$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer (raw, json) Hash identifier: S0zBOjDJ5gqmfqxOGuaoRG/xiQD0RmlwtFfMUjuH3eY= Subject key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 502B4BA33AE587CCC02CF412672321323DFA2769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 15:18:03 +0000 Certificate not after: Mon 11 Aug 2025 15:23:03 +0000 Subordinate resources: IP: 103.148.100.0/23 IP: 2405:ce40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:4b:a3:3a:e5:87:cc:c0:2c:f4:12:67:23:21:32:3d:fa:27:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 15:18:03 2024 GMT Not After : Aug 11 15:23:03 2025 GMT Subject: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:e8:1b:b7:20:30:51:12:44:10:db:54:99: 3d:1c:32:ff:5b:e8:bb:15:df:86:8a:b0:94:9c:de: da:59:f2:2a:f4:38:b6:f7:30:b6:39:c7:ea:79:a5: 07:ff:4f:d4:a0:77:8e:f7:b3:5c:26:6d:38:1b:4a: 29:35:e0:15:3c:07:d8:61:3e:13:36:c9:05:d1:a9: c8:c5:9a:04:f3:c5:6d:c1:63:4e:c7:8d:5f:40:bd: ea:2e:1b:be:d8:76:c1:8e:9b:e5:52:c0:51:a5:15: df:b1:3b:85:ae:98:87:be:6a:bc:b1:3c:cd:32:c6: fc:9b:19:d9:04:1c:3f:10:f7:b2:2a:29:d6:4a:76: 33:be:f8:a2:39:6c:67:b3:71:7e:f5:0a:22:db:2b: 49:5e:f0:a5:21:f0:ca:06:5f:1c:b9:d2:7b:70:13: 3c:2d:26:13:d1:7d:77:7d:6d:6e:cc:58:fe:20:95: 03:42:2a:43:f6:16:12:8e:7c:a7:79:14:d7:b4:57: cb:40:ef:9a:1b:44:e8:c3:58:84:c2:ee:3f:eb:ac: 63:4b:99:61:4f:61:4a:46:d1:48:13:3e:87:b0:b4: 87:ae:49:35:84:ad:34:05:68:17:f3:5d:e8:4a:34: b1:04:a3:93:4f:ed:93:da:42:82:b2:59:2b:9c:02: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.100.0/23 IPv6: 2405:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:47:85:f4:5b:3b:06:06:d6:a0:a9:1b:bd:cb:73:c1:01:fb: bc:90:39:f9:c0:49:7a:be:d7:dc:83:e2:dd:76:af:bc:1e:e8: 73:94:b4:df:74:fb:e6:d0:9b:6b:4e:25:e2:b1:18:fa:a4:d5: 0a:b4:ae:8d:ae:42:ba:be:7b:12:64:dd:c4:cd:f2:1a:2b:bd: f2:a0:9b:43:57:f3:b3:00:11:18:c0:67:fc:58:94:14:7d:7d: 75:5b:84:3f:65:c4:1d:2b:a7:9b:a7:49:a1:4e:d4:0f:06:4f: 0c:fa:98:bb:6a:1f:6e:13:d4:ea:47:94:90:28:06:8b:97:92: b9:51:c0:83:74:03:3d:0d:86:04:bf:cb:21:a7:8f:95:d9:d7: 48:b8:e0:f3:ef:ef:f6:da:4f:3f:6d:82:63:7a:ab:9b:22:31: c4:9b:45:83:9d:84:32:75:cc:a9:8e:37:67:82:d3:1c:bc:ac: b7:2b:e5:db:a8:fd:d4:35:75:78:b5:0e:4a:97:0b:fd:1f:df: 67:92:e9:9a:2f:f4:6b:0f:e6:d1:ef:84:4a:36:59:3a:73:bf: 08:20:78:0d:8a:58:60:57:93:f1:e4:7b:20:86:a5:6e:6d:a1: f2:a1:e6:3d:39:7c:49:10:a1:a4:36:d0:3d:59:2c:a2:19:ad: ad:e3:a5:f9 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUUCtLozrlh8zALPQSZyMhMj36J2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMjE1MTgwM1oX DTI1MDgxMTE1MjMwM1owMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNE QjM5MzYwQUU1QTIyRDBENEI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoe6Bu3IDBREkQQ21SZPRwy/1vouxXfhoqwlJze2lnyKvQ4tvcwtjnH6nml B/9P1KB3jvezXCZtOBtKKTXgFTwH2GE+EzbJBdGpyMWaBPPFbcFjTseNX0C96i4b vth2wY6b5VLAUaUV37E7ha6Yh75qvLE8zTLG/JsZ2QQcPxD3siop1kp2M774ojls Z7NxfvUKItsrSV7wpSHwygZfHLnSe3ATPC0mE9F9d31tbsxY/iCVA0IqQ/YWEo58 p3kU17RXy0DvmhtE6MNYhMLuP+usY0uZYU9hSkbRSBM+h7C0h65JNYStNAVoF/Nd 6Eo0sQSjk0/tk9pCgrJZK5wCfn0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFM1B2uV8peL46zbOTYK5aItDUtVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZDY2ZDEw LWI4NTctNGJlZi05Mzk1LTQ1ZDVhYjJjNDRmOS8wLzUzMzUwNzZCOTVGMjk3OEJF M0FDREIzOTM2MEFFNUEyMkQwRDRCNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlGQwDQQCAAIwBwMFACQFzkAwDQYJKoZIhvcNAQELBQADggEBABtHhfRbOwYG 1qCpG73Lc8EB+7yQOfnASXq+19yD4t12r7we6HOUtN90++bQm2tOJeKxGPqk1Qq0 ro2uQrq+exJk3cTN8horvfKgm0NX87MAERjAZ/xYlBR9fXVbhD9lxB0rp5unSaFO 1A8GTwz6mLtqH24T1OpHlJAoBouXkrlRwIN0Az0NhgS/yyGnj5XZ10i44PPv7/ba Tz9tgmN6q5siMcSbRYOdhDJ1zKmON2eC0xy8rLcr5duo/dQ1dXi1DkqXC/0f32eS 6Zov9GsP5tHvhEo2WTpzvwggeA2KWGBXk/HkeyCGpW5tofKh5j05fEkQoaQ20D1Z LKIZra3jpfk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:17 2024 by rpki-client on console-fra.rpki-client.org