$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer File: C451166D49539649063AF8F493F51CB1ACE0AB09.cer (raw, json) Hash identifier: uS5p1xtUwlFCuOuRRO2MTvyVUdwB1s+xz/sUK3ZdP5E= Subject key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 16E0B270C292E575B4211A44154F4EE545421FC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft caRepository: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Oct 2023 12:50:02 +0000 Certificate not after: Wed 23 Oct 2024 12:55:02 +0000 Subordinate resources: IP: 202.55.160.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e0:b2:70:c2:92:e5:75:b4:21:1a:44:15:4f:4e:e5:45:42:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 12:50:02 2023 GMT Not After : Oct 23 12:55:02 2024 GMT Subject: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:e8:d5:c7:f0:e4:f7:b5:5e:12:ce:c1:19: af:e3:f9:66:c6:dc:07:83:56:55:00:89:15:bc:f8: 52:94:e4:fe:72:45:91:e4:88:49:e5:3d:ea:0e:a0: b9:e9:24:6a:47:38:f4:a8:fc:1d:10:2f:06:fc:5a: b5:1a:4f:fc:94:8a:f8:c3:ea:5c:e4:cc:63:ff:21: 25:66:74:8e:75:f3:34:0c:95:93:98:3a:6f:b7:d9: 48:2d:14:bb:98:c5:4d:19:76:f1:67:3b:e4:f0:df: 67:32:ab:d9:7f:de:fa:72:c4:32:e2:c6:d4:68:da: ca:52:22:bc:d1:3e:59:33:51:b0:2b:bf:05:c2:6a: dc:8f:0f:18:29:a2:61:4f:e4:38:ef:80:dc:14:22: f4:7e:16:88:24:9d:61:9e:f7:67:83:aa:86:e0:7b: d6:5e:e8:7c:72:65:51:d7:08:63:03:f8:49:a5:2a: 88:6f:af:89:e9:08:61:ee:fb:ec:4b:c8:90:19:9c: 63:6f:02:a8:cb:b6:85:f2:80:02:49:67:39:60:89: 48:47:fb:4a:fb:6f:9c:89:f0:c5:bd:c8:bc:c9:84: 43:f9:d5:15:d2:e2:09:0b:0e:26:c1:93:aa:1f:33: 12:a0:9c:73:5e:cb:7d:db:b6:1e:2a:59:f5:5a:7a: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.160.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:6f:c9:11:51:a9:eb:ea:9e:7c:14:66:a8:e6:55:2f:c0:25: 70:da:ec:f7:53:51:02:dc:37:b5:58:6b:16:e9:98:12:1b:2b: a8:b3:a8:cd:19:26:5b:76:b8:79:3a:70:30:44:57:56:a9:4c: ae:d8:d2:56:ec:1c:ed:85:be:d7:ed:2d:aa:a3:24:03:41:fc: 95:c8:18:81:32:a7:48:d0:42:41:82:ae:87:42:ef:17:8e:ae: cc:1a:8b:92:ef:2a:62:48:89:cf:8a:b9:82:10:6b:1b:d4:86: d4:fa:84:2e:28:db:7f:94:02:a1:8e:fe:99:bb:f9:14:f1:66: 75:a3:aa:f0:f7:48:50:6d:94:e8:4c:5d:6b:ea:50:94:fe:7e: 8f:de:20:b4:35:03:11:b0:1a:c2:11:4b:e1:f6:71:72:f5:d7: 5b:2f:fe:70:e1:96:f7:fb:1d:1d:2a:1e:1d:0b:c2:e2:58:bb: 11:15:1f:3d:fd:c0:36:f1:cc:e2:65:52:5d:b2:61:c8:7d:1f: 37:ce:7b:f3:25:7e:df:8a:35:e6:74:fb:20:2a:dc:c0:fd:a1: ce:c0:1c:91:53:1d:62:91:f4:1b:f0:c3:42:64:ba:f1:65:27: fe:b9:72:8a:03:5f:5e:53:a4:cb:2f:69:cd:29:4c:0b:92:81: 7d:4e:68:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFuCycMKS5XW0IRpEFU9O5UVCH8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyNTEyNTAwMloX DTI0MTAyMzEyNTUwMlowMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FG OEY0OTNGNTFDQjFBQ0UwQUIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7l6NXH8OT3tV4SzsEZr+P5ZsbcB4NWVQCJFbz4UpTk/nJFkeSISeU96g6g uekkakc49Kj8HRAvBvxatRpP/JSK+MPqXOTMY/8hJWZ0jnXzNAyVk5g6b7fZSC0U u5jFTRl28Wc75PDfZzKr2X/e+nLEMuLG1GjaylIivNE+WTNRsCu/BcJq3I8PGCmi YU/kOO+A3BQi9H4WiCSdYZ73Z4OqhuB71l7ofHJlUdcIYwP4SaUqiG+viekIYe77 7EvIkBmcY28CqMu2hfKAAklnOWCJSEf7SvtvnInwxb3IvMmEQ/nVFdLiCQsOJsGT qh8zEqCcc17Lfdu2HipZ9Vp6jNcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRRFm1JU5ZJBjr49JP1HLGs4KsJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQw LTZjZDQtNGE1OS1iMjVjLTNhMTQxODUxYzllYy8wL0M0NTExNjZENDk1Mzk2NDkw NjNBRjhGNDkzRjUxQ0IxQUNFMEFCMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKN6AwDQYJKoZIhvcNAQELBQADggEBADpvyRFRqevqnnwUZqjmVS/AJXDa7PdT UQLcN7VYaxbpmBIbK6izqM0ZJlt2uHk6cDBEV1apTK7Y0lbsHO2FvtftLaqjJANB /JXIGIEyp0jQQkGCrodC7xeOrswai5LvKmJIic+KuYIQaxvUhtT6hC4o23+UAqGO /pm7+RTxZnWjqvD3SFBtlOhMXWvqUJT+fo/eILQ1AxGwGsIRS+H2cXL111sv/nDh lvf7HR0qHh0LwuJYuxEVHz39wDbxzOJlUl2yYch9HzfOe/Mlft+KNeZ0+yAq3MD9 oc7AHJFTHWKR9Bvww0JkuvFlJ/65cooDX15TpMsvac0pTAuSgX1OaBc= -----END CERTIFICATE-----Generated at Wed May 8 09:50:43 2024 by rpki-client on console-fra.rpki-client.org