$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer (raw, json) Hash identifier: SsNs2bgSJQmhdXE1jv/f0jMqFLeXYizo2rxI9x/0qPA= Subject key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CFE0923AA4600D0E0F8C3F9FDE26D03805B7C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft caRepository: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Jun 2024 07:18:34 +0000 Certificate not after: Sun 29 Jun 2025 07:23:34 +0000 Subordinate resources: IP: 210.87.123.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fe:09:23:aa:46:00:d0:e0:f8:c3:f9:fd:e2:6d:03:80:5b:7c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 07:18:34 2024 GMT Not After : Jun 29 07:23:34 2025 GMT Subject: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:68:4f:46:42:97:49:73:f5:06:8a:d5:54: 11:21:9e:d7:b5:66:54:e3:f4:15:25:01:f4:ab:7c: a0:73:5b:d3:be:3c:98:81:b8:31:80:1a:e4:ec:49: b2:03:19:09:77:6c:e4:5e:ca:af:11:8a:57:8e:e7: 08:e1:f9:3d:9e:27:1e:28:c5:1f:0f:48:61:14:d0: f2:ae:a8:8b:48:a1:a2:7e:82:d3:7c:bf:83:26:64: 32:49:0a:41:d2:8b:ec:f5:f5:f8:a9:f4:86:ac:fd: c3:84:f5:3d:9c:c0:1d:8a:71:89:81:e6:ee:a5:d0: ac:a3:58:c7:b5:39:20:f0:d0:79:50:91:54:ce:70: 33:f1:ee:5f:8c:2d:76:06:d5:e2:4e:25:76:e4:be: 67:59:d1:b2:d6:d5:de:92:54:1d:20:9e:99:f3:16: bd:18:0c:66:5a:77:b6:a0:ab:33:b4:c7:2d:62:90: 21:d6:bd:b2:5a:e5:0f:b5:90:27:f2:2e:ef:b3:8e: 08:a7:8a:2b:b3:64:fd:db:2e:49:31:c3:3a:29:d4: 0a:77:70:b1:b8:cb:81:b8:6f:53:07:9f:92:ac:2c: 72:f8:ea:42:f2:b7:15:2f:73:12:f2:3c:59:96:4b: 41:9e:c2:60:b0:f9:57:a9:11:d3:cc:d7:87:27:45: 18:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.123.0/24 Signature Algorithm: sha256WithRSAEncryption 82:0c:63:05:a7:38:33:a0:76:79:14:51:84:41:7e:4d:85:6f: 1a:64:24:f7:25:47:a2:d8:bf:18:f2:09:14:ac:f2:7d:53:a7: 27:0a:ce:de:0e:c4:e2:73:fb:9e:c9:63:cb:b7:1e:8b:a9:08: bd:c2:31:8e:68:41:0e:eb:34:1b:2c:fd:81:02:97:aa:49:63: 2c:b5:bd:9a:d9:72:4a:f1:4b:c1:3c:0e:97:79:39:46:be:1d: a8:fb:42:33:08:db:34:d5:de:83:1a:68:49:e8:b9:25:54:35: 77:1b:bc:58:ec:a1:a1:af:e0:5b:3a:cf:75:16:e1:d5:b0:fb: 77:cd:89:01:0a:4c:3f:8e:9a:7b:8f:ec:f4:c8:65:b7:83:8d: bf:cc:78:c4:ea:a2:03:5c:83:3f:a4:f5:fa:98:3f:ef:48:ef: a5:19:be:83:62:ec:1e:9c:1a:46:d7:15:03:59:75:db:61:36: c3:a0:57:8a:f6:fc:75:73:37:6a:60:7c:3d:06:23:de:49:36: 36:3b:5a:8c:db:d0:14:96:48:0b:06:9a:f3:6f:a3:f5:d2:93: ff:e6:8e:9f:ea:b3:8a:41:44:c2:e9:8e:d4:34:bd:fd:15:fe: 41:14:5f:cf:d8:f6:03:d0:73:41:de:3c:4a:87:de:52:93:09: 49:43:63:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTP4JI6pGANDg+MP5/eJtA4BbfH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYzMDA3MTgzNFoX DTI1MDYyOTA3MjMzNFowMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEz QkQ1MTkxRkZEQTJBRDM5REIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1waE9GQpdJc/UGitVUESGe17VmVOP0FSUB9Kt8oHNb0748mIG4MYAa5OxJ sgMZCXds5F7KrxGKV47nCOH5PZ4nHijFHw9IYRTQ8q6oi0ihon6C03y/gyZkMkkK QdKL7PX1+Kn0hqz9w4T1PZzAHYpxiYHm7qXQrKNYx7U5IPDQeVCRVM5wM/HuX4wt dgbV4k4lduS+Z1nRstbV3pJUHSCemfMWvRgMZlp3tqCrM7THLWKQIda9slrlD7WQ J/Iu77OOCKeKK7Nk/dsuSTHDOinUCndwsbjLgbhvUwefkqwscvjqQvK3FS9zEvI8 WZZLQZ7CYLD5V6kR08zXhydFGHcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFL6OMIsoJh85Io71Rkf/aKtOds7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxMjI0MjQ3 LTM0N2YtNGE1Ny1hNzlhLWNiMmMyMWM5MTcwZS8wLzUyRkEzOEMyMkNBMDk4N0NF NDhBM0JENTE5MUZGREEyQUQzOURCM0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADSV3swDQYJKoZIhvcNAQELBQADggEBAIIMYwWnODOgdnkUUYRBfk2FbxpkJPcl R6LYvxjyCRSs8n1TpycKzt4OxOJz+57JY8u3HoupCL3CMY5oQQ7rNBss/YECl6pJ Yyy1vZrZckrxS8E8Dpd5OUa+Haj7QjMI2zTV3oMaaEnouSVUNXcbvFjsoaGv4Fs6 z3UW4dWw+3fNiQEKTD+OmnuP7PTIZbeDjb/MeMTqogNcgz+k9fqYP+9I76UZvoNi 7B6cGkbXFQNZddthNsOgV4r2/HVzN2pgfD0GI95JNjY7Wozb0BSWSAsGmvNvo/XS k//mjp/qs4pBRMLpjtQ0vf0V/kEUX8/Y9gPQc0HePEqH3lKTCUlDY34= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:21 2024 by rpki-client on console-ams.rpki-client.org