$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer File: C005531488F38475CA53CB4A7ABCEC0C32F75962.cer (raw, json) Hash identifier: CThsiv5xtdlb2ThldNXjJWXvCDsSUrYIwOfDzzl3aPQ= Subject key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 712A2646A202DD41A343A739DB0179B31816B341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft caRepository: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 10:05:35 +0000 Certificate not after: Mon 30 Jun 2025 10:10:35 +0000 Subordinate resources: IP: 103.146.188.0/23 IP: 2405:9d40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2a:26:46:a2:02:dd:41:a3:43:a7:39:db:01:79:b3:18:16:b3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 10:05:35 2024 GMT Not After : Jun 30 10:10:35 2025 GMT Subject: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:31:1b:3b:07:ea:06:f0:c2:ef:a4:76:f8: 92:f9:53:f2:e4:d4:2c:8d:76:cf:db:a6:86:ee:71: 26:32:3f:81:59:c4:b5:ef:b2:90:9f:a0:9c:ca:80: f4:f4:99:18:9f:2a:55:69:c6:a5:e1:7b:12:03:16: a2:3a:5d:0e:9a:52:0f:d5:ae:cf:8f:9a:24:f7:70: 73:4d:f9:00:f7:d4:dd:43:11:2b:4b:31:0e:60:15: 52:fc:3e:53:7a:aa:2f:2c:97:04:6d:b3:0b:4b:df: ed:5f:ee:19:d7:5d:b0:7c:bd:9a:49:a7:15:f3:cf: aa:e6:2f:f9:6f:c9:84:b4:bc:3d:d4:12:65:60:ac: 3a:96:ed:6e:87:82:05:08:d9:3e:5c:ca:6e:5e:9e: cf:9b:0d:62:81:19:af:56:aa:e2:22:31:50:7d:e7: 69:cb:2e:ca:46:80:e3:ff:9c:39:7c:7b:d8:76:02: 62:14:9e:84:aa:07:07:81:e5:73:ec:3d:af:2f:6b: 55:0c:26:c7:0c:17:9b:16:5f:65:5f:3f:35:a9:76: b6:c3:0a:c7:27:7d:d8:8e:15:19:cf:b1:b4:3d:4c: 91:08:09:ef:3a:2e:22:f7:cf:c3:7e:cd:f0:c8:be: 4d:0c:eb:dc:a3:ec:7a:94:df:44:e5:36:1d:f5:49: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.188.0/23 IPv6: 2405:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 8c:26:cf:2d:64:20:5b:b6:83:fb:f3:7f:ef:28:74:3a:c5:5a: aa:47:f8:5a:fa:cd:8d:8d:e9:03:3f:de:28:eb:d9:65:a5:ed: 8a:f7:88:c5:e0:50:cf:64:2e:d9:70:85:d0:29:f0:02:d6:71: 60:75:ee:58:41:58:e4:e6:43:f9:7d:7e:89:79:90:7c:83:85: 77:87:be:2f:00:bf:29:1c:7d:a7:d3:3d:7b:a2:64:c9:8b:ad: b6:c1:0b:ec:a7:79:8d:a3:7d:51:fb:52:fc:64:5b:f3:16:1e: 55:36:4a:15:1f:a4:ec:d7:e0:1e:8b:11:5a:55:86:1a:ee:0e: c5:50:42:1c:ce:1f:b4:8f:95:a1:ee:33:f8:19:cf:1b:27:fe: 89:b8:16:3e:b5:36:1e:55:cd:a9:12:02:f7:0e:dd:62:92:d1: 9b:b6:ef:6a:ca:c3:ec:67:45:a6:31:86:2b:97:7b:08:5a:d8: 0b:67:aa:91:70:41:65:7b:12:41:7b:94:9f:81:1a:0c:53:2a: 26:e6:ce:fb:52:03:09:e6:55:be:02:9e:49:95:83:03:8c:c9: ff:47:37:d1:59:08:68:ce:c4:67:0f:e3:11:46:4c:7f:ac:15: 8b:e8:6d:56:e9:fe:57:9e:dd:7b:bb:8d:c8:5b:a0:5c:91:3e: 31:f5:4a:0b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcSomRqIC3UGjQ6c52wF5sxgWs0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTEwMDUzNVoX DTI1MDYzMDEwMTAzNVowMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTND QjRBN0FCQ0VDMEMzMkY3NTk2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlRMRs7B+oG8MLvpHb4kvlT8uTULI12z9umhu5xJjI/gVnEte+ykJ+gnMqA 9PSZGJ8qVWnGpeF7EgMWojpdDppSD9Wuz4+aJPdwc035APfU3UMRK0sxDmAVUvw+ U3qqLyyXBG2zC0vf7V/uGdddsHy9mkmnFfPPquYv+W/JhLS8PdQSZWCsOpbtboeC BQjZPlzKbl6ez5sNYoEZr1aq4iIxUH3nacsuykaA4/+cOXx72HYCYhSehKoHB4Hl c+w9ry9rVQwmxwwXmxZfZV8/Nal2tsMKxyd92I4VGc+xtD1MkQgJ7zouIvfPw37N 8Mi+TQzr3KPsepTfROU2HfVJsfsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMAFUxSI84R1ylPLSnq87Awy91liMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NjRjYmVl LWM1MTMtNDZjNi1hMWQwLTNlYzAxZDdhNjYyNi8wL0MwMDU1MzE0ODhGMzg0NzVD QTUzQ0I0QTdBQkNFQzBDMzJGNzU5NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkrwwDQQCAAIwBwMFACQFnUAwDQYJKoZIhvcNAQELBQADggEBAIwmzy1kIFu2 g/vzf+8odDrFWqpH+Fr6zY2N6QM/3ijr2WWl7Yr3iMXgUM9kLtlwhdAp8ALWcWB1 7lhBWOTmQ/l9fol5kHyDhXeHvi8AvykcfafTPXuiZMmLrbbBC+yneY2jfVH7Uvxk W/MWHlU2ShUfpOzX4B6LEVpVhhruDsVQQhzOH7SPlaHuM/gZzxsn/om4Fj61Nh5V zakSAvcO3WKS0Zu272rKw+xnRaYxhiuXewha2AtnqpFwQWV7EkF7lJ+BGgxTKibm zvtSAwnmVb4CnkmVgwOMyf9HN9FZCGjOxGcP4xFGTH+sFYvobVbp/lee3Xu7jchb oFyRPjH1Sgs= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:59 2024 by rpki-client on console-fra.rpki-client.org