024 by rpki-client on console-ams.rpki-client.org