$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer (raw, json) Hash identifier: NYUWwoyqKpwGmtyv4nCO/xTngM5iS09DQDzQZCHKdd0= Subject key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EF140654F67C10DAE06D8201F06D434735B3757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft caRepository: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Sep 2024 01:22:18 +0000 Certificate not after: Wed 17 Sep 2025 01:27:18 +0000 Subordinate resources: AS: 136102 AS: 137286 IP: 49.128.188.0/22 IP: 103.10.148.0/22 IP: 103.90.248.0/22 IP: 2001:df0:e900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f1:40:65:4f:67:c1:0d:ae:06:d8:20:1f:06:d4:34:73:5b:37:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 18 01:22:18 2024 GMT Not After : Sep 17 01:27:18 2025 GMT Subject: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:64:1b:e7:a0:2b:03:3a:74:39:f1:86:3c: b9:c8:73:fa:4b:3d:8e:e2:d7:03:1c:eb:d3:60:36: 4c:fb:c9:3c:40:80:54:7b:01:08:28:77:9b:86:e2: 53:67:12:7d:1f:23:3a:f1:46:74:bd:75:69:8e:1d: 7d:e4:06:c5:17:82:89:b4:ba:c5:79:48:9b:79:b4: 4f:c0:27:cb:de:a6:e6:f1:4d:0d:20:c1:19:3b:ed: 94:c4:f3:2b:a8:e6:48:1a:ae:3a:57:36:a8:3b:7b: 52:28:ed:72:aa:8e:97:5d:ac:9b:af:29:ed:bd:8d: 60:a5:07:25:bd:9b:2e:af:01:3e:73:91:b7:e8:d6: 06:e9:b0:53:9e:de:9b:2a:30:fd:3b:a5:cd:60:fb: b7:c4:88:5c:31:e9:7c:e6:1c:63:36:9e:13:06:e9: 8b:8b:5b:fd:fd:75:fa:dc:77:25:19:3f:23:65:b1: 2c:1f:ab:75:97:f7:50:b1:9f:9f:b4:e9:16:8e:52: 5a:24:f2:94:7c:a6:2d:08:4e:b9:ec:cc:af:ee:4b: 03:25:e9:2e:10:a2:db:48:36:89:1f:d9:b7:ad:bd: 0f:6c:0e:9e:ec:cd:b5:d5:cd:c8:e0:df:ad:8d:6c: bd:34:be:73:ca:e3:42:6f:b4:5c:8c:91:b9:4b:00: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 103.10.148.0/22 103.90.248.0/22 IPv6: 2001:df0:e900::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 136102 137286 Signature Algorithm: sha256WithRSAEncryption 89:17:69:17:b9:3d:e3:11:16:57:1a:bd:f1:21:ab:1c:1f:0d: ab:6d:e9:dc:9e:7b:29:cb:9d:98:be:bf:a6:64:e7:7f:0f:69: 01:f9:f3:a1:f6:d8:b1:ec:2d:c3:c1:3e:8b:9e:c8:67:28:24: fe:3a:6f:6c:70:08:99:16:96:fc:3c:ca:4a:91:0c:a7:56:c9: 93:cd:24:93:4d:b3:4d:ac:ed:b3:a8:f1:08:12:9e:1f:a7:1b: 37:c8:05:14:6d:08:e8:3a:34:8d:49:05:2a:98:4a:ee:2f:18: 48:b6:82:9f:61:b1:2d:07:4f:83:d1:1f:0d:b5:04:da:f3:55: 38:ae:78:e4:a9:8a:69:72:72:4b:d7:e5:11:b6:79:7a:36:be: db:62:fc:76:9f:eb:03:7c:d3:56:37:c9:3a:57:34:29:3f:e5: a1:82:99:7b:61:bc:37:cf:20:72:7f:6f:43:94:b2:e9:dc:7a: a6:42:9b:b3:c4:37:f7:65:6a:da:bd:34:e7:7d:6f:8e:85:b1: 8e:76:1d:34:41:f9:db:37:ed:a1:35:1c:91:19:b2:19:00:38: 21:e7:37:59:6f:43:9b:ec:bc:9d:17:24:12:12:2c:b9:d1:ee: 92:aa:8b:ce:51:13:de:a9:08:d2:55:a5:02:5f:8b:b9:19:fc: 75:8f:0d:73 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUHvFAZU9nwQ2uBtggHwbUNHNbN1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxODAxMjIxOFoX DTI1MDkxNzAxMjcxOFowMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0Ez MkUzODJEMkMwODNFMTczRTcxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQ6ZBvnoCsDOnQ58YY8uchz+ks9juLXAxzr02A2TPvJPECAVHsBCCh3m4bi U2cSfR8jOvFGdL11aY4dfeQGxReCibS6xXlIm3m0T8Any96m5vFNDSDBGTvtlMTz K6jmSBquOlc2qDt7UijtcqqOl12sm68p7b2NYKUHJb2bLq8BPnORt+jWBumwU57e myow/TulzWD7t8SIXDHpfOYcYzaeEwbpi4tb/f11+tx3JRk/I2WxLB+rdZf3ULGf n7TpFo5SWiTylHymLQhOuezMr+5LAyXpLhCi20g2iR/Zt629D2wOnuzNtdXNyODf rY1svTS+c8rjQm+0XIyRuUsAmQkCAwEAAaOCAvYwggLyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF8ewDeMezqJEsoy44LSwIPhc+ccMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1 LWZiMGMtNGEyNC05ODg5LTMzYmQ1MGRiNGZlMC8wLzVGMUVDMDM3OEM3QjNBODkx MkNBMzJFMzgyRDJDMDgzRTE3M0U3MUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BAIxgLwDBAJnCpQDBAJnWvgwDwQCAAIwCQMHACABDfDpADAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMCE6YCAwIYRjANBgkqhkiG9w0BAQsFAAOCAQEAiRdpF7k94xEW Vxq98SGrHB8Nq23p3J57KcudmL6/pmTnfw9pAfnzofbYsewtw8E+i57IZygk/jpv bHAImRaW/DzKSpEMp1bJk80kk02zTazts6jxCBKeH6cbN8gFFG0I6Do0jUkFKphK 7i8YSLaCn2GxLQdPg9EfDbUE2vNVOK545KmKaXJyS9flEbZ5eja+22L8dp/rA3zT VjfJOlc0KT/loYKZe2G8N88gcn9vQ5Sy6dx6pkKbs8Q392Vq2r00531vjoWxjnYd NEH52zftoTUckRmyGQA4Iec3WW9Dm+y8nRckEhIsudHukqqLzlET3qkI0lWlAl+L uRn8dY8Ncw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org