$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer (raw, json) Hash identifier: 10xXFmezmLrJjiEFa5zsdFvDrs0Zvak/xbk+LMb1KsA= Subject key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45DFF9CE7A8E6D45FBE45DA6FCB9A72DF2A3021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft caRepository: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 02:14:37 +0000 Certificate not after: Tue 01 Jul 2025 02:19:37 +0000 Subordinate resources: IP: 103.148.110.0/23 IP: 2405:cec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:df:f9:ce:7a:8e:6d:45:fb:e4:5d:a6:fc:b9:a7:2d:f2:a3:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 2 02:14:37 2024 GMT Not After : Jul 1 02:19:37 2025 GMT Subject: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:e3:78:ba:ef:1b:51:d7:42:20:d1:6d:a4: fb:28:86:54:d2:78:8e:57:8a:42:fe:2f:0c:f8:75: 35:0b:dd:16:90:e9:68:f4:38:16:15:87:09:10:51: 1c:9f:d7:c5:af:61:ef:6b:67:9c:ab:6f:c6:c0:ac: 11:90:47:75:d2:c1:b1:c6:8b:76:48:67:9d:5d:06: d2:c3:58:f4:4e:c1:99:df:63:3e:99:99:90:fb:29: 7f:c1:4f:fc:2c:8e:8f:45:04:91:56:35:df:9e:88: 41:3c:96:f9:06:93:13:2d:7e:5f:29:29:c4:59:d5: 0a:c9:b4:4b:5a:65:32:03:fa:44:5a:fa:3b:19:f8: 3b:c0:3f:99:40:b2:aa:a9:b2:1a:91:07:42:04:f1: f1:13:0d:cd:98:b2:3c:3e:c0:79:8f:01:b8:50:89: ef:1f:37:20:fa:51:7a:48:b8:31:c3:93:56:58:20: 3a:b5:47:55:17:08:cc:12:ee:92:6d:41:d2:a9:35: ed:8e:32:cd:6a:0b:70:3b:d4:75:41:5c:64:6a:ab: 27:30:16:d3:5e:ed:ba:11:4c:4c:d8:ac:da:c3:b9: 97:e3:84:f8:28:ca:83:8b:58:79:e5:ef:5e:b3:f7: 5e:a3:d5:53:8b:c2:c6:6c:76:5d:4e:1c:a8:e6:87: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.110.0/23 IPv6: 2405:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 20:89:94:89:29:dd:79:50:ad:82:ae:9f:12:f0:0c:fc:35:23: 8f:db:d5:b6:07:aa:da:9a:f7:14:a7:47:8c:7e:6e:1c:90:91: 91:37:f5:4e:a3:82:57:c0:ef:cd:1b:d5:fb:d3:dc:65:46:b3: ef:71:b9:39:49:a4:76:c0:0f:51:a4:b8:95:29:e6:22:c8:75: 29:84:c5:76:a8:77:9d:9e:7e:58:4d:9f:c3:d3:8d:de:a3:2f: fa:27:fe:2b:4f:85:36:0e:38:e9:cd:3e:3c:5d:54:6f:80:1c: 62:d5:85:71:f7:50:fc:ad:6d:25:7b:15:af:e5:3c:5d:56:00: f7:7b:ae:ea:6c:3b:c9:59:17:d8:f9:f1:cf:a9:93:ef:8f:69: e4:c8:9f:b2:52:17:42:b8:b8:09:ba:5a:71:b8:51:a6:87:a1: 15:75:00:79:ab:0d:6b:91:32:0c:5a:b2:18:95:80:e0:d7:df: 50:93:5c:0a:19:02:48:28:30:04:b0:53:de:20:40:2a:b4:a4: b1:2e:47:bf:d4:4e:75:33:b2:ae:94:32:9a:06:2c:36:9f:7d: fd:87:f6:12:3d:52:8d:58:6c:18:aa:b5:06:7c:b3:92:0f:d4: 2f:92:e4:ba:86:fc:54:ed:d5:ec:bd:2e:f7:11:41:dc:b3:fb: 83:b7:0a:65 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIURd/5znqObUX75F2m/LmnLfKjAh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAyMTQzN1oX DTI1MDcwMTAyMTkzN1owMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZC REJFNzE4Qjk0OTUwMUQ5N0RDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKet43i67xtR10Ig0W2k+yiGVNJ4jleKQv4vDPh1NQvdFpDpaPQ4FhWHCRBR HJ/Xxa9h72tnnKtvxsCsEZBHddLBscaLdkhnnV0G0sNY9E7Bmd9jPpmZkPspf8FP /CyOj0UEkVY1356IQTyW+QaTEy1+XykpxFnVCsm0S1plMgP6RFr6Oxn4O8A/mUCy qqmyGpEHQgTx8RMNzZiyPD7AeY8BuFCJ7x83IPpReki4McOTVlggOrVHVRcIzBLu km1B0qk17Y4yzWoLcDvUdUFcZGqrJzAW017tuhFMTNis2sO5l+OE+CjKg4tYeeXv XrP3XqPVU4vCxmx2XU4cqOaHVnkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/N+qq4SQWGjU+9vnGLlJUB2X3EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3 LWFjZDMtNDI3Yy1iNWU3LWRiMzkxN2YxODVjOC8wLzVGQ0RGQUFBQjg0OTA1ODY4 RDRGQkRCRTcxOEI5NDk1MDFEOTdEQzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlG4wDQQCAAIwBwMFACQFzsAwDQYJKoZIhvcNAQELBQADggEBACCJlIkp3XlQ rYKunxLwDPw1I4/b1bYHqtqa9xSnR4x+bhyQkZE39U6jglfA780b1fvT3GVGs+9x uTlJpHbAD1GkuJUp5iLIdSmExXaod52eflhNn8PTjd6jL/on/itPhTYOOOnNPjxd VG+AHGLVhXH3UPytbSV7Fa/lPF1WAPd7rupsO8lZF9j58c+pk++PaeTIn7JSF0K4 uAm6WnG4UaaHoRV1AHmrDWuRMgxashiVgODX31CTXAoZAkgoMASwU94gQCq0pLEu R7/UTnUzsq6UMpoGLDafff2H9hI9Uo1YbBiqtQZ8s5IP1C+S5LqG/FTt1ey9LvcR Qdyz+4O3CmU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:43 2025 by rpki-client