$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer (raw, json) Hash identifier: OCnZ2CoGIy/EtmitGk+AwpbAkV48va0SOgAG8ZUbMys= Subject key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44156C78399C8B7A47B31B88A7A8279F653E6BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 May 2024 12:31:26 +0000 Certificate not after: Fri 09 May 2025 12:36:26 +0000 Subordinate resources: IP: 103.189.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:15:6c:78:39:9c:8b:7a:47:b3:1b:88:a7:a8:27:9f:65:3e:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 10 12:31:26 2024 GMT Not After : May 9 12:36:26 2025 GMT Subject: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:9d:78:0c:e4:f4:24:43:2c:d7:7c:c6:52: d2:a1:6f:d3:0c:2d:aa:63:5e:c7:5b:ab:03:df:0d: e5:5f:6f:39:a0:c1:e0:17:97:7a:ef:d8:f8:4e:b1: 19:ab:9d:78:b4:b8:0f:69:bd:01:55:eb:f8:e1:a7: 18:13:f9:e8:34:ad:17:68:b2:ed:4f:f5:3c:4a:39: 15:a7:0f:1a:5f:d7:b7:63:79:2f:03:1b:09:a6:87: 69:eb:ae:b3:1d:df:80:a0:33:2e:89:4f:aa:62:f0: df:fd:75:35:a3:b5:2f:c0:04:a1:d4:ad:0c:c8:18: 65:12:ad:b7:39:cb:d3:34:b5:01:97:ae:30:da:86: 7c:ea:66:ff:7f:25:4a:bb:3e:cc:ff:11:2f:a4:de: 4d:17:71:25:d3:23:40:b6:a9:d0:63:c5:40:8d:ed: 11:52:55:1b:4f:8f:06:f6:63:1e:81:46:eb:c2:8f: 40:c8:e9:93:db:af:92:f5:0a:cd:2a:ff:6b:77:b9: d0:7c:42:18:43:a5:de:df:c8:8d:fa:ad:ba:83:77: c1:c8:b3:32:5a:3a:49:ef:78:1e:7d:f1:59:ef:b9: 87:bd:8c:2f:b4:e1:ab:0a:04:e1:98:d0:eb:4a:71: d5:13:6d:65:42:ca:79:7c:ef:5c:a7:29:8d:4f:af: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 18:f3:4d:83:75:c5:14:ea:73:e1:6c:ef:2f:fb:09:dd:b4:85: 28:43:db:db:d6:67:72:f5:12:1d:ed:9a:77:7e:bc:b3:7f:58: 0b:32:bb:7d:d8:22:b2:dd:32:f0:58:84:3a:fa:d8:68:c3:22: a3:17:3e:a0:4b:71:33:23:8a:36:01:69:c9:56:26:58:34:17: e8:a3:7c:2b:43:d5:17:85:46:3c:83:98:89:c2:cb:55:58:fb: 64:92:61:22:ad:85:c3:fb:62:27:99:d0:be:45:6d:0d:83:d4: ab:3b:db:9c:c9:1a:9f:8d:e9:3f:aa:e5:10:63:80:3e:b1:e9: 13:2f:81:d6:a9:b4:15:c6:07:2a:8b:85:c2:f3:e8:ef:86:e9: 31:6b:bd:a3:c0:cb:2c:1e:63:65:e7:84:39:fb:eb:6c:f3:56: a8:a6:79:1f:0e:de:17:53:31:88:bf:3b:8f:dd:a9:8f:1f:a3: c5:48:d1:9b:25:d4:de:ae:02:7a:4a:48:0a:b2:a2:59:3e:d7: 91:a0:24:71:9c:ac:6b:9d:54:61:91:0a:58:93:26:26:17:62: 34:47:26:d7:5c:3f:bd:81:fb:21:49:da:b2:aa:6d:0a:7e:49: 91:49:66:27:55:d7:c7:87:af:2d:f2:6f:c7:9d:d0:d4:87:d2: 91:0d:09:ca -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURBVseDmci3pHsxuIp6gnn2U+a8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMDEyMzEyNloX DTI1MDUwOTEyMzYyNlowMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUy RkExODkzNEMxRTdCMUQ5MjE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdbnXgM5PQkQyzXfMZS0qFv0wwtqmNex1urA98N5V9vOaDB4BeXeu/Y+E6x GaudeLS4D2m9AVXr+OGnGBP56DStF2iy7U/1PEo5FacPGl/Xt2N5LwMbCaaHaeuu sx3fgKAzLolPqmLw3/11NaO1L8AEodStDMgYZRKttznL0zS1AZeuMNqGfOpm/38l Srs+zP8RL6TeTRdxJdMjQLap0GPFQI3tEVJVG0+PBvZjHoFG68KPQMjpk9uvkvUK zSr/a3e50HxCGEOl3t/IjfqtuoN3wcizMlo6Se94Hn3xWe+5h72ML7ThqwoE4ZjQ 60px1RNtZULKeXzvXKcpjU+vd7kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7CwCNA+/p5ozUvoYk0weex2SFvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAz LWJmOTYtNGI0MC1iZDRhLTZlMzg4OGM0MDIwNS8wLzVFQzJDMDIzNDBGQkZBNzlB MzM1MkZBMTg5MzRDMUU3QjFEOTIxNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvcgwDQYJKoZIhvcNAQELBQADggEBABjzTYN1xRTqc+Fs7y/7Cd20hShD29vW Z3L1Eh3tmnd+vLN/WAsyu33YIrLdMvBYhDr62GjDIqMXPqBLcTMjijYBaclWJlg0 F+ijfCtD1ReFRjyDmInCy1VY+2SSYSKthcP7YieZ0L5FbQ2D1Ks725zJGp+N6T+q 5RBjgD6x6RMvgdaptBXGByqLhcLz6O+G6TFrvaPAyyweY2XnhDn762zzVqimeR8O 3hdTMYi/O4/dqY8fo8VI0Zsl1N6uAnpKSAqyolk+15GgJHGcrGudVGGRCliTJiYX YjRHJtdcP72B+yFJ2rKqbQp+SZFJZidV18eHry3yb8ed0NSH0pENCco= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:42 2024 by rpki-client on console-ams.rpki-client.org