$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer File: B5787D648E70D60E0E09510EBF1809D686E83D03.cer (raw, json) Hash identifier: gnZ09tOe7cihRBspSmWKBuCNZUl9i3K6tI+JtFpLOOY= Subject key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26F85B0D8FC9143E52594099E7523C0300833AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft caRepository: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 25 Jul 2023 13:29:47 +0000 Certificate not after: Tue 23 Jul 2024 13:34:47 +0000 Subordinate resources: IP: 103.172.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f8:5b:0d:8f:c9:14:3e:52:59:40:99:e7:52:3c:03:00:83:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 13:29:47 2023 GMT Not After : Jul 23 13:34:47 2024 GMT Subject: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:10:b6:ec:ae:b6:1b:6c:a5:24:eb:e4:9a: d8:9a:d7:b0:87:0c:99:f2:94:84:8e:d1:20:f3:11: 38:33:b7:e9:5d:81:f0:76:79:5e:28:d7:91:f9:fd: 14:01:79:e6:80:18:28:2e:62:c6:2d:b3:16:93:40: 16:93:10:bf:fa:19:10:10:18:04:25:1f:e6:34:46: 70:2a:b9:60:6b:8c:fc:33:36:4e:aa:d6:69:be:e0: 76:be:1e:38:33:74:3c:8f:9e:88:be:71:6f:37:c8: 18:9b:7a:2d:cb:3d:6b:52:29:22:33:b0:e0:b7:9e: ad:dc:e5:81:5f:34:09:bb:8c:35:5e:a0:d3:7b:40: b2:9e:96:f0:9b:7d:58:e4:f2:7d:5e:d3:dd:42:ea: 8d:99:46:53:3d:73:93:bd:93:53:58:be:18:5f:be: d1:fc:d5:de:8d:36:39:8f:10:1c:86:54:f0:95:68: 59:e3:e5:33:a5:3f:cb:22:b4:f0:19:10:1c:ff:9f: 5a:65:59:f0:7c:ec:24:3f:7f:15:85:96:db:f7:27: 60:12:63:25:d8:09:04:9a:ba:6c:49:1a:02:71:53: 7a:ed:03:d6:2d:b0:da:fa:b0:35:94:5e:85:08:dc: 71:e4:26:3e:99:18:37:58:3e:e9:71:3f:c7:6b:9d: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.186.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:2e:d3:ad:2c:2e:07:c3:c6:a6:4e:ad:1e:3f:56:d8:cb:58: ea:20:58:80:f7:82:74:d7:11:a4:7b:b3:ac:bd:da:7d:87:eb: 26:d1:a3:4a:81:e6:c7:46:e0:1d:51:c1:11:ba:0c:27:33:c5: d0:27:12:d0:92:45:ee:cd:54:77:86:af:f7:a6:62:93:a4:0a: ce:12:f3:ca:73:5f:f3:b1:7b:d5:f3:d2:79:f7:f2:9e:37:48: 50:c1:c1:4f:2d:db:6c:ad:93:8e:50:1a:c6:55:ba:66:b7:96: c3:01:44:26:73:34:cc:e5:f9:3a:21:c6:8e:58:a9:e9:0f:c1: ea:bb:d3:5b:cd:3a:7d:8d:8e:ed:99:bd:f9:34:fa:9d:65:f5: 44:44:29:dd:99:af:83:4f:58:19:18:3b:cc:90:1b:07:5d:a0: 65:d7:08:80:22:7a:3e:f7:41:3c:93:f6:60:ef:93:09:65:4a: 4a:ac:f6:8a:2c:fe:66:e5:e5:a4:d3:7e:64:2a:45:a9:60:d3: f8:58:2f:f4:d3:21:64:51:c2:f3:7b:1b:31:de:af:1a:17:35: dc:3d:b2:57:4c:f2:35:e1:4b:54:24:87:ab:34:14:0b:5b:25: 75:e2:55:c6:ee:96:86:a5:1e:fd:9e:23:4f:7c:a5:25:9f:45: cb:73:85:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJvhbDY/JFD5SWUCZ51I8AwCDOu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyNTEzMjk0N1oX DTI0MDcyMzEzMzQ0N1owMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1 MTBFQkYxODA5RDY4NkU4M0QwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5lELbsrrYbbKUk6+Sa2JrXsIcMmfKUhI7RIPMRODO36V2B8HZ5XijXkfn9 FAF55oAYKC5ixi2zFpNAFpMQv/oZEBAYBCUf5jRGcCq5YGuM/DM2TqrWab7gdr4e ODN0PI+eiL5xbzfIGJt6Lcs9a1IpIjOw4LeerdzlgV80CbuMNV6g03tAsp6W8Jt9 WOTyfV7T3ULqjZlGUz1zk72TU1i+GF++0fzV3o02OY8QHIZU8JVoWePlM6U/yyK0 8BkQHP+fWmVZ8HzsJD9/FYWW2/cnYBJjJdgJBJq6bEkaAnFTeu0D1i2w2vqwNZRe hQjcceQmPpkYN1g+6XE/x2udfOECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLV4fWSOcNYODglRDr8YCdaG6D0DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdj LWYwN2ItNGFhYS1hMGMyLWRmMTdjOTEwYzU4Ni8wL0I1Nzg3RDY0OEU3MEQ2MEUw RTA5NTEwRUJGMTgwOUQ2ODZFODNEMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrLowDQYJKoZIhvcNAQELBQADggEBACwu060sLgfDxqZOrR4/VtjLWOogWID3 gnTXEaR7s6y92n2H6ybRo0qB5sdG4B1RwRG6DCczxdAnEtCSRe7NVHeGr/emYpOk Cs4S88pzX/Oxe9Xz0nn38p43SFDBwU8t22ytk45QGsZVuma3lsMBRCZzNMzl+Toh xo5YqekPweq701vNOn2Nju2Zvfk0+p1l9UREKd2Zr4NPWBkYO8yQGwddoGXXCIAi ej73QTyT9mDvkwllSkqs9oos/mbl5aTTfmQqRalg0/hYL/TTIWRRwvN7GzHerxoX Ndw9sldM8jXhS1Qkh6s0FAtbJXXiVcbuloalHv2eI098pSWfRctzhSI= -----END CERTIFICATE-----Generated at Wed May 8 21:02:26 2024 by rpki-client on console-fra.rpki-client.org