$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.cer (raw, json) Hash identifier: y1Z6TEdYX8q/R4GU24E0ZHt3KxCcYws8H3TgjPXYkDs= Subject key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 60A9C69217AE1D6D4EA86362F2785E4228B3EA11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft caRepository: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 Aug 2024 00:26:08 +0000 Certificate not after: Thu 21 Aug 2025 00:31:08 +0000 Subordinate resources: IP: 43.248.24.0/22 IP: 103.10.96.0/22 IP: 103.23.240.0/22 IP: 203.128.64.0/19 IP: 203.201.50.0/23 IP: 2401:1b00::/32 IP: 2403:c600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a9:c6:92:17:ae:1d:6d:4e:a8:63:62:f2:78:5e:42:28:b3:ea:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 00:26:08 2024 GMT Not After : Aug 21 00:31:08 2025 GMT Subject: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:96:42:f6:d0:5f:a4:fc:04:73:4e:1f:ab: 90:bb:ef:e9:3d:76:34:b0:ef:6f:42:0d:16:23:00: 95:07:58:aa:a3:db:a2:90:92:87:52:2d:da:93:19: 06:f4:91:18:df:db:69:a8:44:e0:49:32:64:7c:55: d7:41:5b:2f:0d:32:88:5f:66:ea:32:3a:0b:bd:8e: 46:09:0c:fc:8b:f9:3d:41:0c:25:98:fc:9f:51:0d: 03:8b:df:c9:45:78:8c:21:de:e1:e0:2c:90:f3:69: c3:c8:f7:36:27:e6:1c:17:51:8f:26:58:16:f0:94: 95:71:c5:98:fd:cd:55:0b:00:8b:48:c5:43:a9:0d: d1:e6:33:d7:a0:2b:dc:b5:05:0c:38:85:0f:82:44: a9:3f:ab:86:63:29:44:88:ef:e1:be:c3:b1:86:38: 55:e1:6c:53:f4:d3:70:00:d7:ae:a3:46:10:07:bd: 98:a0:cb:b9:1d:a0:20:c9:a4:e5:94:e6:2a:5b:d9: 89:80:4e:9f:bf:50:ff:64:55:22:4b:f4:11:b1:78: c7:91:9f:dc:27:0a:22:91:1d:7d:9f:d5:a9:23:de: dd:e6:87:bd:c0:ab:59:29:0f:7a:8c:62:70:47:44: 23:d8:96:45:a7:6f:94:00:36:1d:8a:45:11:7f:96: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.24.0/22 103.10.96.0/22 103.23.240.0/22 203.128.64.0/19 203.201.50.0/23 IPv6: 2401:1b00::/32 2403:c600::/32 Signature Algorithm: sha256WithRSAEncryption 42:80:f8:dc:e2:38:0c:88:80:c7:13:28:4a:5a:88:13:fa:7a: eb:77:cb:e8:00:e3:63:97:f0:e1:69:84:21:2a:dc:81:df:09: 96:db:5c:63:58:68:4a:e6:56:3d:a7:a0:24:e2:a3:36:21:4a: 4b:3d:6f:23:18:98:50:47:11:fa:bf:63:6d:ce:b2:11:08:7c: 34:06:cd:b0:9c:07:e2:96:30:4a:03:d7:8f:72:c0:d3:2f:cd: fc:d1:3e:d9:80:2a:c0:cc:2e:86:68:38:70:a4:36:f2:5f:62: f3:0b:1d:f4:7d:cc:7e:35:ce:38:dc:92:d5:07:0d:0b:27:e7: 0d:3a:d4:57:1c:8e:dc:9f:33:7e:7e:9f:d5:81:a2:cc:99:02: df:58:3a:39:bd:4c:0b:27:ce:61:1e:ce:e4:37:95:f3:27:22: 8c:8a:35:c2:4a:d6:a2:b5:3c:02:4a:20:d9:64:d2:77:76:aa: 59:b3:f2:35:2e:fe:b7:af:c3:ac:f3:f2:34:ad:9f:16:3d:4e: a3:0f:9a:77:6e:0a:04:84:11:c1:fa:2c:d1:49:7b:c5:0f:a6: 6d:51:b2:1c:29:0e:a5:39:f4:0c:77:8e:34:24:e7:d9:a6:7c: 89:85:61:3d:23:cf:bf:5a:52:b7:36:1d:ae:17:ee:f9:3b:ab: ae:23:d2:4a -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUYKnGkheuHW1OqGNi8nheQiiz6hEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMjAwMjYwOFoX DTI1MDgyMTAwMzEwOFowMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUy MUM4OTlCNTZFODlEREI4NEM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlIlkL20F+k/ARzTh+rkLvv6T12NLDvb0INFiMAlQdYqqPbopCSh1It2pMZ BvSRGN/baahE4EkyZHxV10FbLw0yiF9m6jI6C72ORgkM/Iv5PUEMJZj8n1ENA4vf yUV4jCHe4eAskPNpw8j3NifmHBdRjyZYFvCUlXHFmP3NVQsAi0jFQ6kN0eYz16Ar 3LUFDDiFD4JEqT+rhmMpRIjv4b7DsYY4VeFsU/TTcADXrqNGEAe9mKDLuR2gIMmk 5ZTmKlvZiYBOn79Q/2RVIkv0EbF4x5Gf3CcKIpEdfZ/VqSPe3eaHvcCrWSkPeoxi cEdEI9iWRadvlAA2HYpFEX+WYYUCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF6NERb4xmGCtlUhyJm1bonduExXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFm LWQ5YzctNGZmZC1iYTAzLWEzZTFjZGQ4YWVlMC8wLzVFOEQxMTE2RjhDNjYxODJC NjU1MjFDODk5QjU2RTg5RERCODRDNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MCQEAgABMB4D BAIr+BgDBAJnCmADBAJnF/ADBAXLgEADBAHLyTIwFAQCAAIwDgMFACQBGwADBQAk A8YAMA0GCSqGSIb3DQEBCwUAA4IBAQBCgPjc4jgMiIDHEyhKWogT+nrrd8voAONj l/DhaYQhKtyB3wmW21xjWGhK5lY9p6Ak4qM2IUpLPW8jGJhQRxH6v2NtzrIRCHw0 Bs2wnAfiljBKA9ePcsDTL8380T7ZgCrAzC6GaDhwpDbyX2LzCx30fcx+Nc443JLV Bw0LJ+cNOtRXHI7cnzN+fp/VgaLMmQLfWDo5vUwLJ85hHs7kN5XzJyKMijXCStai tTwCSiDZZNJ3dqpZs/I1Lv63r8Os8/I0rZ8WPU6jD5p3bgoEhBHB+izRSXvFD6Zt UbIcKQ6lOfQMd440JOfZpnyJhWE9I8+/WlK3Nh2uF+75O6uuI9JK -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org