$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.cer (raw, json) Hash identifier: /iYfmj5/9iEkdFRdTLVuYpH7+aQKN2WwjrGhTDMYWzc= Subject key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40D85158C288259C979FDD6B99DC68E29268E55B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft caRepository: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Oct 2023 15:47:48 +0000 Certificate not after: Thu 10 Oct 2024 15:52:48 +0000 Subordinate resources: IP: 103.99.136.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d8:51:58:c2:88:25:9c:97:9f:dd:6b:99:dc:68:e2:92:68:e5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 15:47:48 2023 GMT Not After : Oct 10 15:52:48 2024 GMT Subject: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:5c:fa:5b:3a:ce:08:90:e1:43:ac:23:a2: a0:22:d2:00:20:f0:7b:55:61:e7:7c:f0:2b:55:93: 93:08:90:46:05:19:3b:b6:ff:ed:71:16:e0:a3:0f: 97:f2:c5:55:50:19:c5:d8:d0:46:b4:a6:37:c3:fd: 2c:34:24:e3:e4:fb:1a:1e:94:e5:4c:e7:1b:1b:0d: 7d:1a:de:24:4d:f8:31:55:95:31:9d:40:4b:46:09: f1:72:c1:51:53:a5:05:99:21:62:5d:0c:39:b9:3f: 38:f3:e0:89:4d:e8:df:15:bd:d7:f2:62:de:da:ba: 7b:89:32:f0:b3:94:47:4c:04:1a:7f:af:1b:8f:4a: 74:9e:97:0c:e3:94:f9:3b:6a:0d:c1:52:5f:9f:45: 9a:ce:9b:24:62:8f:d7:fe:3f:3c:75:e6:de:a6:93: 0d:18:90:17:10:c4:2b:4b:20:46:a4:6b:f9:06:39: cf:5a:30:88:e8:6c:59:b3:66:af:90:23:ea:0d:4b: 7b:2f:94:a7:d3:f8:4d:16:ae:cf:60:2e:44:b0:23: 0b:65:dc:12:7e:4b:66:20:93:49:7a:79:59:33:df: d3:25:ad:00:17:44:d3:49:ca:a4:3c:82:ca:48:09: af:5c:e8:7e:0e:42:3b:fe:81:e9:f0:62:6c:5e:c3: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.136.0/23 Signature Algorithm: sha256WithRSAEncryption 59:9d:9d:eb:f7:5f:90:4d:0a:01:20:12:a2:f8:ff:f9:93:05: bc:da:a0:8a:64:7c:c0:00:65:fc:34:bc:72:e7:34:93:6f:54: 13:db:f9:d1:9e:0e:cb:99:92:91:d2:c1:d0:f5:d0:af:32:3c: 48:3b:28:e9:41:67:53:0d:32:c7:f2:d5:90:e2:ff:62:d2:03: 08:b8:cb:a2:25:5f:f7:d4:f0:16:e7:8b:02:06:19:5d:6a:7d: b0:76:69:c0:ce:c6:2a:fb:fe:50:5f:b2:a5:62:86:3c:82:bc: 83:b3:78:61:6f:b5:64:d7:c6:9f:4e:e6:a3:47:a1:b9:95:7e: 97:87:ca:1c:7e:e1:52:68:00:f2:c0:83:4e:45:d5:f4:ac:0a: fd:74:42:91:e6:ae:9e:40:2b:83:df:31:3d:3f:47:21:ef:ab: d2:1c:6c:5b:78:7d:f1:07:29:37:83:e8:ef:5e:80:ad:db:fa: 8e:68:b4:63:ab:83:8b:03:de:71:a8:7f:c5:a4:18:5d:c5:9f: f7:fc:07:ec:49:ce:f3:b7:c8:1a:3f:e8:81:b9:9c:08:91:03: ec:cc:ce:97:a3:89:16:2a:d8:51:b9:dd:09:cc:10:dc:71:11: e7:ad:5d:02:54:65:de:a5:2a:31:fc:8e:35:e1:73:f3:e0:cd: 02:14:79:e9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQNhRWMKIJZyXn91rmdxo4pJo5VswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjE1NDc0OFoX DTI0MTAxMDE1NTI0OFowMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0 NUE0QTgxQzE5Njg2RDExNjBBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtCXPpbOs4IkOFDrCOioCLSACDwe1Vh53zwK1WTkwiQRgUZO7b/7XEW4KMP l/LFVVAZxdjQRrSmN8P9LDQk4+T7Gh6U5UznGxsNfRreJE34MVWVMZ1AS0YJ8XLB UVOlBZkhYl0MObk/OPPgiU3o3xW91/Ji3tq6e4ky8LOUR0wEGn+vG49KdJ6XDOOU +TtqDcFSX59Fms6bJGKP1/4/PHXm3qaTDRiQFxDEK0sgRqRr+QY5z1owiOhsWbNm r5Aj6g1Ley+Up9P4TRauz2AuRLAjC2XcEn5LZiCTSXp5WTPf0yWtABdE00nKpDyC ykgJr1zofg5CO/6B6fBibF7D0yMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFNXZUTC18Kd7FJFpKgcGWhtEWCqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExN2VhMGU2 LTQzZWEtNDMxZS1hMDEzLTBiMjAxYjJjMGQ5ZS8wLzUzNTc2NTQ0QzJEN0MyOURF QzUyNDVBNEE4MUMxOTY4NkQxMTYwQUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnY4gwDQYJKoZIhvcNAQELBQADggEBAFmdnev3X5BNCgEgEqL4//mTBbzaoIpk fMAAZfw0vHLnNJNvVBPb+dGeDsuZkpHSwdD10K8yPEg7KOlBZ1MNMsfy1ZDi/2LS Awi4y6IlX/fU8BbniwIGGV1qfbB2acDOxir7/lBfsqVihjyCvIOzeGFvtWTXxp9O 5qNHobmVfpeHyhx+4VJoAPLAg05F1fSsCv10QpHmrp5AK4PfMT0/RyHvq9IcbFt4 ffEHKTeD6O9egK3b+o5otGOrg4sD3nGof8WkGF3Fn/f8B+xJzvO3yBo/6IG5nAiR A+zMzpejiRYq2FG53QnMENxxEeetXQJUZd6lKjH8jjXhc/PgzQIUeek= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org