$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.cer (raw, json) Hash identifier: mxSRmv7O6jvO0yqMVcdoqAxXH7M7tm8s+zrzZ+klzls= Subject key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63F0A221444B3BC7A7129A7F176A82B6D14147DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 23 Oct 2024 02:20:44 +0000 Certificate not after: Wed 22 Oct 2025 02:25:44 +0000 Subordinate resources: IP: 103.191.154.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f0:a2:21:44:4b:3b:c7:a7:12:9a:7f:17:6a:82:b6:d1:41:47:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 23 02:20:44 2024 GMT Not After : Oct 22 02:25:44 2025 GMT Subject: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:c3:ac:74:a1:27:22:d5:95:f0:dd:b7:37: 67:42:81:09:bb:0a:22:7f:19:45:ac:d4:c9:25:ca: cd:43:89:82:eb:50:8d:d9:bb:36:2e:42:fa:e4:95: db:93:f2:84:7d:eb:64:32:3d:50:30:2e:50:5a:a1: da:00:97:82:67:bb:0b:4b:da:2a:06:52:9a:85:89: ca:19:a8:99:57:bd:39:96:69:4d:f1:ff:32:52:7a: 35:b3:59:99:cb:2d:a3:34:d4:fd:f5:f0:28:31:45: 72:48:1f:fd:92:3c:23:fe:4e:df:62:18:96:cb:de: 9f:ce:88:85:83:29:00:d2:eb:e4:b0:fd:18:6a:25: d4:1f:61:99:34:88:c1:79:70:65:e1:00:11:53:32: d8:3c:e6:17:03:5c:5d:30:07:b7:f4:4e:91:56:3e: 22:5e:89:7d:35:1e:e2:d1:29:3a:30:70:1c:d7:c0: 1a:b5:97:df:79:c3:d4:30:b2:7c:a5:be:08:25:7e: 0b:05:a6:0b:0e:6c:07:f0:fc:6d:18:18:14:9a:f7: 10:f4:79:c1:e8:e1:72:93:c8:56:f8:00:bf:4a:87: f2:66:25:30:32:c4:af:c2:1a:7d:fc:76:e7:43:ab: f3:8a:bb:04:4d:db:6c:df:a9:50:6d:cc:0d:53:fe: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.154.0/23 Signature Algorithm: sha256WithRSAEncryption 40:ba:7f:9e:fb:29:79:01:82:53:8f:a3:fa:f2:13:83:52:af: 1b:a4:f2:41:bd:56:24:81:55:c6:0a:d4:09:58:99:b3:ca:ca: 35:2a:6f:a1:04:28:2a:ae:42:8b:0c:10:81:f3:2a:47:01:b3: 7b:6f:6f:a5:92:01:18:15:4e:fa:94:1e:e1:6e:57:e0:27:3b: c9:69:98:8b:c8:5f:28:d8:34:ac:4e:3d:08:a7:32:4f:d8:23: ec:5f:ed:e8:7f:50:2e:64:14:30:a3:29:ce:23:a3:fd:5b:16: d5:7d:d2:8f:53:6c:53:b5:6b:83:8a:c6:47:c5:48:3d:ae:1d: cb:da:b9:da:e2:d1:9a:42:09:63:02:05:c5:63:20:fb:65:49: f8:46:55:7b:53:3d:6f:24:1b:09:74:74:06:64:8c:82:c4:45: 95:30:b0:d5:c0:8e:36:6a:20:91:c2:31:86:3e:16:2f:17:53: d2:29:ea:c8:8c:dc:f1:24:00:23:a1:d5:93:34:e9:30:ce:f9: d9:85:90:33:ca:c3:d4:fc:8c:1b:4e:d9:02:34:bd:e7:7b:51: f4:3e:e8:10:f0:c7:99:eb:59:19:bf:75:41:ba:26:8f:d1:32: c7:51:4c:7d:a6:16:61:92:1c:86:33:2b:88:e5:79:2a:3b:dc: cf:ed:83:97 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY/CiIURLO8enEpp/F2qCttFBR9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyMzAyMjA0NFoX DTI1MTAyMjAyMjU0NFowMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1 NDg5NTEyNjlFNUJENUYzMjQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9Gw6x0oSci1ZXw3bc3Z0KBCbsKIn8ZRazUySXKzUOJgutQjdm7Ni5C+uSV 25PyhH3rZDI9UDAuUFqh2gCXgme7C0vaKgZSmoWJyhmomVe9OZZpTfH/MlJ6NbNZ mcstozTU/fXwKDFFckgf/ZI8I/5O32IYlsven86IhYMpANLr5LD9GGol1B9hmTSI wXlwZeEAEVMy2DzmFwNcXTAHt/ROkVY+Il6JfTUe4tEpOjBwHNfAGrWX33nD1DCy fKW+CCV+CwWmCw5sB/D8bRgYFJr3EPR5wejhcpPIVvgAv0qH8mYlMDLEr8Iaffx2 50Or84q7BE3bbN+pUG3MDVP+Dz8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFLZYvWpyr4vQIlUiVEmnlvV8ySdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1ZWFiYWNk LTI4ZWItNGI5Ni04NjEwLWRiYjRiMDZmYzhiZC8wLzUyRDk2MkY1QTlDQUJFMkY0 MDg5NTQ4OTUxMjY5RTVCRDVGMzI0OUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv5owDQYJKoZIhvcNAQELBQADggEBAEC6f577KXkBglOPo/ryE4NSrxuk8kG9 ViSBVcYK1AlYmbPKyjUqb6EEKCquQosMEIHzKkcBs3tvb6WSARgVTvqUHuFuV+An O8lpmIvIXyjYNKxOPQinMk/YI+xf7eh/UC5kFDCjKc4jo/1bFtV90o9TbFO1a4OK xkfFSD2uHcvaudri0ZpCCWMCBcVjIPtlSfhGVXtTPW8kGwl0dAZkjILERZUwsNXA jjZqIJHCMYY+Fi8XU9Ip6siM3PEkACOh1ZM06TDO+dmFkDPKw9T8jBtO2QI0ved7 UfQ+6BDwx5nrWRm/dUG6Jo/RMsdRTH2mFmGSHIYzK4jleSo73M/tg5c= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:17 2024 by rpki-client on console-fra.rpki-client.org