$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer File: C451166D49539649063AF8F493F51CB1ACE0AB09.cer (raw, json) Hash identifier: k2Tbh+FCGXhkmgmoSw4zoLcDBibMjZvpyD093+Jnd7M= Subject key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7665093A8423DDE49D567455E84ABBB6A67DD024 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft caRepository: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Sep 2024 23:06:22 +0000 Certificate not after: Wed 24 Sep 2025 23:11:22 +0000 Subordinate resources: IP: 202.55.160.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:65:09:3a:84:23:dd:e4:9d:56:74:55:e8:4a:bb:b6:a6:7d:d0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 25 23:06:22 2024 GMT Not After : Sep 24 23:11:22 2025 GMT Subject: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:e8:d5:c7:f0:e4:f7:b5:5e:12:ce:c1:19: af:e3:f9:66:c6:dc:07:83:56:55:00:89:15:bc:f8: 52:94:e4:fe:72:45:91:e4:88:49:e5:3d:ea:0e:a0: b9:e9:24:6a:47:38:f4:a8:fc:1d:10:2f:06:fc:5a: b5:1a:4f:fc:94:8a:f8:c3:ea:5c:e4:cc:63:ff:21: 25:66:74:8e:75:f3:34:0c:95:93:98:3a:6f:b7:d9: 48:2d:14:bb:98:c5:4d:19:76:f1:67:3b:e4:f0:df: 67:32:ab:d9:7f:de:fa:72:c4:32:e2:c6:d4:68:da: ca:52:22:bc:d1:3e:59:33:51:b0:2b:bf:05:c2:6a: dc:8f:0f:18:29:a2:61:4f:e4:38:ef:80:dc:14:22: f4:7e:16:88:24:9d:61:9e:f7:67:83:aa:86:e0:7b: d6:5e:e8:7c:72:65:51:d7:08:63:03:f8:49:a5:2a: 88:6f:af:89:e9:08:61:ee:fb:ec:4b:c8:90:19:9c: 63:6f:02:a8:cb:b6:85:f2:80:02:49:67:39:60:89: 48:47:fb:4a:fb:6f:9c:89:f0:c5:bd:c8:bc:c9:84: 43:f9:d5:15:d2:e2:09:0b:0e:26:c1:93:aa:1f:33: 12:a0:9c:73:5e:cb:7d:db:b6:1e:2a:59:f5:5a:7a: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.160.0/20 Signature Algorithm: sha256WithRSAEncryption 64:17:50:1c:a1:63:72:ea:eb:d5:8e:87:61:fb:10:ff:a0:98: 3e:2c:d4:01:a5:68:c1:e8:d3:65:18:1a:eb:dc:a7:8f:5c:66: b2:a1:e8:4d:5b:da:2e:2d:25:df:cb:89:77:60:82:85:e3:f4: 55:45:27:28:9c:fd:33:d1:95:ae:c1:02:85:24:50:8b:e2:d6: 2f:7f:8b:27:e6:e2:99:e9:da:f7:fe:37:82:38:ff:a5:eb:69: c4:1d:97:70:5f:a6:28:94:3a:dc:21:62:c6:93:6c:3a:82:ea: 1b:c0:19:44:6a:26:c2:d7:7f:6b:dc:c6:04:00:ef:fa:ae:e0: 22:59:88:f4:1d:77:74:36:ac:db:ab:33:a0:42:36:a8:58:97: e8:43:ab:20:9a:83:51:0b:cd:26:76:15:9f:ce:71:bf:a5:5b: e9:19:7c:0c:92:4d:6e:bc:a4:c6:48:b5:9c:43:1f:dd:56:7d: bc:7a:67:34:61:51:08:45:cb:77:15:db:e8:19:5d:32:50:3a: a1:52:09:a1:89:ce:31:b5:68:8c:6b:54:c2:91:8f:a5:12:a0: 7d:16:0f:30:90:ce:56:5c:06:db:3e:62:5c:f5:1a:fb:02:48: 6b:31:28:e5:e4:7a:cc:0a:3e:3b:93:1c:7a:e4:7d:3d:7d:31: 2a:c5:86:f3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdmUJOoQj3eSdVnRV6Eq7tqZ90CQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyNTIzMDYyMloX DTI1MDkyNDIzMTEyMlowMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FG OEY0OTNGNTFDQjFBQ0UwQUIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7l6NXH8OT3tV4SzsEZr+P5ZsbcB4NWVQCJFbz4UpTk/nJFkeSISeU96g6g uekkakc49Kj8HRAvBvxatRpP/JSK+MPqXOTMY/8hJWZ0jnXzNAyVk5g6b7fZSC0U u5jFTRl28Wc75PDfZzKr2X/e+nLEMuLG1GjaylIivNE+WTNRsCu/BcJq3I8PGCmi YU/kOO+A3BQi9H4WiCSdYZ73Z4OqhuB71l7ofHJlUdcIYwP4SaUqiG+viekIYe77 7EvIkBmcY28CqMu2hfKAAklnOWCJSEf7SvtvnInwxb3IvMmEQ/nVFdLiCQsOJsGT qh8zEqCcc17Lfdu2HipZ9Vp6jNcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRRFm1JU5ZJBjr49JP1HLGs4KsJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQw LTZjZDQtNGE1OS1iMjVjLTNhMTQxODUxYzllYy8wL0M0NTExNjZENDk1Mzk2NDkw NjNBRjhGNDkzRjUxQ0IxQUNFMEFCMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKN6AwDQYJKoZIhvcNAQELBQADggEBAGQXUByhY3Lq69WOh2H7EP+gmD4s1AGl aMHo02UYGuvcp49cZrKh6E1b2i4tJd/LiXdggoXj9FVFJyic/TPRla7BAoUkUIvi 1i9/iyfm4pnp2vf+N4I4/6XracQdl3BfpiiUOtwhYsaTbDqC6hvAGURqJsLXf2vc xgQA7/qu4CJZiPQdd3Q2rNurM6BCNqhYl+hDqyCag1ELzSZ2FZ/Ocb+lW+kZfAyS TW68pMZItZxDH91Wfbx6ZzRhUQhFy3cV2+gZXTJQOqFSCaGJzjG1aIxrVMKRj6US oH0WDzCQzlZcBts+Ylz1GvsCSGsxKOXkeswKPjuTHHrkfT19MSrFhvM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:32 2024 by rpki-client on console-ams.rpki-client.org