$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer (raw, json) Hash identifier: Fnj0jvy2Yhi4rvnOXl+5SQbsdPoCnkPd9OiJTwqVf6o= Subject key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02453F977A1E52D8635B61173CEB7CB1ACC3DDB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 20:49:16 +0000 Certificate not after: Wed 03 Dec 2025 20:54:16 +0000 Subordinate resources: IP: 103.134.76.0/22 IP: 2404:6140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:45:3f:97:7a:1e:52:d8:63:5b:61:17:3c:eb:7c:b1:ac:c3:dd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 4 20:49:16 2024 GMT Not After : Dec 3 20:54:16 2025 GMT Subject: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:1f:5c:ce:c6:da:40:03:ff:c5:c3:f8:7d: f6:1b:7d:15:d7:cc:ca:21:c1:ac:b1:90:37:7d:ab: 6a:6a:a2:b7:c5:5c:88:4a:8c:9b:87:b3:15:1e:d9: 45:40:bc:3c:b2:1d:58:88:ec:8a:18:0a:d8:fd:ef: 0c:0e:4e:31:9e:0b:e2:84:83:28:2b:d8:6a:2e:ef: 42:72:8e:44:d1:d9:06:f4:8e:b4:52:41:df:b3:ff: 07:00:c0:1e:cb:06:6b:36:e3:79:50:8b:a7:37:ca: ec:87:fa:e3:7a:36:95:62:cf:4c:51:f1:6b:e9:25: bc:b0:5a:3d:a8:24:bd:1a:71:32:e3:61:cc:e5:92: a1:28:d7:0f:50:e9:b6:ea:2a:f2:9f:bb:07:e9:8a: 0c:63:f3:8f:74:01:c4:5d:be:e3:9d:f4:01:6c:28: ce:4d:d8:ee:93:3a:b9:2b:54:85:68:ed:98:db:5e: e2:34:c6:2f:40:9a:1d:74:75:13:ac:00:a4:b9:c8: 73:06:8a:cc:f3:3c:59:df:7c:0f:49:cf:9c:41:44: 24:b3:96:37:0a:5d:8a:d9:cb:aa:22:47:f0:6d:e6: bb:06:73:f3:0e:b7:47:65:a0:72:b4:a3:f2:15:31: 31:ac:d0:a7:39:dc:ac:7d:e9:06:cd:9f:ac:1b:7a: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.76.0/22 IPv6: 2404:6140::/32 Signature Algorithm: sha256WithRSAEncryption 89:81:11:9d:40:12:b1:03:08:0b:e2:0c:47:43:e1:d0:f1:eb: 21:a4:d1:20:25:b5:b6:2e:2a:50:e2:c0:45:06:50:13:a7:df: 91:e1:13:92:72:0a:57:00:db:39:5b:db:d5:cd:47:a9:54:d1: 12:a0:83:1b:bc:f2:52:2e:e2:fc:ce:46:16:8d:f3:37:95:4b: 7d:e8:93:fc:d1:fc:87:b4:4d:43:0a:3a:49:bb:6a:2f:f8:dc: 9c:cc:be:2f:e8:a8:f6:26:00:b3:3e:2e:1a:6f:df:fa:d7:27: f0:8b:3c:df:d2:ee:15:91:8a:02:0d:02:23:47:32:5b:f6:76: 74:9e:73:af:ca:52:ca:d4:3e:f4:2b:be:08:50:ea:2f:8c:a1: 60:ad:28:5d:46:f5:49:6a:7f:fe:09:e5:4f:eb:b9:65:97:0a: f2:1a:76:9f:f7:da:1f:9e:88:2b:62:c5:f9:8a:82:8d:0f:fd: 84:a1:c6:43:81:60:74:bc:0a:04:43:74:21:57:02:3e:a6:e1: d3:cb:ac:00:73:cc:35:66:81:e8:62:22:bb:61:89:3f:46:9a: 89:d0:cf:78:44:d6:73:5f:5d:12:d6:cf:cc:25:9d:bc:23:84: 00:7c:87:5a:5e:5a:51:6c:21:eb:6f:28:05:b2:72:61:e7:b0: dd:47:20:a9 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAkU/l3oeUthjW2EXPOt8sazD3bAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDIwNDkxNloX DTI1MTIwMzIwNTQxNlowMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3 NzNDRUU1QUJGQkQ1RThFMjIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1gH1zOxtpAA//Fw/h99ht9FdfMyiHBrLGQN32ramqit8VciEqMm4ezFR7Z RUC8PLIdWIjsihgK2P3vDA5OMZ4L4oSDKCvYai7vQnKORNHZBvSOtFJB37P/BwDA HssGazbjeVCLpzfK7If643o2lWLPTFHxa+klvLBaPagkvRpxMuNhzOWSoSjXD1Dp tuoq8p+7B+mKDGPzj3QBxF2+4530AWwozk3Y7pM6uStUhWjtmNte4jTGL0CaHXR1 E6wApLnIcwaKzPM8Wd98D0nPnEFEJLOWNwpditnLqiJH8G3muwZz8w63R2WgcrSj 8hUxMazQpzncrH3pBs2frBt6yJECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPXMCPHNC5RXnU93PO5av71ejiILMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNzk0ZDM2 LTY5ZjgtNDQwNi1iZjlmLTEyMmRkZDE3ZjQ1MC8wL0Y1Q0MwOEYxQ0QwQjk0NTc5 RDRGNzczQ0VFNUFCRkJENUU4RTIyMEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnhkwwDQQCAAIwBwMFACQEYUAwDQYJKoZIhvcNAQELBQADggEBAImBEZ1AErED CAviDEdD4dDx6yGk0SAltbYuKlDiwEUGUBOn35HhE5JyClcA2zlb29XNR6lU0RKg gxu88lIu4vzORhaN8zeVS33ok/zR/Ie0TUMKOkm7ai/43JzMvi/oqPYmALM+Lhpv 3/rXJ/CLPN/S7hWRigINAiNHMlv2dnSec6/KUsrUPvQrvghQ6i+MoWCtKF1G9Ulq f/4J5U/ruWWXCvIadp/32h+eiCtixfmKgo0P/YShxkOBYHS8CgRDdCFXAj6m4dPL rABzzDVmgehiIrthiT9GmonQz3hE1nNfXRLWz8wlnbwjhAB8h1peWlFsIetvKAWy cmHnsN1HIKk= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:50 2025 by rpki-client