$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer (raw, json) Hash identifier: B4F5+o8S2ejStHkSv0fposxkWQE4PQ2EJ4JSVUZ+n68= Subject key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09A249E8D8BC7BA9B80940CBC2A4B3088809B6C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft caRepository: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:45:16 +0000 Certificate not after: Mon 30 Jun 2025 18:50:16 +0000 Subordinate resources: IP: 103.23.232.0/23 IP: 103.81.100.0/23 IP: 2405:1e40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a2:49:e8:d8:bc:7b:a9:b8:09:40:cb:c2:a4:b3:08:88:09:b6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 18:45:16 2024 GMT Not After : Jun 30 18:50:16 2025 GMT Subject: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:54:3c:25:03:e2:b8:c9:ea:ac:55:39:f6: 12:2d:fa:b8:7c:81:9a:97:8f:c0:bc:1b:14:b8:84: 45:37:f7:ac:55:aa:46:b1:2d:3e:4f:f4:28:c3:07: e2:e6:6d:4c:4c:c8:f1:4c:26:c3:6e:ab:e5:96:48: 9a:91:40:1d:65:81:ba:f0:47:41:3e:96:fb:cd:1d: 74:21:6d:35:cd:bb:ac:06:3e:53:fc:aa:c3:6e:93: 6e:7f:40:0a:7a:70:e1:7e:76:32:ea:39:48:ee:f6: a8:05:d9:4f:2f:59:10:2d:d9:2e:b8:39:a7:9b:c6: bc:a4:84:be:dd:c3:07:57:6e:45:5d:3b:7a:6d:08: ec:19:7a:f3:2f:93:d5:60:27:39:50:8e:16:00:5d: c8:11:45:bd:cf:53:a1:84:e8:ee:f2:5f:7c:11:96: b1:be:f1:00:36:ab:16:45:db:c5:25:ec:e1:04:bf: bb:f3:31:4e:f0:d8:4b:af:0a:44:cc:1f:db:8a:d2: 31:26:3a:7d:dc:1e:cd:9c:8d:b5:b5:ce:10:7a:f8: 73:64:75:b0:8f:f7:94:d9:83:13:3d:7a:3f:cf:74: 1b:26:28:d1:4b:c0:4c:c4:5d:e7:54:da:d4:0f:1c: d0:3b:f4:f0:a8:e7:2f:77:bf:30:9a:b6:f1:d5:04: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.232.0/23 103.81.100.0/23 IPv6: 2405:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 96:be:15:ee:1e:0b:c1:b7:56:9a:1b:1d:29:bd:5b:1f:fc:2c: 72:a8:2b:78:e1:e0:f2:98:d7:73:c4:96:8e:f4:f3:8c:00:ad: de:3d:d2:e3:54:7d:a3:54:0f:26:9f:33:2e:73:64:ef:77:42: 9c:57:55:b7:f8:bd:cc:74:be:cb:8d:3a:44:bf:b5:ba:09:b9: 19:54:17:d3:fa:c7:03:2f:b4:3c:cc:61:86:49:f2:aa:f1:1f: cd:7e:7d:57:06:57:31:84:a7:36:db:66:5b:37:7a:93:a9:3e: 20:52:df:7d:3f:84:7a:43:b0:3e:91:71:83:56:4d:72:96:b7: bc:25:3c:7e:66:e7:86:10:e4:2e:0d:13:0e:85:42:6d:e8:e0: f1:b5:5f:6e:2e:39:c0:51:67:99:12:a2:3a:c6:16:23:55:48: 24:ef:64:73:e6:62:52:f5:91:28:d7:2a:bf:03:66:1d:40:51: cc:be:e1:eb:bf:96:6b:ec:27:3e:cd:94:5c:74:40:92:b2:b5: 95:9d:fc:be:e8:2c:1e:e3:7a:b6:ab:14:df:36:a3:9b:3e:6f: af:36:d6:00:cb:a3:5b:a6:fa:dc:07:3f:52:72:dc:77:7a:4a: 96:4b:eb:11:df:3e:75:e6:01:a6:82:c4:4a:60:37:d7:84:55: 83:77:c7:0a -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUCaJJ6Ni8e6m4CUDLwqSzCIgJtsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4NDUxNloX DTI1MDYzMDE4NTAxNlowMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5 NzdDRjRBQzY1OTZGREQ5N0I5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuoVDwlA+K4yeqsVTn2Ei36uHyBmpePwLwbFLiERTf3rFWqRrEtPk/0KMMH 4uZtTEzI8Uwmw26r5ZZImpFAHWWBuvBHQT6W+80ddCFtNc27rAY+U/yqw26Tbn9A Cnpw4X52Muo5SO72qAXZTy9ZEC3ZLrg5p5vGvKSEvt3DB1duRV07em0I7Bl68y+T 1WAnOVCOFgBdyBFFvc9ToYTo7vJffBGWsb7xADarFkXbxSXs4QS/u/MxTvDYS68K RMwf24rSMSY6fdwezZyNtbXOEHr4c2R1sI/3lNmDEz16P890GyYo0UvATMRd51Ta 1A8c0Dv08KjnL3e/MJq28dUEwxcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUeN1I7BbFmt96XfPSsZZb92XuYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0 LWNkYWMtNDFjZi04ODU4LWQ3NDEwZjY0ZDE1NS8wL0E1MUUzNzUyM0IwNUIxNjZC N0RFOTc3Q0Y0QUM2NTk2RkREOTdCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAFnF+gDBAFnUWQwDQQCAAIwBwMFACQFHkAwDQYJKoZIhvcNAQELBQADggEBAJa+ Fe4eC8G3VpobHSm9Wx/8LHKoK3jh4PKY13PElo7084wArd490uNUfaNUDyafMy5z ZO93QpxXVbf4vcx0vsuNOkS/tboJuRlUF9P6xwMvtDzMYYZJ8qrxH81+fVcGVzGE pzbbZls3epOpPiBS330/hHpDsD6RcYNWTXKWt7wlPH5m54YQ5C4NEw6FQm3o4PG1 X24uOcBRZ5kSojrGFiNVSCTvZHPmYlL1kSjXKr8DZh1AUcy+4eu/lmvsJz7NlFx0 QJKytZWd/L7oLB7jerarFN82o5s+b6821gDLo1um+twHP1Jy3Hd6SpZL6xHfPnXm AaaCxEpgN9eEVYN3xwo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:22 2024 by rpki-client on console-fra.rpki-client.org