$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer File: C45A558750D6CF5BE02532DDE80326AEF5012912.cer (raw, json) Hash identifier: FYK2QfyVfZpdIzDS93Zq/JgSVedFnbh+NhLZ4LLRpQY= Subject key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 195F206F9B1A0506808D8A030E8C753D9A1EFB4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 05 May 2024 04:07:07 +0000 Certificate not after: Sun 04 May 2025 04:12:07 +0000 Subordinate resources: IP: 103.170.115.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5f:20:6f:9b:1a:05:06:80:8d:8a:03:0e:8c:75:3d:9a:1e:fb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 5 04:07:07 2024 GMT Not After : May 4 04:12:07 2025 GMT Subject: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:a4:2d:5a:02:87:31:85:9a:64:6a:74:4e: 54:1f:4f:78:62:57:d0:63:66:55:e4:6f:d0:1a:34: 79:a2:57:96:15:27:ef:3f:84:d7:69:5d:30:61:40: c9:29:79:a1:15:25:59:3c:15:36:fc:f4:8d:b9:bd: 7f:39:98:9b:49:1e:ed:ab:9f:5d:3c:9d:af:94:61: e7:9f:fa:1f:b5:04:7a:89:dd:9b:83:43:1d:39:7f: ba:7d:09:83:99:7f:20:b5:c0:65:0a:9e:dd:ce:04: 25:8e:d4:7f:07:75:bb:b0:2c:50:21:a6:bc:c3:cf: a6:ac:cb:51:ec:86:13:8a:56:2a:47:3a:5c:6f:0c: b0:ea:f9:d8:ad:e1:cc:3a:1f:7e:8d:1c:c2:e3:6b: fa:ed:07:16:07:56:24:7d:55:57:07:5a:e6:1e:c1: 2c:fb:b3:bf:db:ad:73:cd:c5:b0:b5:29:92:e7:13: 84:4c:51:42:82:c6:af:52:2f:3c:3d:1a:b4:29:5f: bc:95:e9:f2:7a:7d:57:95:80:1d:8b:43:c0:b0:86: b2:06:e9:6a:63:4d:46:72:5b:c1:72:be:11:36:10: 1e:b6:20:49:05:8d:21:95:7d:76:23:bf:88:33:52: 0b:bc:67:bc:94:6e:e6:87:45:e9:bb:bd:62:5a:68: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.115.0/24 Signature Algorithm: sha256WithRSAEncryption 59:cf:7d:fb:6e:33:3e:04:a3:81:4b:d8:9f:57:6a:07:6e:64: 99:e0:b8:5c:83:05:c0:a5:2b:53:cf:ff:ca:c2:af:bd:88:6a: 7e:07:04:83:52:c7:45:e7:59:59:03:d3:94:5d:f9:66:a4:ea: c4:e3:a7:e1:87:e7:9e:e5:b2:1e:a5:9a:2b:1f:f6:3d:ea:f9: 4d:61:d2:c4:25:d1:c1:a1:1e:0f:3b:fd:86:26:bc:44:8a:dc: d2:4a:b8:e0:36:be:ff:af:c8:74:57:e9:6a:36:62:a5:99:7f: 46:e8:c4:17:b0:36:10:84:23:5c:c8:85:5b:f9:7e:a7:50:b5: f0:fd:4f:2e:16:a4:fe:2f:f8:a9:99:1d:cc:48:22:0d:ec:42: b3:ef:ed:82:c9:b2:93:1e:c0:a1:b4:68:a0:c5:71:84:01:91: 48:86:95:a1:b5:58:d6:3f:54:e1:d1:07:89:1c:6a:16:43:b3: 58:6a:6f:bf:a4:2c:2c:5c:96:45:6d:70:dc:19:4f:16:7c:d8: 53:e9:59:a6:a6:e0:d1:61:19:33:8d:b8:6a:77:2f:5a:3d:6a: 34:71:a8:08:f7:5f:87:54:d1:53:85:56:4f:76:a3:36:29:10: 61:56:18:c9:26:65:0f:ce:cb:78:af:cb:1d:01:e5:35:8c:70: 35:f0:e7:ad -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGV8gb5saBQaAjYoDDox1PZoe+00wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwNTA0MDcwN1oX DTI1MDUwNDA0MTIwN1owMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUz MkRERTgwMzI2QUVGNTAxMjkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfRpC1aAocxhZpkanROVB9PeGJX0GNmVeRv0Bo0eaJXlhUn7z+E12ldMGFA ySl5oRUlWTwVNvz0jbm9fzmYm0ke7aufXTydr5Rh55/6H7UEeondm4NDHTl/un0J g5l/ILXAZQqe3c4EJY7Ufwd1u7AsUCGmvMPPpqzLUeyGE4pWKkc6XG8MsOr52K3h zDoffo0cwuNr+u0HFgdWJH1VVwda5h7BLPuzv9utc83FsLUpkucThExRQoLGr1Iv PD0atClfvJXp8np9V5WAHYtDwLCGsgbpamNNRnJbwXK+ETYQHrYgSQWNIZV9diO/ iDNSC7xnvJRu5odF6bu9Ylpo29kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRaVYdQ1s9b4CUy3egDJq71ASkSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYmMzZjI5 LTZmOWQtNDdkMy05ZTc3LWMyODllNWZlZTc4ZS8wL0M0NUE1NTg3NTBENkNGNUJF MDI1MzJEREU4MDMyNkFFRjUwMTI5MTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqnMwDQYJKoZIhvcNAQELBQADggEBAFnPfftuMz4Eo4FL2J9XagduZJnguFyD BcClK1PP/8rCr72Ian4HBINSx0XnWVkD05Rd+Wak6sTjp+GH557lsh6lmisf9j3q +U1h0sQl0cGhHg87/YYmvESK3NJKuOA2vv+vyHRX6Wo2YqWZf0boxBewNhCEI1zI hVv5fqdQtfD9Ty4WpP4v+KmZHcxIIg3sQrPv7YLJspMewKG0aKDFcYQBkUiGlaG1 WNY/VOHRB4kcahZDs1hqb7+kLCxclkVtcNwZTxZ82FPpWaam4NFhGTONuGp3L1o9 ajRxqAj3X4dU0VOFVk92ozYpEGFWGMkmZQ/Oy3ivyx0B5TWMcDXw560= -----END CERTIFICATE-----Generated at Wed May 8 18:12:20 2024 by rpki-client on console-fra.rpki-client.org