$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer File: 5EF007981390128F8F14B087123454D686E41CB8.cer (raw, json) Hash identifier: 680zvJ7D9a1qOiw30dAYr5z9mJrPaX3GLb2lB9ZkuZs= Subject key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 611C0811116711505F05A6AEB7B3AA0F61BE9BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft caRepository: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Aug 2023 08:49:14 +0000 Certificate not after: Thu 22 Aug 2024 08:54:14 +0000 Subordinate resources: IP: 103.55.159.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1c:08:11:11:67:11:50:5f:05:a6:ae:b7:b3:aa:0f:61:be:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 08:49:14 2023 GMT Not After : Aug 22 08:54:14 2024 GMT Subject: CN=5EF007981390128F8F14B087123454D686E41CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:ce:da:66:8f:a3:45:fe:c3:3e:41:a9:a2: 5a:17:8a:82:8e:47:e6:af:fb:0e:de:ef:e6:f5:6f: ad:76:3c:98:97:53:17:17:9a:0b:eb:bf:54:15:f3: cd:a3:a2:be:7c:9e:26:55:30:e7:78:c9:fc:5b:10: e9:69:84:fb:b1:7b:47:3c:47:14:b2:8f:0c:27:52: 21:1a:47:d3:70:05:5f:54:c9:72:e3:5b:2a:05:49: c5:d9:fb:b0:d2:65:78:ed:41:86:d4:91:48:8b:27: 24:35:4a:1b:90:81:50:58:82:10:b8:16:75:5f:11: c0:9e:a1:33:66:50:28:42:bb:e0:b3:66:7a:db:d9: 02:89:ee:87:e8:18:03:01:97:a5:e4:d6:7b:80:59: 05:79:4a:76:b7:22:ac:d0:ae:0a:b3:49:8f:2b:cb: 27:0f:f4:f1:6b:a9:6c:b4:04:3d:f2:e1:9c:c7:44: 3a:f6:1e:20:f0:3a:74:f3:cd:25:ec:13:23:49:d1: ec:75:ef:d6:45:bd:73:0c:0e:76:c4:3d:00:43:72: 56:d8:94:21:ca:ad:f3:06:d3:61:8f:a7:1d:0b:37: b9:df:44:db:b3:e9:24:22:50:c0:b2:d4:50:96:0a: 56:50:76:38:cf:44:91:d6:29:3b:f8:07:25:1b:57: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.159.0/24 Signature Algorithm: sha256WithRSAEncryption 99:52:18:1b:f0:74:87:81:53:8b:b3:0f:9f:1d:1b:9a:ed:cd: fc:39:88:e2:35:69:ee:ec:4a:b9:c9:fd:ab:23:39:ce:41:df: fc:d0:a2:ed:b9:29:f6:cd:97:2c:0c:5e:b4:51:df:b3:13:86: 05:43:0b:79:a2:8a:48:f9:35:5d:28:6b:f3:bc:8e:95:e2:63: eb:a4:23:89:cc:1f:3e:61:00:d0:78:6c:d1:97:12:70:ad:83: 95:90:5b:3f:f7:86:71:ce:df:cb:55:7a:90:1d:b0:5b:fc:08: 04:5c:28:7f:fa:a5:da:e4:e6:61:5b:bc:b5:5c:10:e8:ac:e1: 9f:37:30:5b:4d:14:e7:c9:0f:59:98:1c:c0:8f:c1:f6:43:05: f8:0d:dc:9b:ac:8b:1c:ec:13:b3:12:c5:15:4a:7c:31:30:44: ef:69:27:13:4a:84:57:37:d7:7d:44:49:c0:7f:2b:7e:18:82: e3:ed:d9:9a:2f:5f:cc:7f:48:12:b9:90:c7:58:54:46:be:18: cd:ed:40:4b:eb:df:58:e0:24:6b:20:e5:0d:63:bb:f0:7f:66: 5d:c7:06:ea:76:f1:66:6a:0f:40:1b:3b:ed:bb:34:2b:95:fd: da:be:e9:9b:84:f1:bb:62:eb:70:72:93:6e:3e:ca:68:38:01: 59:c8:e0:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYRwIERFnEVBfBaaut7OqD2G+m+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNDA4NDkxNFoX DTI0MDgyMjA4NTQxNFowMzExMC8GA1UEAxMoNUVGMDA3OTgxMzkwMTI4RjhGMTRC MDg3MTIzNDU0RDY4NkU0MUNCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMdztpmj6NF/sM+QamiWheKgo5H5q/7Dt7v5vVvrXY8mJdTFxeaC+u/VBXz zaOivnyeJlUw53jJ/FsQ6WmE+7F7RzxHFLKPDCdSIRpH03AFX1TJcuNbKgVJxdn7 sNJleO1BhtSRSIsnJDVKG5CBUFiCELgWdV8RwJ6hM2ZQKEK74LNmetvZAonuh+gY AwGXpeTWe4BZBXlKdrcirNCuCrNJjyvLJw/08WupbLQEPfLhnMdEOvYeIPA6dPPN JewTI0nR7HXv1kW9cwwOdsQ9AENyVtiUIcqt8wbTYY+nHQs3ud9E27PpJCJQwLLU UJYKVlB2OM9EkdYpO/gHJRtXl1MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7wB5gTkBKPjxSwhxI0VNaG5By4MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NjU5OTQ3NC1mNmI2LTQwODctYTk3ZS03ODhiNTk0OWQ1N2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2NTk5NDc0 LWY2YjYtNDA4Ny1hOTdlLTc4OGI1OTQ5ZDU3Yi8wLzVFRjAwNzk4MTM5MDEyOEY4 RjE0QjA4NzEyMzQ1NEQ2ODZFNDFDQjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnN58wDQYJKoZIhvcNAQELBQADggEBAJlSGBvwdIeBU4uzD58dG5rtzfw5iOI1 ae7sSrnJ/asjOc5B3/zQou25KfbNlywMXrRR37MThgVDC3miikj5NV0oa/O8jpXi Y+ukI4nMHz5hANB4bNGXEnCtg5WQWz/3hnHO38tVepAdsFv8CARcKH/6pdrk5mFb vLVcEOis4Z83MFtNFOfJD1mYHMCPwfZDBfgN3JusixzsE7MSxRVKfDEwRO9pJxNK hFc3131EScB/K34YguPt2ZovX8x/SBK5kMdYVEa+GM3tQEvr31jgJGsg5Q1ju/B/ Zl3HBup28WZqD0AbO+27NCuV/dq+6ZuE8bti63Byk24+ymg4AVnI4Cw= -----END CERTIFICATE-----Generated at Wed May 8 07:45:24 2024 by rpki-client on console-ams.rpki-client.org