$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer File: B5787D648E70D60E0E09510EBF1809D686E83D03.cer (raw, json) Hash identifier: tqvTJt4097uKuHjUGq3HSGy4g7ljgS7j89C30BSO52I= Subject key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 628DEBA59ADEA7147FC14630E238D88CD031D981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft caRepository: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 25 Jun 2024 23:20:28 +0000 Certificate not after: Tue 24 Jun 2025 23:25:28 +0000 Subordinate resources: IP: 103.172.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8d:eb:a5:9a:de:a7:14:7f:c1:46:30:e2:38:d8:8c:d0:31:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 25 23:20:28 2024 GMT Not After : Jun 24 23:25:28 2025 GMT Subject: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:10:b6:ec:ae:b6:1b:6c:a5:24:eb:e4:9a: d8:9a:d7:b0:87:0c:99:f2:94:84:8e:d1:20:f3:11: 38:33:b7:e9:5d:81:f0:76:79:5e:28:d7:91:f9:fd: 14:01:79:e6:80:18:28:2e:62:c6:2d:b3:16:93:40: 16:93:10:bf:fa:19:10:10:18:04:25:1f:e6:34:46: 70:2a:b9:60:6b:8c:fc:33:36:4e:aa:d6:69:be:e0: 76:be:1e:38:33:74:3c:8f:9e:88:be:71:6f:37:c8: 18:9b:7a:2d:cb:3d:6b:52:29:22:33:b0:e0:b7:9e: ad:dc:e5:81:5f:34:09:bb:8c:35:5e:a0:d3:7b:40: b2:9e:96:f0:9b:7d:58:e4:f2:7d:5e:d3:dd:42:ea: 8d:99:46:53:3d:73:93:bd:93:53:58:be:18:5f:be: d1:fc:d5:de:8d:36:39:8f:10:1c:86:54:f0:95:68: 59:e3:e5:33:a5:3f:cb:22:b4:f0:19:10:1c:ff:9f: 5a:65:59:f0:7c:ec:24:3f:7f:15:85:96:db:f7:27: 60:12:63:25:d8:09:04:9a:ba:6c:49:1a:02:71:53: 7a:ed:03:d6:2d:b0:da:fa:b0:35:94:5e:85:08:dc: 71:e4:26:3e:99:18:37:58:3e:e9:71:3f:c7:6b:9d: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.186.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:46:8c:39:5e:95:bd:4c:48:df:bd:bc:ea:c6:7f:cc:b1:93: 1d:0c:af:21:73:47:ea:66:81:19:2f:11:c8:13:cc:e7:38:97: a8:b1:e5:23:49:8e:44:0b:60:f6:0c:50:33:4d:10:60:01:14: 9a:97:c0:83:1b:e4:f5:c0:48:70:42:6a:c7:ab:fd:91:57:14: a1:b8:31:07:09:23:71:59:0b:ce:03:e7:68:be:a9:34:76:70: f8:94:c8:c1:ab:2e:38:93:0e:d8:e6:68:89:1a:91:f2:6d:12: d7:35:f7:62:0e:83:c4:c4:bc:10:3b:07:ed:de:0e:69:c2:69: 27:32:fe:67:d8:8a:3f:e7:99:92:24:90:c4:99:a8:52:ad:b2: b0:99:cb:42:b6:61:25:19:9e:85:77:9e:70:94:5f:f2:74:3c: 44:48:b1:70:d1:50:4c:d6:d0:ce:54:4f:d0:c3:09:62:ec:a9: 32:0e:c2:4c:77:40:f1:00:42:64:6b:ee:cc:bb:dd:52:65:42: 33:4b:5d:bc:70:33:2d:06:a9:55:d8:9e:08:1d:73:88:37:4a: fb:e8:f4:6e:57:58:28:35:f1:18:ef:a1:29:d1:a5:48:e1:bd: 99:35:5c:de:5c:36:d3:e6:b4:11:2d:08:19:cf:9f:09:ec:2f: a8:83:b0:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYo3rpZrepxR/wUYw4jjYjNAx2YEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYyNTIzMjAyOFoX DTI1MDYyNDIzMjUyOFowMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1 MTBFQkYxODA5RDY4NkU4M0QwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5lELbsrrYbbKUk6+Sa2JrXsIcMmfKUhI7RIPMRODO36V2B8HZ5XijXkfn9 FAF55oAYKC5ixi2zFpNAFpMQv/oZEBAYBCUf5jRGcCq5YGuM/DM2TqrWab7gdr4e ODN0PI+eiL5xbzfIGJt6Lcs9a1IpIjOw4LeerdzlgV80CbuMNV6g03tAsp6W8Jt9 WOTyfV7T3ULqjZlGUz1zk72TU1i+GF++0fzV3o02OY8QHIZU8JVoWePlM6U/yyK0 8BkQHP+fWmVZ8HzsJD9/FYWW2/cnYBJjJdgJBJq6bEkaAnFTeu0D1i2w2vqwNZRe hQjcceQmPpkYN1g+6XE/x2udfOECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLV4fWSOcNYODglRDr8YCdaG6D0DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdj LWYwN2ItNGFhYS1hMGMyLWRmMTdjOTEwYzU4Ni8wL0I1Nzg3RDY0OEU3MEQ2MEUw RTA5NTEwRUJGMTgwOUQ2ODZFODNEMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrLowDQYJKoZIhvcNAQELBQADggEBAE5GjDlelb1MSN+9vOrGf8yxkx0MryFz R+pmgRkvEcgTzOc4l6ix5SNJjkQLYPYMUDNNEGABFJqXwIMb5PXASHBCaser/ZFX FKG4MQcJI3FZC84D52i+qTR2cPiUyMGrLjiTDtjmaIkakfJtEtc192IOg8TEvBA7 B+3eDmnCaScy/mfYij/nmZIkkMSZqFKtsrCZy0K2YSUZnoV3nnCUX/J0PERIsXDR UEzW0M5UT9DDCWLsqTIOwkx3QPEAQmRr7sy73VJlQjNLXbxwMy0GqVXYnggdc4g3 Svvo9G5XWCg18RjvoSnRpUjhvZk1XN5cNtPmtBEtCBnPnwnsL6iDsMY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org