$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer (raw, json) Hash identifier: pM0rs7M61GTaJQO5O802bsxgIEuFF6GfArDUATBxFLo= Subject key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 21808FD90970F7E948A9947412FEC9224C745C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Jul 2024 21:49:49 +0000 Certificate not after: Fri 11 Jul 2025 21:54:49 +0000 Subordinate resources: IP: 103.161.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:80:8f:d9:09:70:f7:e9:48:a9:94:74:12:fe:c9:22:4c:74:5c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 12 21:49:49 2024 GMT Not After : Jul 11 21:54:49 2025 GMT Subject: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:07:b7:14:c2:46:35:3b:a4:5e:84:b9:48: 57:cf:37:fa:cf:b7:2e:d7:ea:3f:24:2a:e1:07:9e: 31:ef:45:ca:c6:2c:a9:f2:cb:12:6c:53:eb:c9:12: 13:62:12:db:3d:34:f1:ed:fd:79:09:8e:b4:75:f7: b7:ec:c2:1f:70:e0:a8:29:17:f5:07:c5:49:be:fb: 04:8e:20:ca:d3:35:51:ca:0f:cd:76:46:73:83:42: 16:c6:70:ea:41:82:39:b9:4c:40:f2:c1:7f:97:1b: 5c:98:e8:a7:45:71:64:17:af:75:b4:15:cc:90:89: 06:e1:ca:a0:75:b8:25:fb:1e:b3:00:18:48:d9:5c: e3:20:f9:1f:1c:22:6d:d5:0d:10:3c:f7:dc:21:16: 21:95:f8:63:32:bb:46:01:c0:84:7b:2f:17:4a:c9: 8f:8c:87:a5:d6:78:95:5a:ce:22:cc:df:bf:1d:31: 1f:1b:91:fd:6c:c8:cf:85:ca:a2:ae:37:47:b4:f1: fc:5e:ac:d2:17:c0:7c:36:31:49:aa:1b:39:96:c9: a0:4f:96:23:d8:d7:03:88:32:97:9c:98:4d:e8:0c: 8d:aa:c3:89:8d:94:e6:46:7e:2d:fd:9d:ee:86:07: e2:64:c3:a0:53:20:e4:de:7c:c6:08:24:c6:a5:1f: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 14:c3:f5:b9:6f:34:72:b0:c3:2c:87:d9:cd:5f:5f:da:39:22: 77:4c:18:24:05:ab:ae:6f:ce:ae:e2:81:eb:ca:21:dd:19:96: 81:fd:e9:db:f2:62:88:4a:40:bf:7f:67:27:ba:d1:66:83:b4: e9:d0:6c:eb:f9:81:61:c8:5d:db:78:26:2f:23:8f:1d:3f:02: db:2c:2e:4b:b8:ec:6f:54:5a:67:f5:83:95:80:86:ba:3d:f6: e9:67:d2:03:b3:69:62:34:62:68:da:36:d3:7b:40:d8:83:b0: 8c:57:d8:21:6b:4c:c8:d5:dc:ff:8e:79:8b:d7:93:e3:e5:52: 3f:26:1a:34:52:bf:5c:5d:c1:7a:0e:d2:02:d6:e9:cd:04:81: d4:2e:1f:14:09:8a:c3:c3:60:14:77:bc:d8:8f:71:dd:e8:69: dd:e1:40:82:b3:79:ea:2b:47:c2:4a:48:0a:18:05:29:08:7c: fc:e9:01:0c:2b:38:7f:3e:72:ee:04:4a:65:46:39:1e:c1:f6: 83:6c:77:cf:78:2d:31:20:e7:e8:41:0a:47:f4:ca:93:ba:60: 89:18:c0:58:67:14:c2:3e:27:1b:7b:11:f2:46:3c:2c:0d:43: cf:b1:c9:70:8b:13:79:76:4a:4c:b9:cc:86:d5:a7:0e:c5:50: 51:b2:fe:8c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIYCP2Qlw9+lIqZR0Ev7JIkx0XIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMjIxNDk0OVoX DTI1MDcxMTIxNTQ0OVowMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1 NTUzMTFDMDU2RENEQkM1RkY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANB4B7cUwkY1O6RehLlIV883+s+3LtfqPyQq4QeeMe9FysYsqfLLEmxT68kS E2IS2z008e39eQmOtHX3t+zCH3DgqCkX9QfFSb77BI4gytM1UcoPzXZGc4NCFsZw 6kGCOblMQPLBf5cbXJjop0VxZBevdbQVzJCJBuHKoHW4JfseswAYSNlc4yD5Hxwi bdUNEDz33CEWIZX4YzK7RgHAhHsvF0rJj4yHpdZ4lVrOIszfvx0xHxuR/WzIz4XK oq43R7Tx/F6s0hfAfDYxSaobOZbJoE+WI9jXA4gyl5yYTegMjarDiY2U5kZ+Lf2d 7oYH4mTDoFMg5N58xggkxqUfMDECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUu5ZwdQUmnffFVUxHAVtzbxf9MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4 LWZkMDUtNGFmZC04N2JkLWVkNTgwYjU1MDM2Zi8wLzA1MkVFNTlDMUQ0MTQ5QTc3 REYxNTU1MzExQzA1NkRDREJDNUZGNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnocIwDQYJKoZIhvcNAQELBQADggEBABTD9blvNHKwwyyH2c1fX9o5IndMGCQF q65vzq7igevKId0ZloH96dvyYohKQL9/Zye60WaDtOnQbOv5gWHIXdt4Ji8jjx0/ AtssLku47G9UWmf1g5WAhro99uln0gOzaWI0YmjaNtN7QNiDsIxX2CFrTMjV3P+O eYvXk+PlUj8mGjRSv1xdwXoO0gLW6c0EgdQuHxQJisPDYBR3vNiPcd3oad3hQIKz eeorR8JKSAoYBSkIfPzpAQwrOH8+cu4ESmVGOR7B9oNsd894LTEg5+hBCkf0ypO6 YIkYwFhnFMI+Jxt7EfJGPCwNQ8+xyXCLE3l2Sky5zIbVpw7FUFGy/ow= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org