$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.cer (raw, json) Hash identifier: 5qZQCYXLP789yf0QKM/skeWU9yGmp5RSrSYyIZQ1na8= Subject key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65DE0D674B692295EEABE931E261022E59302A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 18:11:20 +0000 Certificate not after: Wed 03 Dec 2025 18:16:20 +0000 Subordinate resources: IP: 103.121.136.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:de:0d:67:4b:69:22:95:ee:ab:e9:31:e2:61:02:2e:59:30:2a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 4 18:11:20 2024 GMT Not After : Dec 3 18:16:20 2025 GMT Subject: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:c4:8a:85:d0:2a:0e:32:e3:bc:8d:0b:f1: 55:ea:73:f8:4a:d2:7b:2d:c9:65:ea:c0:e0:6a:80: 9d:0d:5f:b5:cb:d0:25:d1:b3:06:93:ec:5b:ad:16: 91:14:4f:eb:08:8f:6b:5f:11:0c:e0:7c:de:39:56: b8:ee:88:07:75:13:d3:87:50:b8:fc:ed:0c:dc:ca: 80:09:76:bb:ae:03:bc:6e:5e:ab:fb:74:53:40:06: 9d:90:ab:2e:e0:18:64:5e:07:58:85:fa:b7:43:ae: af:a9:14:fa:77:ad:77:64:72:b4:3a:90:f1:3e:58: aa:e0:7a:94:2a:1e:58:42:08:62:eb:c0:e4:4a:01: 90:7e:7e:0b:68:a1:e7:11:1a:81:69:4b:b4:8e:18: f1:ba:d9:31:a4:7a:fe:d9:56:39:38:f4:0e:3f:8d: 41:d7:8f:84:5d:a6:db:39:4c:60:61:19:77:aa:ea: 04:55:59:3b:00:54:ed:6c:5a:2e:bc:f2:61:ce:09: 45:63:00:02:64:1e:0a:aa:d1:21:0e:75:82:20:6d: c8:d6:47:3c:26:96:9f:b8:a5:7f:d9:48:3a:61:a0: 47:32:52:5c:65:5f:68:8f:da:fa:20:ba:a0:56:84: 3c:56:34:ac:b3:19:c5:63:2d:4a:70:54:d8:e3:ac: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.136.0/22 Signature Algorithm: sha256WithRSAEncryption 26:e4:47:0d:17:a0:b3:eb:32:e5:4f:0c:b2:c2:61:0c:c1:0b: 2a:59:83:5a:32:6c:0c:84:af:3b:f7:f5:80:15:ea:80:9e:5d: fb:ef:00:22:e9:b8:71:1d:2e:3c:e9:68:40:a3:a6:f7:99:66: 92:6b:51:c9:2e:62:7f:4f:e9:eb:00:47:5a:d2:f6:65:bc:40: 28:e3:0d:59:12:cf:e6:59:02:8f:4d:6e:9e:42:8c:76:be:1a: 72:15:f4:ca:22:5d:40:63:0e:bb:67:c6:91:d7:05:d5:ea:08: 2c:ed:2b:f7:6e:e7:43:b1:c5:67:ba:fd:a2:a8:2d:9a:8b:d8: 9f:29:d1:b2:d2:11:83:58:a9:1a:00:6d:3b:06:34:67:9a:45: 39:a4:7c:7a:6f:42:16:05:ad:c6:57:7b:87:6e:7a:39:a2:95: 55:89:15:10:85:95:24:f9:89:17:71:33:80:3b:c9:7f:d7:82: c6:ad:3c:09:e5:b5:5a:15:1a:9a:d2:d1:cb:b5:22:71:c7:02: bb:2e:d9:ac:14:90:1f:bb:b9:7f:1f:8a:32:d4:e9:43:6c:8a: 0b:45:f8:a4:0a:41:7c:b1:82:1d:42:9c:27:dc:8a:b9:f5:d7: 12:d7:d5:46:d6:99:bb:ee:09:ad:2c:d8:1f:15:31:3d:9a:aa: ca:79:28:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZd4NZ0tpIpXuq+kx4mECLlkwKi8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDE4MTEyMFoX DTI1MTIwMzE4MTYyMFowMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJC NjI2MTk1QTBBQTA1NjBEQzc5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4XxIqF0CoOMuO8jQvxVepz+ErSey3JZerA4GqAnQ1ftcvQJdGzBpPsW60W kRRP6wiPa18RDOB83jlWuO6IB3UT04dQuPztDNzKgAl2u64DvG5eq/t0U0AGnZCr LuAYZF4HWIX6t0Our6kU+netd2RytDqQ8T5YquB6lCoeWEIIYuvA5EoBkH5+C2ih 5xEagWlLtI4Y8brZMaR6/tlWOTj0Dj+NQdePhF2m2zlMYGEZd6rqBFVZOwBU7Wxa LrzyYc4JRWMAAmQeCqrRIQ51giBtyNZHPCaWn7ilf9lIOmGgRzJSXGVfaI/a+iC6 oFaEPFY0rLMZxWMtSnBU2OOsCKcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFzGsEieV2vA1kK2JhlaCqBWDceSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNGZhN2I4 LTUzMDItNDkwYi05MmU0LTI3ZjI4YzY2NTc1Yy8wLzVDQzZCMDQ4OUU1NzZCQzBE NjQyQjYyNjE5NUEwQUEwNTYwREM3OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneYgwDQYJKoZIhvcNAQELBQADggEBACbkRw0XoLPrMuVPDLLCYQzBCypZg1oy bAyErzv39YAV6oCeXfvvACLpuHEdLjzpaECjpveZZpJrUckuYn9P6esAR1rS9mW8 QCjjDVkSz+ZZAo9Nbp5CjHa+GnIV9MoiXUBjDrtnxpHXBdXqCCztK/du50OxxWe6 /aKoLZqL2J8p0bLSEYNYqRoAbTsGNGeaRTmkfHpvQhYFrcZXe4duejmilVWJFRCF lST5iRdxM4A7yX/XgsatPAnltVoVGprS0cu1InHHArsu2awUkB+7uX8fijLU6UNs igtF+KQKQXyxgh1CnCfcirn11xLX1UbWmbvuCa0s2B8VMT2aqsp5KGA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:49 2025 by rpki-client