$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer File: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer (raw, json) Hash identifier: C+BUSAjxT7DxYvu9xkTVeWjMMrKOuSE4yHKgZhF+bEc= Subject key identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C4265833CC62A1695683B1B8BA705E87DABD18F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft caRepository: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Jan 2024 06:47:39 +0000 Certificate not after: Tue 21 Jan 2025 06:52:39 +0000 Subordinate resources: IP: 103.151.145.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:42:65:83:3c:c6:2a:16:95:68:3b:1b:8b:a7:05:e8:7d:ab:d1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 23 06:47:39 2024 GMT Not After : Jan 21 06:52:39 2025 GMT Subject: CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:8b:9b:73:82:71:58:07:8d:62:e4:6f:8a: 3a:fd:95:9f:f0:7f:d5:76:e4:84:2a:0e:5c:3e:0e: 6f:bf:f3:e2:f9:6c:c0:3e:b4:ee:6b:ad:ce:77:c3: 87:5c:12:b2:48:79:7a:a6:b9:64:92:14:92:31:65: fd:70:22:61:c9:52:4b:db:5f:03:9b:b8:e1:97:21: 47:57:55:83:88:74:ef:ad:68:63:3d:74:6f:50:88: d5:25:a8:15:80:83:72:77:3d:c6:96:ff:fa:e3:be: 19:97:3d:ab:30:76:64:54:c1:9e:53:81:0c:75:d7: c3:2e:af:71:b1:b2:cf:a9:24:1e:03:8c:d8:23:82: 47:bf:a0:79:0e:7a:b6:de:68:7d:0e:7f:dc:d8:b5: 8e:f8:20:88:10:06:77:79:b3:4d:7f:13:54:31:80: 0b:14:90:09:4f:6f:01:42:c6:4a:2b:71:68:c9:93: ef:64:98:8a:3c:30:51:3e:51:ca:c0:08:94:6f:e3: fc:bd:d5:5f:3c:c2:60:a8:85:ed:38:82:a0:0d:e9: d6:84:f4:c6:82:e2:49:1a:a8:ab:b0:08:49:1c:e2: 68:24:20:73:06:37:45:50:f7:82:27:96:0f:2e:f2: 81:e8:82:7f:c5:24:bb:29:71:63:f3:be:21:66:7f: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.145.0/24 Signature Algorithm: sha256WithRSAEncryption 83:29:c4:12:5d:93:4a:06:60:ad:b2:58:e9:b1:41:5c:de:7c: d8:52:51:4f:fe:ad:40:bc:c9:19:4b:0d:a3:7b:8f:0c:dc:5a: 27:5f:8f:c8:b7:68:1e:44:3e:8e:92:72:5c:da:b9:a2:20:0b: 10:18:e4:c9:28:b5:24:3b:1f:0c:bc:a5:c1:80:8d:60:83:35: b1:3c:52:2d:0f:4e:c4:a1:23:8b:98:f6:f2:9f:07:b1:d4:f3: 6d:05:11:ff:ff:0e:5b:00:c7:3b:60:66:bb:49:a3:54:0b:fe: 04:36:b6:7f:b4:75:07:fa:ae:d7:93:47:3f:37:82:54:32:fd: f1:26:20:5d:c1:09:cb:72:96:e9:4e:07:0b:11:51:83:99:1a: 60:26:4d:ca:07:38:ee:be:55:de:cb:51:fb:9c:22:99:7d:54: 25:29:75:1e:07:9f:ab:9a:60:a4:93:d3:4e:14:b1:42:0f:89: 74:bc:37:e9:9b:b1:2d:ac:d5:35:fb:35:c9:4e:0b:ce:4f:d0: 1f:88:2d:9d:ac:c4:95:7d:6b:58:6d:ec:8a:cb:f0:58:1b:93: 2a:3b:2e:b1:35:54:64:12:1c:b3:39:70:c0:d6:ed:23:31:82: 0e:d4:b7:9d:1d:bd:44:6d:cd:e4:7d:03:85:f8:63:84:60:21: 3e:4c:7e:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTEJlgzzGKhaVaDsbi6cF6H2r0Y8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyMzA2NDczOVoX DTI1MDEyMTA2NTIzOVowMzExMC8GA1UEAxMoQzVCOTJCNTlDNERGNjUxMEJBRTgz MDE3N0IzM0FBNjJCRkY0M0M4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5bi5tzgnFYB41i5G+KOv2Vn/B/1XbkhCoOXD4Ob7/z4vlswD607mutznfD h1wSskh5eqa5ZJIUkjFl/XAiYclSS9tfA5u44ZchR1dVg4h0761oYz10b1CI1SWo FYCDcnc9xpb/+uO+GZc9qzB2ZFTBnlOBDHXXwy6vcbGyz6kkHgOM2COCR7+geQ56 tt5ofQ5/3Ni1jvggiBAGd3mzTX8TVDGACxSQCU9vAULGSitxaMmT72SYijwwUT5R ysAIlG/j/L3VXzzCYKiF7TiCoA3p1oT0xoLiSRqoq7AISRziaCQgcwY3RVD3gieW Dy7ygeiCf8UkuylxY/O+IWZ/Qu8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMW5K1nE32UQuugwF3szqmK/9DyPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc2NWYwNi1iNGM5LTQ3YzEtYWQ5YS0wNjEyYzdjMDJkMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzY1ZjA2 LWI0YzktNDdjMS1hZDlhLTA2MTJjN2MwMmQxYy8wL0M1QjkyQjU5QzRERjY1MTBC QUU4MzAxNzdCMzNBQTYyQkZGNDNDOEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnl5EwDQYJKoZIhvcNAQELBQADggEBAIMpxBJdk0oGYK2yWOmxQVzefNhSUU/+ rUC8yRlLDaN7jwzcWidfj8i3aB5EPo6SclzauaIgCxAY5MkotSQ7Hwy8pcGAjWCD NbE8Ui0PTsShI4uY9vKfB7HU820FEf//DlsAxztgZrtJo1QL/gQ2tn+0dQf6rteT Rz83glQy/fEmIF3BCctylulOBwsRUYOZGmAmTcoHOO6+Vd7LUfucIpl9VCUpdR4H n6uaYKST004UsUIPiXS8N+mbsS2s1TX7NclOC85P0B+ILZ2sxJV9a1ht7IrL8Fgb kyo7LrE1VGQSHLM5cMDW7SMxgg7Ut50dvURtzeR9A4X4Y4RgIT5Mfok= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:51 2024 by rpki-client on console-ams.rpki-client.org