$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer File: A5D12164B9484E51D4BE4B03823526989B147558.cer (raw, json) Hash identifier: E/1ME++NeWWuPbmXl/wuowhqhkBgR/p7KLABXvtI+Ks= Subject key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 707D23B6441A928997766CCF8D947CB7CB6A7048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Jun 2023 11:57:34 +0000 Certificate not after: Mon 10 Jun 2024 12:02:34 +0000 Subordinate resources: IP: 103.190.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7d:23:b6:44:1a:92:89:97:76:6c:cf:8d:94:7c:b7:cb:6a:70:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 12 11:57:34 2023 GMT Not After : Jun 10 12:02:34 2024 GMT Subject: CN=A5D12164B9484E51D4BE4B03823526989B147558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:18:89:aa:07:5f:c7:59:79:65:05:2c:96: 12:85:5c:51:79:50:dd:48:77:f6:49:e4:eb:ef:42: 5f:59:bc:e5:cf:3c:23:0d:5a:60:a9:8f:60:20:3b: ea:91:68:52:a4:99:51:dd:a3:31:06:0e:9d:b5:3c: 94:49:3c:0d:ed:20:c7:de:0b:db:5d:fd:f9:12:35: 5d:05:ea:c9:87:ae:62:bf:88:a8:eb:2a:62:06:b8: 96:c9:02:1a:22:58:ea:0c:2a:61:04:e9:84:5c:5d: 22:b7:d7:b0:9e:62:0b:06:5a:c0:0c:42:f1:9e:d6: 0b:93:58:28:f0:fb:70:0c:13:4d:89:5b:49:ab:5b: a5:6e:10:f9:33:9a:e1:33:d1:5f:d8:f0:c5:69:d1: 15:fc:85:cd:65:f0:9f:fc:39:40:1a:51:24:3b:87: 09:f4:ef:b4:c4:98:93:1c:38:08:ae:44:f9:45:37: 6b:22:8c:2f:37:aa:9c:c0:49:05:63:fb:e7:4a:b3: 53:ae:2d:f4:09:e5:2b:8f:69:2a:aa:18:e5:b1:1a: af:47:6f:ba:82:e0:55:ca:4d:1b:d1:95:9d:50:8f: f6:f0:50:41:16:40:0c:d5:15:a1:0a:9f:9b:7c:4b: d1:59:03:86:9f:df:3f:bf:b0:dd:c9:22:e6:60:03: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.76.0/23 Signature Algorithm: sha256WithRSAEncryption 73:28:16:d0:b5:84:fb:71:2b:08:44:a8:38:01:00:33:00:37: d6:9d:e2:c8:61:dc:5e:dc:1f:95:75:97:35:24:49:c7:5f:0c: 41:8d:bc:5b:bf:b7:e9:95:f3:8a:d1:97:e9:32:71:9c:7d:a3: 37:b5:c1:da:d3:bc:be:8a:1d:9a:72:2e:4e:c5:18:86:1b:ed: 8c:b4:6a:e3:19:d2:d3:e9:28:ba:a2:e3:06:1b:6a:7d:58:69: b1:48:1c:94:8e:47:9f:6d:1a:82:da:8d:c8:e7:7f:ad:d4:b9: ba:91:c8:ab:49:11:a2:0d:59:cd:f4:8a:3b:66:aa:b9:35:c7: 5e:b2:d8:46:ed:f0:23:c3:bf:26:56:82:d5:e7:ec:ae:3a:52: fe:29:67:a6:d3:94:a7:25:bd:4f:20:d6:c3:61:4c:ad:81:19: f6:50:e0:04:98:b7:87:6d:65:0f:8d:95:77:6b:61:70:1f:c7: ed:fc:d6:5f:27:f5:2f:12:29:34:e3:91:26:0a:a2:d8:44:dc: 5c:78:61:ca:e7:bf:c5:54:d2:d1:2d:a1:e7:1c:b7:98:4f:a7: ed:bb:2e:6e:36:11:d1:d3:1d:99:f4:36:37:62:ec:4f:5f:18: 2b:0c:12:32:89:77:c1:ca:7b:95:5f:af:c1:02:bb:b9:41:c5: a8:c4:a6:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcH0jtkQakomXdmzPjZR8t8tqcEgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYxMjExNTczNFoX DTI0MDYxMDEyMDIzNFowMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0 QjAzODIzNTI2OTg5QjE0NzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG1GImqB1/HWXllBSyWEoVcUXlQ3Uh39knk6+9CX1m85c88Iw1aYKmPYCA7 6pFoUqSZUd2jMQYOnbU8lEk8De0gx94L2139+RI1XQXqyYeuYr+IqOsqYga4lskC GiJY6gwqYQTphFxdIrfXsJ5iCwZawAxC8Z7WC5NYKPD7cAwTTYlbSatbpW4Q+TOa 4TPRX9jwxWnRFfyFzWXwn/w5QBpRJDuHCfTvtMSYkxw4CK5E+UU3ayKMLzeqnMBJ BWP750qzU64t9AnlK49pKqoY5bEar0dvuoLgVcpNG9GVnVCP9vBQQRZADNUVoQqf m3xL0VkDhp/fP7+w3cki5mADd9MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKXRIWS5SE5R1L5LA4I1JpibFHVYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2Nm LTMyN2UtNDJiZC05YjMxLTBhODczZDJlNjY5Mi8wL0E1RDEyMTY0Qjk0ODRFNTFE NEJFNEIwMzgyMzUyNjk4OUIxNDc1NTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvkwwDQYJKoZIhvcNAQELBQADggEBAHMoFtC1hPtxKwhEqDgBADMAN9ad4shh 3F7cH5V1lzUkScdfDEGNvFu/t+mV84rRl+kycZx9oze1wdrTvL6KHZpyLk7FGIYb 7Yy0auMZ0tPpKLqi4wYban1YabFIHJSOR59tGoLajcjnf63UubqRyKtJEaINWc30 ijtmqrk1x16y2Ebt8CPDvyZWgtXn7K46Uv4pZ6bTlKclvU8g1sNhTK2BGfZQ4ASY t4dtZQ+NlXdrYXAfx+381l8n9S8SKTTjkSYKothE3Fx4Ycrnv8VU0tEtoecct5hP p+27Lm42EdHTHZn0Njdi7E9fGCsMEjKJd8HKe5Vfr8ECu7lBxajEprQ= -----END CERTIFICATE-----Generated at Wed May 8 17:45:21 2024 by rpki-client on console-ams.rpki-client.org