$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.cer (raw, json) Hash identifier: HeDp9e26NzEo/++c/Zwm/laHDQfeze2XDsCv2gb6JeM= Subject key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71D97BA50E238E92D020C642B6A372D53B96B377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft caRepository: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Sep 2023 15:01:24 +0000 Certificate not after: Wed 18 Sep 2024 15:06:24 +0000 Subordinate resources: IP: 43.248.24.0/22 IP: 103.10.96.0/22 IP: 103.23.240.0/22 IP: 203.128.64.0/19 IP: 203.201.50.0/23 IP: 2401:1b00::/32 IP: 2403:c600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d9:7b:a5:0e:23:8e:92:d0:20:c6:42:b6:a3:72:d5:3b:96:b3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 15:01:24 2023 GMT Not After : Sep 18 15:06:24 2024 GMT Subject: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:96:42:f6:d0:5f:a4:fc:04:73:4e:1f:ab: 90:bb:ef:e9:3d:76:34:b0:ef:6f:42:0d:16:23:00: 95:07:58:aa:a3:db:a2:90:92:87:52:2d:da:93:19: 06:f4:91:18:df:db:69:a8:44:e0:49:32:64:7c:55: d7:41:5b:2f:0d:32:88:5f:66:ea:32:3a:0b:bd:8e: 46:09:0c:fc:8b:f9:3d:41:0c:25:98:fc:9f:51:0d: 03:8b:df:c9:45:78:8c:21:de:e1:e0:2c:90:f3:69: c3:c8:f7:36:27:e6:1c:17:51:8f:26:58:16:f0:94: 95:71:c5:98:fd:cd:55:0b:00:8b:48:c5:43:a9:0d: d1:e6:33:d7:a0:2b:dc:b5:05:0c:38:85:0f:82:44: a9:3f:ab:86:63:29:44:88:ef:e1:be:c3:b1:86:38: 55:e1:6c:53:f4:d3:70:00:d7:ae:a3:46:10:07:bd: 98:a0:cb:b9:1d:a0:20:c9:a4:e5:94:e6:2a:5b:d9: 89:80:4e:9f:bf:50:ff:64:55:22:4b:f4:11:b1:78: c7:91:9f:dc:27:0a:22:91:1d:7d:9f:d5:a9:23:de: dd:e6:87:bd:c0:ab:59:29:0f:7a:8c:62:70:47:44: 23:d8:96:45:a7:6f:94:00:36:1d:8a:45:11:7f:96: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.24.0/22 103.10.96.0/22 103.23.240.0/22 203.128.64.0/19 203.201.50.0/23 IPv6: 2401:1b00::/32 2403:c600::/32 Signature Algorithm: sha256WithRSAEncryption 7e:af:eb:71:9a:a1:56:e9:43:7f:f6:e2:7d:df:5e:b2:74:10: 03:57:72:e8:75:c1:9c:4e:bf:5f:01:c8:ad:11:5b:ef:d7:b1: b1:fe:f6:2e:c6:3d:ef:d7:0b:e9:ef:a7:0d:a2:e7:7f:9f:79: c3:9c:61:f5:47:a7:77:26:00:50:2c:cb:10:0d:fb:bf:26:0b: 21:74:f8:1b:b6:4f:3a:1a:63:f8:c7:a5:39:1b:17:e3:f3:9c: 3d:00:fd:ff:3e:54:13:38:e3:33:13:75:ab:99:8f:e4:9b:d9: 06:be:b8:69:b8:e2:c4:1a:f6:77:a4:d0:99:df:90:bc:3c:c5: bc:a3:e1:95:65:ff:44:94:19:67:82:90:28:7f:f7:63:c2:d6: 00:ec:38:f1:9b:2a:46:c5:c6:43:e3:70:30:95:0c:22:2f:72: c4:62:01:b2:aa:7f:2f:c8:d9:fb:57:e5:da:50:90:87:30:19: bb:f4:f6:f1:9b:d5:77:02:9f:63:69:c0:2f:ac:24:9a:ce:9e: aa:46:e4:85:c3:5a:60:a8:f3:d8:ff:f6:c2:c1:c3:14:41:ca: 10:df:db:b2:a2:aa:5c:ac:d6:70:a1:0b:8b:13:aa:a1:6c:50: 74:90:f3:79:11:04:95:83:ec:00:c9:4b:a9:85:f5:c2:e1:7e: 64:2b:39:ad -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUcdl7pQ4jjpLQIMZCtqNy1TuWs3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyMDE1MDEyNFoX DTI0MDkxODE1MDYyNFowMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUy MUM4OTlCNTZFODlEREI4NEM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlIlkL20F+k/ARzTh+rkLvv6T12NLDvb0INFiMAlQdYqqPbopCSh1It2pMZ BvSRGN/baahE4EkyZHxV10FbLw0yiF9m6jI6C72ORgkM/Iv5PUEMJZj8n1ENA4vf yUV4jCHe4eAskPNpw8j3NifmHBdRjyZYFvCUlXHFmP3NVQsAi0jFQ6kN0eYz16Ar 3LUFDDiFD4JEqT+rhmMpRIjv4b7DsYY4VeFsU/TTcADXrqNGEAe9mKDLuR2gIMmk 5ZTmKlvZiYBOn79Q/2RVIkv0EbF4x5Gf3CcKIpEdfZ/VqSPe3eaHvcCrWSkPeoxi cEdEI9iWRadvlAA2HYpFEX+WYYUCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF6NERb4xmGCtlUhyJm1bonduExXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFm LWQ5YzctNGZmZC1iYTAzLWEzZTFjZGQ4YWVlMC8wLzVFOEQxMTE2RjhDNjYxODJC NjU1MjFDODk5QjU2RTg5RERCODRDNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MCQEAgABMB4D BAIr+BgDBAJnCmADBAJnF/ADBAXLgEADBAHLyTIwFAQCAAIwDgMFACQBGwADBQAk A8YAMA0GCSqGSIb3DQEBCwUAA4IBAQB+r+txmqFW6UN/9uJ9316ydBADV3LodcGc Tr9fAcitEVvv17Gx/vYuxj3v1wvp76cNoud/n3nDnGH1R6d3JgBQLMsQDfu/Jgsh dPgbtk86GmP4x6U5Gxfj85w9AP3/PlQTOOMzE3WrmY/km9kGvrhpuOLEGvZ3pNCZ 35C8PMW8o+GVZf9ElBlngpAof/djwtYA7DjxmypGxcZD43AwlQwiL3LEYgGyqn8v yNn7V+XaUJCHMBm79Pbxm9V3Ap9jacAvrCSazp6qRuSFw1pgqPPY//bCwcMUQcoQ 39uyoqpcrNZwoQuLE6qhbFB0kPN5EQSVg+wAyUuphfXC4X5kKzmt -----END CERTIFICATE-----Generated at Wed May 8 04:37:51 2024 by rpki-client on console-fra.rpki-client.org