$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer (raw, json) Hash identifier: mHqCicUfwUpQH5KOBTPWFQTz/dtYOkTTXllffAgoP74= Subject key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 768E668BDAA826FDB8A85E77A6388DE4C1CA71FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Aug 2023 21:22:24 +0000 Certificate not after: Fri 09 Aug 2024 21:27:24 +0000 Subordinate resources: IP: 103.161.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8e:66:8b:da:a8:26:fd:b8:a8:5e:77:a6:38:8d:e4:c1:ca:71:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 21:22:24 2023 GMT Not After : Aug 9 21:27:24 2024 GMT Subject: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:07:b7:14:c2:46:35:3b:a4:5e:84:b9:48: 57:cf:37:fa:cf:b7:2e:d7:ea:3f:24:2a:e1:07:9e: 31:ef:45:ca:c6:2c:a9:f2:cb:12:6c:53:eb:c9:12: 13:62:12:db:3d:34:f1:ed:fd:79:09:8e:b4:75:f7: b7:ec:c2:1f:70:e0:a8:29:17:f5:07:c5:49:be:fb: 04:8e:20:ca:d3:35:51:ca:0f:cd:76:46:73:83:42: 16:c6:70:ea:41:82:39:b9:4c:40:f2:c1:7f:97:1b: 5c:98:e8:a7:45:71:64:17:af:75:b4:15:cc:90:89: 06:e1:ca:a0:75:b8:25:fb:1e:b3:00:18:48:d9:5c: e3:20:f9:1f:1c:22:6d:d5:0d:10:3c:f7:dc:21:16: 21:95:f8:63:32:bb:46:01:c0:84:7b:2f:17:4a:c9: 8f:8c:87:a5:d6:78:95:5a:ce:22:cc:df:bf:1d:31: 1f:1b:91:fd:6c:c8:cf:85:ca:a2:ae:37:47:b4:f1: fc:5e:ac:d2:17:c0:7c:36:31:49:aa:1b:39:96:c9: a0:4f:96:23:d8:d7:03:88:32:97:9c:98:4d:e8:0c: 8d:aa:c3:89:8d:94:e6:46:7e:2d:fd:9d:ee:86:07: e2:64:c3:a0:53:20:e4:de:7c:c6:08:24:c6:a5:1f: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 58:a9:03:7e:67:71:4d:41:8e:3e:cd:21:be:da:dc:e8:03:61: 99:7a:d5:d6:69:28:21:11:00:43:bd:09:1a:c1:84:bc:3c:7a: 69:f9:09:55:c5:7b:5b:2f:75:9e:ca:c7:9a:6c:62:01:c2:44: 0e:94:52:f2:b7:fd:26:1f:f6:7a:b1:f5:4f:2c:8a:b9:8d:60: 10:bf:ba:ad:21:f3:9b:71:df:35:9b:e7:8c:6c:ed:63:ea:74: 19:16:a2:f3:d3:41:0a:5c:b9:59:b4:fe:96:48:17:cc:ad:c3: bc:cb:14:a1:6a:2a:88:06:a5:91:75:bd:03:86:ec:74:b5:f3: 7d:f5:a7:8e:c5:a6:1b:c6:c2:6f:08:21:50:fd:82:f2:6b:8d: db:9c:04:5e:f6:76:45:13:13:6a:bb:08:62:f1:01:ba:79:95: 32:d5:05:76:42:9d:48:e5:00:46:ed:87:49:e1:7c:df:09:3a: 9f:b7:ed:6d:6c:eb:67:1b:86:9b:0a:86:a8:9a:23:2e:82:4c: 18:b7:56:64:9d:ad:b4:44:14:f2:9f:48:81:47:4f:6e:01:65: 50:2f:c3:4c:5c:b8:a6:13:77:23:40:3c:4b:6c:b0:5a:0f:dc: f8:d3:b0:a0:5b:be:83:19:d3:21:6f:3f:61:03:48:4f:17:91: b0:6c:d3:40 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdo5mi9qoJv24qF53pjiN5MHKcf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxMTIxMjIyNFoX DTI0MDgwOTIxMjcyNFowMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1 NTUzMTFDMDU2RENEQkM1RkY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANB4B7cUwkY1O6RehLlIV883+s+3LtfqPyQq4QeeMe9FysYsqfLLEmxT68kS E2IS2z008e39eQmOtHX3t+zCH3DgqCkX9QfFSb77BI4gytM1UcoPzXZGc4NCFsZw 6kGCOblMQPLBf5cbXJjop0VxZBevdbQVzJCJBuHKoHW4JfseswAYSNlc4yD5Hxwi bdUNEDz33CEWIZX4YzK7RgHAhHsvF0rJj4yHpdZ4lVrOIszfvx0xHxuR/WzIz4XK oq43R7Tx/F6s0hfAfDYxSaobOZbJoE+WI9jXA4gyl5yYTegMjarDiY2U5kZ+Lf2d 7oYH4mTDoFMg5N58xggkxqUfMDECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUu5ZwdQUmnffFVUxHAVtzbxf9MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4 LWZkMDUtNGFmZC04N2JkLWVkNTgwYjU1MDM2Zi8wLzA1MkVFNTlDMUQ0MTQ5QTc3 REYxNTU1MzExQzA1NkRDREJDNUZGNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnocIwDQYJKoZIhvcNAQELBQADggEBAFipA35ncU1Bjj7NIb7a3OgDYZl61dZp KCERAEO9CRrBhLw8emn5CVXFe1svdZ7Kx5psYgHCRA6UUvK3/SYf9nqx9U8sirmN YBC/uq0h85tx3zWb54xs7WPqdBkWovPTQQpcuVm0/pZIF8ytw7zLFKFqKogGpZF1 vQOG7HS18331p47FphvGwm8IIVD9gvJrjducBF72dkUTE2q7CGLxAbp5lTLVBXZC nUjlAEbth0nhfN8JOp+37W1s62cbhpsKhqiaIy6CTBi3VmSdrbREFPKfSIFHT24B ZVAvw0xcuKYTdyNAPEtssFoP3PjTsKBbvoMZ0yFvP2EDSE8XkbBs00A= -----END CERTIFICATE-----Generated at Wed May 8 18:12:03 2024 by rpki-client on console-fra.rpki-client.org