$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer (raw, json) Hash identifier: CtZfXyCxKaYuN0gBiav+O8r+EB7sc/sjm6z4QJVwVfw= Subject key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A05E2C04A9693404D02F4C6365022ED5DB8AA7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft caRepository: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Jan 2024 16:17:28 +0000 Certificate not after: Wed 01 Jan 2025 16:22:28 +0000 Subordinate resources: IP: 103.129.24.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:e2:c0:4a:96:93:40:4d:02:f4:c6:36:50:22:ed:5d:b8:aa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 3 16:17:28 2024 GMT Not After : Jan 1 16:22:28 2025 GMT Subject: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:ae:0b:43:44:95:0f:95:2e:2e:cd:b5:46: bd:43:c2:7d:71:77:f7:7b:d2:b8:16:2e:7f:c6:3a: e3:a1:21:c2:1a:64:09:52:67:f8:01:3d:b6:b8:94: 8f:e2:21:e9:df:99:fc:82:87:76:3f:35:11:12:68: 73:70:b6:f6:ab:90:03:0b:ec:4c:ba:66:2a:40:80: dd:09:7a:07:df:4c:66:5d:06:9e:be:b4:0b:8e:42: 05:28:12:e7:47:b1:8f:f2:e0:1f:7a:69:d6:36:7e: 45:c1:19:52:a8:a4:10:3c:1e:4c:0a:19:9e:3f:d0: 5f:fe:3e:33:db:a0:2a:5b:68:62:77:70:7f:fa:e5: 41:d5:0b:ee:9d:9c:26:9f:a1:11:27:92:4e:7b:b1: b7:8c:56:53:ad:72:d7:2e:fd:89:2a:97:b8:d9:38: 86:7c:23:01:e5:1c:8c:be:88:23:8b:f6:f6:5f:d8: a8:b4:3d:34:a7:78:60:c1:59:b7:95:c2:eb:d7:a2: 71:4b:85:1b:18:01:7a:60:a0:8e:c1:5d:7f:b6:b0: 42:0e:9b:16:38:4e:a2:f9:f3:87:e6:92:02:a5:75: c9:3c:e1:6a:0b:2e:0a:d6:a7:0b:d5:ad:0b:e2:41: f0:38:d3:f8:ed:2c:01:76:75:41:79:f9:d6:d7:8d: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.24.0/22 Signature Algorithm: sha256WithRSAEncryption 08:69:92:65:91:37:dc:ef:c4:43:af:52:4b:de:38:91:da:cc: bc:a0:aa:3e:a7:bc:c2:c5:33:65:cd:d3:63:4b:76:91:db:a2: 57:09:f1:e7:ce:80:f7:e0:d6:e8:fa:63:c3:84:0a:85:b7:58: ff:90:5b:3e:c2:17:ec:04:5f:a0:42:c1:a7:90:3b:c2:81:e0: b4:f2:04:48:93:11:23:2d:fa:a9:2e:67:63:c2:8a:8c:0e:5b: 29:72:78:6b:39:b2:69:c9:af:77:b2:01:91:85:2b:d6:7d:d6: be:4a:0a:79:19:bc:01:41:7d:d5:d2:02:43:9f:24:1e:b3:8b: 3b:85:60:a7:db:f8:48:cd:5a:32:0e:61:70:6e:37:1f:35:dc: 25:0c:26:cc:20:26:8e:41:b3:34:91:35:23:76:88:6a:78:15: f2:78:fb:e5:e8:39:45:c8:9e:73:1f:93:ba:1c:72:09:62:76: 0f:51:d0:ae:88:81:ff:74:93:29:d9:cb:cf:c3:b9:fd:bb:fe: 7c:5d:72:61:60:48:b7:b0:d7:f4:c7:76:81:0c:ef:c3:c3:db: 28:84:65:52:95:02:6f:01:ee:7d:87:be:f0:cd:23:d3:1c:e0: 70:fd:1e:8d:20:22:36:31:76:44:34:80:24:a4:ba:ac:87:3d: fb:2c:ea:c3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKgXiwEqWk0BNAvTGNlAi7V24qn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwMzE2MTcyOFoX DTI1MDEwMTE2MjIyOFowMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3 NDgxQTVBODZCMzVDRTBERDIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPC7rgtDRJUPlS4uzbVGvUPCfXF393vSuBYuf8Y646EhwhpkCVJn+AE9triU j+Ih6d+Z/IKHdj81ERJoc3C29quQAwvsTLpmKkCA3Ql6B99MZl0Gnr60C45CBSgS 50exj/LgH3pp1jZ+RcEZUqikEDweTAoZnj/QX/4+M9ugKltoYndwf/rlQdUL7p2c Jp+hESeSTnuxt4xWU61y1y79iSqXuNk4hnwjAeUcjL6II4v29l/YqLQ9NKd4YMFZ t5XC69eicUuFGxgBemCgjsFdf7awQg6bFjhOovnzh+aSAqV1yTzhagsuCtanC9Wt C+JB8DjT+O0sAXZ1QXn51teNjRsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFMqSm6iUunRz/V0gaWoazXODdIfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ZGYyYWQw LTZlOTktNDRhNy1hMDY4LTUwMDY1NmZmYjAwZi8wLzUzMkE0QTZFQTI1MkU5RDFD RkY1NzQ4MUE1QTg2QjM1Q0UwREQyMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJngRgwDQYJKoZIhvcNAQELBQADggEBAAhpkmWRN9zvxEOvUkveOJHazLygqj6n vMLFM2XN02NLdpHbolcJ8efOgPfg1uj6Y8OECoW3WP+QWz7CF+wEX6BCwaeQO8KB 4LTyBEiTESMt+qkuZ2PCiowOWylyeGs5smnJr3eyAZGFK9Z91r5KCnkZvAFBfdXS AkOfJB6zizuFYKfb+EjNWjIOYXBuNx813CUMJswgJo5BszSRNSN2iGp4FfJ4++Xo OUXInnMfk7occglidg9R0K6Igf90kynZy8/Duf27/nxdcmFgSLew1/THdoEM78PD 2yiEZVKVAm8B7n2HvvDNI9Mc4HD9Ho0gIjYxdkQ0gCSkuqyHPfss6sM= -----END CERTIFICATE-----Generated at Wed May 8 09:50:30 2024 by rpki-client on console-fra.rpki-client.org