$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer (raw, json) Hash identifier: hqu/ZvkUTnzbkgsFxrmj9x2A4VRss4lt+pZRRFV+JUc= Subject key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E3CEAA3D2E905425CA4335C3C2A326F15B75FA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Jun 2023 10:08:33 +0000 Certificate not after: Fri 07 Jun 2024 10:13:33 +0000 Subordinate resources: IP: 103.189.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3c:ea:a3:d2:e9:05:42:5c:a4:33:5c:3c:2a:32:6f:15:b7:5f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 9 10:08:33 2023 GMT Not After : Jun 7 10:13:33 2024 GMT Subject: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:9d:78:0c:e4:f4:24:43:2c:d7:7c:c6:52: d2:a1:6f:d3:0c:2d:aa:63:5e:c7:5b:ab:03:df:0d: e5:5f:6f:39:a0:c1:e0:17:97:7a:ef:d8:f8:4e:b1: 19:ab:9d:78:b4:b8:0f:69:bd:01:55:eb:f8:e1:a7: 18:13:f9:e8:34:ad:17:68:b2:ed:4f:f5:3c:4a:39: 15:a7:0f:1a:5f:d7:b7:63:79:2f:03:1b:09:a6:87: 69:eb:ae:b3:1d:df:80:a0:33:2e:89:4f:aa:62:f0: df:fd:75:35:a3:b5:2f:c0:04:a1:d4:ad:0c:c8:18: 65:12:ad:b7:39:cb:d3:34:b5:01:97:ae:30:da:86: 7c:ea:66:ff:7f:25:4a:bb:3e:cc:ff:11:2f:a4:de: 4d:17:71:25:d3:23:40:b6:a9:d0:63:c5:40:8d:ed: 11:52:55:1b:4f:8f:06:f6:63:1e:81:46:eb:c2:8f: 40:c8:e9:93:db:af:92:f5:0a:cd:2a:ff:6b:77:b9: d0:7c:42:18:43:a5:de:df:c8:8d:fa:ad:ba:83:77: c1:c8:b3:32:5a:3a:49:ef:78:1e:7d:f1:59:ef:b9: 87:bd:8c:2f:b4:e1:ab:0a:04:e1:98:d0:eb:4a:71: d5:13:6d:65:42:ca:79:7c:ef:5c:a7:29:8d:4f:af: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 85:ba:08:0a:f4:83:35:51:64:44:dc:ef:88:aa:71:ce:ae:40: c6:f4:d4:ce:11:b1:a7:79:13:c2:b3:12:9a:5c:02:3b:15:18: 8c:3b:3d:25:e6:ba:db:35:8e:02:9e:ba:63:aa:ba:2c:80:b6: f6:8c:7a:68:27:5b:a4:31:36:61:7e:9a:5a:1a:91:a3:ab:83: f9:a6:ce:c2:e0:f5:71:38:85:2d:db:87:ea:9e:88:33:3c:e2: af:45:0e:94:9c:0b:87:6e:df:fb:a0:59:5c:00:ab:17:56:44: 1f:51:e2:7a:1a:b6:5d:3d:2b:21:08:4a:c9:c1:4d:a1:0a:63: 35:52:5d:48:4c:b5:10:a2:f7:5b:32:76:fb:ed:d0:ad:dd:b4: a9:8f:2c:7b:82:eb:06:9e:86:4b:09:89:50:72:e0:ba:c9:10: b4:a7:81:e1:2e:ab:2e:6b:71:b3:61:69:5f:a2:40:af:c1:d7: d3:5d:ac:b2:bd:f9:34:03:10:20:5a:35:5a:8c:58:ef:27:b2: 35:66:c1:0a:d3:e5:ca:7b:21:fe:7a:c5:5e:d7:4d:0e:68:d2: 54:d4:0f:b0:04:40:6c:59:6a:83:af:6b:2c:f4:2a:b6:70:47: 40:f8:6c:81:c8:f7:2d:d9:fb:3d:35:ed:86:d7:32:7e:6b:66: f1:04:4d:64 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbjzqo9LpBUJcpDNcPCoybxW3X6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYwOTEwMDgzM1oX DTI0MDYwNzEwMTMzM1owMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUy RkExODkzNEMxRTdCMUQ5MjE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdbnXgM5PQkQyzXfMZS0qFv0wwtqmNex1urA98N5V9vOaDB4BeXeu/Y+E6x GaudeLS4D2m9AVXr+OGnGBP56DStF2iy7U/1PEo5FacPGl/Xt2N5LwMbCaaHaeuu sx3fgKAzLolPqmLw3/11NaO1L8AEodStDMgYZRKttznL0zS1AZeuMNqGfOpm/38l Srs+zP8RL6TeTRdxJdMjQLap0GPFQI3tEVJVG0+PBvZjHoFG68KPQMjpk9uvkvUK zSr/a3e50HxCGEOl3t/IjfqtuoN3wcizMlo6Se94Hn3xWe+5h72ML7ThqwoE4ZjQ 60px1RNtZULKeXzvXKcpjU+vd7kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7CwCNA+/p5ozUvoYk0weex2SFvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAz LWJmOTYtNGI0MC1iZDRhLTZlMzg4OGM0MDIwNS8wLzVFQzJDMDIzNDBGQkZBNzlB MzM1MkZBMTg5MzRDMUU3QjFEOTIxNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvcgwDQYJKoZIhvcNAQELBQADggEBAIW6CAr0gzVRZETc74iqcc6uQMb01M4R sad5E8KzEppcAjsVGIw7PSXmuts1jgKeumOquiyAtvaMemgnW6QxNmF+mloakaOr g/mmzsLg9XE4hS3bh+qeiDM84q9FDpScC4du3/ugWVwAqxdWRB9R4noatl09KyEI SsnBTaEKYzVSXUhMtRCi91sydvvt0K3dtKmPLHuC6waehksJiVBy4LrJELSngeEu qy5rcbNhaV+iQK/B19NdrLK9+TQDECBaNVqMWO8nsjVmwQrT5cp7If56xV7XTQ5o 0lTUD7AEQGxZaoOvayz0KrZwR0D4bIHI9y3Z+z017YbXMn5rZvEETWQ= -----END CERTIFICATE-----Generated at Wed May 8 04:37:51 2024 by rpki-client on console-fra.rpki-client.org