$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer File: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer (raw, json) Hash identifier: VEAxBbT/+r396KzAMk8MRZGfyvHm3FnR9xdhwYYIa50= Subject key identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D8E506676C377450A67FF7D4304CF8D620B5C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft caRepository: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Dec 2024 18:51:44 +0000 Certificate not after: Tue 23 Dec 2025 18:56:44 +0000 Subordinate resources: IP: 103.151.145.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8e:50:66:76:c3:77:45:0a:67:ff:7d:43:04:cf:8d:62:0b:5c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 24 18:51:44 2024 GMT Not After : Dec 23 18:56:44 2025 GMT Subject: CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:8b:9b:73:82:71:58:07:8d:62:e4:6f:8a: 3a:fd:95:9f:f0:7f:d5:76:e4:84:2a:0e:5c:3e:0e: 6f:bf:f3:e2:f9:6c:c0:3e:b4:ee:6b:ad:ce:77:c3: 87:5c:12:b2:48:79:7a:a6:b9:64:92:14:92:31:65: fd:70:22:61:c9:52:4b:db:5f:03:9b:b8:e1:97:21: 47:57:55:83:88:74:ef:ad:68:63:3d:74:6f:50:88: d5:25:a8:15:80:83:72:77:3d:c6:96:ff:fa:e3:be: 19:97:3d:ab:30:76:64:54:c1:9e:53:81:0c:75:d7: c3:2e:af:71:b1:b2:cf:a9:24:1e:03:8c:d8:23:82: 47:bf:a0:79:0e:7a:b6:de:68:7d:0e:7f:dc:d8:b5: 8e:f8:20:88:10:06:77:79:b3:4d:7f:13:54:31:80: 0b:14:90:09:4f:6f:01:42:c6:4a:2b:71:68:c9:93: ef:64:98:8a:3c:30:51:3e:51:ca:c0:08:94:6f:e3: fc:bd:d5:5f:3c:c2:60:a8:85:ed:38:82:a0:0d:e9: d6:84:f4:c6:82:e2:49:1a:a8:ab:b0:08:49:1c:e2: 68:24:20:73:06:37:45:50:f7:82:27:96:0f:2e:f2: 81:e8:82:7f:c5:24:bb:29:71:63:f3:be:21:66:7f: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.145.0/24 Signature Algorithm: sha256WithRSAEncryption 09:91:aa:cc:9f:ad:b1:f3:9e:c3:a9:35:58:ee:72:9b:98:8f: 3f:6b:f6:ab:97:f1:2b:ac:a9:68:8a:73:84:79:b6:98:96:a6: 84:10:b7:67:ae:92:03:85:30:70:7e:bc:41:12:10:50:78:cf: 2c:9b:73:79:0b:36:19:36:e8:8e:8a:1d:20:9a:70:5c:e1:d3: f4:f6:91:c1:9a:87:4a:df:85:d8:91:4d:69:b2:0d:28:3b:84: 8d:da:7f:d0:ff:b0:5f:f3:3a:69:ab:c5:a5:3d:f3:93:aa:10: 89:80:99:c5:c0:43:cf:3f:83:1a:fa:46:76:7f:f0:75:c7:cf: 0d:20:3e:e4:56:af:a7:dd:a0:b4:1d:7f:67:7a:c3:fc:bf:55: d1:fa:15:1d:c0:10:16:88:e8:d5:af:61:f6:b1:d8:8e:cf:a7: f4:57:1d:9d:8e:4e:dc:e9:5b:26:5c:cf:07:d3:15:d0:5e:92: 46:91:42:6e:75:dd:43:fd:70:6c:2a:06:3f:e2:ba:cf:05:0e: 9b:fb:c5:c8:a1:7d:4a:81:ee:80:e0:bb:18:88:7b:0d:22:ff: 7f:8d:26:a6:b1:78:a4:dc:90:92:ff:c5:bf:c8:a3:ef:bb:b2: 56:9d:9c:05:c2:9b:78:84:69:be:4c:1e:d9:26:a6:0a:af:8d: c9:70:3a:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbY5QZnbDd0UKZ/99QwTPjWILXEQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNDE4NTE0NFoX DTI1MTIyMzE4NTY0NFowMzExMC8GA1UEAxMoQzVCOTJCNTlDNERGNjUxMEJBRTgz MDE3N0IzM0FBNjJCRkY0M0M4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5bi5tzgnFYB41i5G+KOv2Vn/B/1XbkhCoOXD4Ob7/z4vlswD607mutznfD h1wSskh5eqa5ZJIUkjFl/XAiYclSS9tfA5u44ZchR1dVg4h0761oYz10b1CI1SWo FYCDcnc9xpb/+uO+GZc9qzB2ZFTBnlOBDHXXwy6vcbGyz6kkHgOM2COCR7+geQ56 tt5ofQ5/3Ni1jvggiBAGd3mzTX8TVDGACxSQCU9vAULGSitxaMmT72SYijwwUT5R ysAIlG/j/L3VXzzCYKiF7TiCoA3p1oT0xoLiSRqoq7AISRziaCQgcwY3RVD3gieW Dy7ygeiCf8UkuylxY/O+IWZ/Qu8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMW5K1nE32UQuugwF3szqmK/9DyPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc2NWYwNi1iNGM5LTQ3YzEtYWQ5YS0wNjEyYzdjMDJkMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzY1ZjA2 LWI0YzktNDdjMS1hZDlhLTA2MTJjN2MwMmQxYy8wL0M1QjkyQjU5QzRERjY1MTBC QUU4MzAxNzdCMzNBQTYyQkZGNDNDOEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnl5EwDQYJKoZIhvcNAQELBQADggEBAAmRqsyfrbHznsOpNVjucpuYjz9r9quX 8SusqWiKc4R5tpiWpoQQt2eukgOFMHB+vEESEFB4zyybc3kLNhk26I6KHSCacFzh 0/T2kcGah0rfhdiRTWmyDSg7hI3af9D/sF/zOmmrxaU985OqEImAmcXAQ88/gxr6 RnZ/8HXHzw0gPuRWr6fdoLQdf2d6w/y/VdH6FR3AEBaI6NWvYfax2I7Pp/RXHZ2O TtzpWyZczwfTFdBekkaRQm513UP9cGwqBj/ius8FDpv7xcihfUqB7oDguxiIew0i /3+NJqaxeKTckJL/xb/Io++7sladnAXCm3iEab5MHtkmpgqvjclwOtg= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:33 2025 by rpki-client