$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer (raw, json) Hash identifier: PcTLzbcpdwRE2fHSqsyTkheNND6tc6fWGGI0gf7TRs4= Subject key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B717DB717D634AF691E9F01D5F2F7D536F4A008 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 16:00:46 +0000 Certificate not after: Mon 30 Jun 2025 16:05:46 +0000 Subordinate resources: IP: 103.143.170.0/23 IP: 2001:df1:8d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:71:7d:b7:17:d6:34:af:69:1e:9f:01:d5:f2:f7:d5:36:f4:a0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 16:00:46 2024 GMT Not After : Jun 30 16:05:46 2025 GMT Subject: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:5c:c2:ea:5f:79:49:be:d9:64:97:c0:3c: fa:57:cf:30:63:f7:b6:74:15:20:e1:90:01:eb:f6: 17:6e:a6:cc:69:8e:ec:fb:ce:0b:2a:b5:41:9b:4f: 9f:95:84:f2:e9:a9:73:1e:15:70:ad:0f:61:72:4f: 26:3b:e1:42:ee:96:bc:75:23:ab:e1:3e:8e:1a:96: b5:2e:10:02:5a:94:ee:bd:af:ab:2e:32:d7:d4:f0: fa:aa:13:7e:b1:19:2a:3f:f3:5b:aa:04:ac:98:21: 75:00:52:0d:d6:bf:c4:55:3b:81:37:b5:44:5b:49: e3:32:39:0c:69:fc:2c:1d:4f:66:bd:26:e5:28:64: a2:67:79:0b:0e:f5:79:d1:9c:dd:2a:55:c3:c0:c1: 55:d2:d8:a4:2f:96:07:13:01:fe:ef:78:3c:ea:73: 37:ab:1d:af:1c:3d:18:e7:aa:1c:ce:23:82:e7:ba: 66:bd:f4:9b:ba:40:08:71:04:0d:a7:b1:61:4b:ba: 21:ca:56:5e:f0:75:00:ba:00:ce:ea:ef:ff:5a:86: e4:f9:d8:78:b3:ec:67:a7:67:66:a7:c3:45:14:93: 37:65:c6:75:fa:5a:c6:50:14:9c:52:df:fc:18:47: 57:18:57:77:4d:7d:48:da:23:19:75:d7:e2:b2:97: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 IPv6: 2001:df1:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 57:cc:72:2e:89:6e:c1:e8:b7:94:e8:b3:ab:5c:96:74:16:01: eb:61:f2:5c:cb:b1:ac:7e:00:d9:fe:2b:16:9d:51:c4:be:f6: 10:4d:db:27:75:0a:40:08:3b:30:3d:bf:5c:a4:72:73:6c:e9: d8:b9:8e:2f:b5:57:e3:81:12:14:bc:75:fb:76:82:f7:17:04: 3c:1e:ab:2e:4e:0a:26:ee:86:49:de:d7:a5:62:37:dd:74:24: 76:e0:e4:88:c8:d2:64:5d:03:4b:76:10:83:12:45:10:f7:98: 2d:94:1a:bd:6f:e1:f3:54:b7:fe:7b:da:d8:c4:20:b8:58:bd: 01:d7:43:0a:01:a1:2e:c0:c7:2a:76:b2:5f:6f:11:05:96:65: ef:25:0c:2c:6b:e0:e9:78:52:90:1d:a0:dd:97:d0:aa:62:00: 11:cd:39:45:dc:fc:2a:35:b4:f4:87:8a:cf:5e:6f:99:ac:bc: 38:c6:11:5d:3b:5b:cf:76:0a:a3:3e:df:01:c7:af:79:22:6b: a9:87:2c:bb:22:6c:e7:82:f5:1c:c5:4c:14:33:2d:74:e2:54: 4c:f4:29:f3:11:10:8b:45:3b:55:79:e8:82:b1:b8:21:13:fc: 61:06:a4:a4:20:fa:ba:36:5f:98:23:5c:a5:a4:a7:3f:ba:f1: ac:e2:bb:d0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUW3F9txfWNK9pHp8B1fL31Tb0oAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE2MDA0NloX DTI1MDYzMDE2MDU0NlowMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3 QjU0RENEMjQ2ODQyNkU4QkE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzpXMLqX3lJvtlkl8A8+lfPMGP3tnQVIOGQAev2F26mzGmO7PvOCyq1QZtP n5WE8umpcx4VcK0PYXJPJjvhQu6WvHUjq+E+jhqWtS4QAlqU7r2vqy4y19Tw+qoT frEZKj/zW6oErJghdQBSDda/xFU7gTe1RFtJ4zI5DGn8LB1PZr0m5Shkomd5Cw71 edGc3SpVw8DBVdLYpC+WBxMB/u94POpzN6sdrxw9GOeqHM4jgue6Zr30m7pACHEE DaexYUu6IcpWXvB1ALoAzurv/1qG5PnYeLPsZ6dnZqfDRRSTN2XGdfpaxlAUnFLf /BhHVxhXd019SNojGXXX4rKXt/cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPVDYq0raxkct9N7VNzSRoQm6LqYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjMGIzOWUy LTY4N2ItNDYxNC04MDlmLTczNjcyZWEyMTJjZi8wL0Y1NDM2MkFEMkI2QjE5MUNC N0QzN0I1NERDRDI0Njg0MjZFOEJBOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnj6owDwQCAAIwCQMHACABDfGNgDANBgkqhkiG9w0BAQsFAAOCAQEAV8xyLolu wei3lOizq1yWdBYB62HyXMuxrH4A2f4rFp1RxL72EE3bJ3UKQAg7MD2/XKRyc2zp 2LmOL7VX44ESFLx1+3aC9xcEPB6rLk4KJu6GSd7XpWI33XQkduDkiMjSZF0DS3YQ gxJFEPeYLZQavW/h81S3/nva2MQguFi9AddDCgGhLsDHKnayX28RBZZl7yUMLGvg 6XhSkB2g3ZfQqmIAEc05Rdz8KjW09IeKz15vmay8OMYRXTtbz3YKoz7fAceveSJr qYcsuyJs54L1HMVMFDMtdOJUTPQp8xEQi0U7VXnogrG4IRP8YQakpCD6ujZfmCNc paSnP7rxrOK70A== -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:53 2025 by rpki-client