$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.cer (raw, json) Hash identifier: PSJ7yAkFavWvJCKWKMcpcI5yxRfYXgLARsfnoyiv1Ak= Subject key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13057E59B66859ED685F15C7FBDC3D4F00BECBF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Apr 2024 18:58:51 +0000 Certificate not after: Tue 15 Apr 2025 19:03:51 +0000 Subordinate resources: IP: 103.7.226.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:7e:59:b6:68:59:ed:68:5f:15:c7:fb:dc:3d:4f:00:be:cb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 16 18:58:51 2024 GMT Not After : Apr 15 19:03:51 2025 GMT Subject: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:6a:04:eb:e4:87:25:90:fd:10:a5:e8:5d: 40:e5:df:01:88:7c:41:fa:05:2c:44:84:a4:a6:24: d3:9d:8f:b6:15:3c:e4:7f:fe:14:d0:69:0f:7b:98: 84:69:b1:c9:06:b8:9a:90:fa:68:22:a8:da:d7:74: 5e:55:e9:aa:19:cd:c3:c1:bd:ff:d8:e3:20:cc:5d: 1d:5d:af:cd:d1:39:9b:5f:40:ba:28:22:73:31:19: b6:ad:60:98:27:d2:a0:d8:51:1f:1a:30:54:36:ac: 66:fb:5c:1e:6c:22:7c:0c:24:e0:72:d5:12:82:ad: e1:3c:94:21:13:1f:8c:82:43:9f:11:2a:99:36:b5: 05:47:f8:e6:ca:f9:2c:91:2e:40:5a:dd:21:82:62: f9:33:03:3f:b7:6f:e2:de:a7:39:34:7b:56:23:03: ba:ad:e8:0a:1f:fb:1c:eb:9d:91:6b:66:7d:57:f5: 53:d0:48:7d:5f:22:12:93:90:23:30:c3:e5:95:45: b4:6a:5e:5d:20:83:15:c6:88:96:84:ec:53:7a:5b: 0e:b9:42:7e:c0:ca:4c:a2:55:29:b3:4a:11:e3:a1: 5a:6f:b7:1d:4f:6e:94:78:dd:e5:91:51:c5:58:65: 71:7c:e6:8d:c2:7a:98:fc:49:d5:e2:c5:40:5c:8d: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.226.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:07:2f:99:71:ed:d7:09:1f:6e:51:27:e3:83:34:07:c7:91: 8a:8a:5b:db:f2:2f:e0:c1:6d:99:cf:d0:20:6f:e7:8f:27:e3: d3:86:73:e2:ca:73:5c:81:e6:08:ae:7e:f7:af:bf:dc:d8:f1: 5f:70:17:cc:ff:67:e0:af:da:63:26:b5:77:9b:10:e4:d4:ef: f7:8e:52:51:17:19:0d:7c:0e:fc:ba:5e:61:5c:ee:7e:72:54: 24:d7:89:8c:35:85:c7:6e:aa:a4:87:4a:51:87:34:13:d5:df: dd:e5:52:78:b4:48:5f:89:92:67:d2:92:71:04:88:31:7e:b7: 81:dc:20:19:7b:44:5c:51:38:f6:38:47:a0:7c:17:0e:ee:99: 44:1f:52:2b:78:c8:a7:d3:c7:8f:dd:7e:0a:17:5e:38:62:1a: 55:14:51:da:37:fd:bf:e3:f9:7f:02:0b:a5:b5:45:dd:26:9a: 2b:55:85:47:ef:0d:c1:31:5f:0d:f0:6d:80:50:22:7c:9d:ac: c3:ad:65:cc:73:8b:3a:ac:d9:3e:1b:e4:52:47:e5:0c:18:cd: 05:b6:43:0a:ff:be:af:b3:28:b8:d1:d6:ba:54:54:45:e0:6c: b1:a3:06:9b:2e:a3:a3:c9:ab:a7:eb:2e:3c:d4:93:42:4b:b2: 0a:83:d3:49 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEwV+WbZoWe1oXxXH+9w9TwC+y/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxNjE4NTg1MVoX DTI1MDQxNTE5MDM1MVowMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0 NUJFN0IyQzk5RTM5RTBGMTg3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUDagTr5IclkP0QpehdQOXfAYh8QfoFLESEpKYk052PthU85H/+FNBpD3uY hGmxyQa4mpD6aCKo2td0XlXpqhnNw8G9/9jjIMxdHV2vzdE5m19AuigiczEZtq1g mCfSoNhRHxowVDasZvtcHmwifAwk4HLVEoKt4TyUIRMfjIJDnxEqmTa1BUf45sr5 LJEuQFrdIYJi+TMDP7dv4t6nOTR7ViMDuq3oCh/7HOudkWtmfVf1U9BIfV8iEpOQ IzDD5ZVFtGpeXSCDFcaIloTsU3pbDrlCfsDKTKJVKbNKEeOhWm+3HU9ulHjd5ZFR xVhlcXzmjcJ6mPxJ1eLFQFyNnAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHVK5XHjQysg54BFvnssmeOeDxhzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2MzU4ZGRh LTBmZjEtNGY2YS1iYjY2LTYwZjRjYTA0YzQ5MC8wLzc1NEFFNTcxRTM0MzJCMjBF NzgwNDVCRTdCMkM5OUUzOUUwRjE4NzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnB+IwDQYJKoZIhvcNAQELBQADggEBAFoHL5lx7dcJH25RJ+ODNAfHkYqKW9vy L+DBbZnP0CBv548n49OGc+LKc1yB5giufvevv9zY8V9wF8z/Z+Cv2mMmtXebEOTU 7/eOUlEXGQ18Dvy6XmFc7n5yVCTXiYw1hcduqqSHSlGHNBPV393lUni0SF+JkmfS knEEiDF+t4HcIBl7RFxROPY4R6B8Fw7umUQfUit4yKfTx4/dfgoXXjhiGlUUUdo3 /b/j+X8CC6W1Rd0mmitVhUfvDcExXw3wbYBQInydrMOtZcxzizqs2T4b5FJH5QwY zQW2Qwr/vq+zKLjR1rpUVEXgbLGjBpsuo6PJq6frLjzUk0JLsgqD00k= -----END CERTIFICATE-----Generated at Wed May 8 09:50:32 2024 by rpki-client on console-fra.rpki-client.org