$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer (raw, json) Hash identifier: J7FPCCnKfmX6mLQIowU0ynvRFfawTl1IMFo02YNb/Nc= Subject key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29E69526D72DE27A7746C8DCD41FA55FF2D96F0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Sep 2024 14:43:05 +0000 Certificate not after: Fri 19 Sep 2025 14:48:05 +0000 Subordinate resources: IP: 103.177.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e6:95:26:d7:2d:e2:7a:77:46:c8:dc:d4:1f:a5:5f:f2:d9:6f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 14:43:05 2024 GMT Not After : Sep 19 14:48:05 2025 GMT Subject: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:25:12:51:cf:72:57:3e:38:e7:01:7e:86: 6d:66:34:af:05:c7:17:cb:3c:a4:d6:87:0d:e4:95: 4f:37:3f:40:12:c7:5b:4b:fa:01:9d:33:6a:71:3c: 14:7e:50:4c:1b:94:7e:fb:a8:44:64:4b:1a:62:5f: 23:04:3e:46:de:98:bf:6e:a4:fb:72:bd:ce:52:27: b6:ae:6f:07:34:82:55:e2:ea:d1:ad:74:13:a0:95: e7:e8:62:24:d1:b6:89:51:f2:e4:00:86:b7:a1:e5: ca:e8:36:2b:a2:ee:88:32:55:cb:49:df:f7:f3:b5: 04:ee:5b:72:be:a1:c5:1f:7f:de:1b:cb:71:43:6a: e7:b3:bc:3a:1e:a7:de:dd:d8:c7:68:40:fb:c7:64: b4:5c:93:6a:82:61:c5:26:06:c6:f1:f4:a5:4d:45: 9c:07:94:07:75:42:09:06:4e:fd:5d:91:da:14:86: c4:fb:68:89:e0:12:f3:7e:2a:c8:41:21:9d:af:a1: a5:45:f9:a9:13:b1:e8:d4:06:0c:a3:41:e8:ea:7a: 17:29:8a:2d:5d:5b:00:42:a0:61:a3:15:af:e6:21: e4:8b:b6:4a:89:36:bd:cc:89:78:93:a1:02:6f:bb: dd:b8:4a:78:0f:09:06:fd:7a:95:53:16:df:e2:25: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.6.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:da:84:56:06:43:36:b4:10:3c:c3:e9:f0:16:22:47:d5:7b: 24:7e:ee:f8:dd:69:00:28:83:10:2c:b9:96:1c:1d:35:fb:7b: 27:49:73:3a:5e:49:84:e3:c8:c8:b1:73:10:80:7b:89:ce:5c: f4:21:4c:04:16:9b:f0:02:df:03:b4:72:d4:d5:2f:3c:1b:eb: ad:72:75:5d:c8:c5:ef:ec:d4:48:22:74:90:32:a7:e2:41:4c: bc:1c:0b:75:7f:b8:b8:dc:af:ad:a6:2e:43:d7:ea:90:ea:79: a0:b4:a0:56:d7:5d:e4:4a:6b:1a:a2:18:70:e3:86:5b:98:23: de:13:9c:c1:d7:dd:d6:1f:6a:91:4e:80:b8:f5:d7:84:82:7a: a4:57:24:bb:d9:35:ea:a8:1f:6f:52:20:27:9b:b9:40:91:0d: 7e:d8:85:18:f3:ab:b5:2e:27:7b:d4:30:41:fa:27:b0:ed:5e: e3:b1:b7:14:f7:d3:19:21:9f:04:50:9e:a0:34:5a:39:54:e2: ae:a5:37:25:f9:50:b7:92:f9:64:7e:18:8b:c7:46:db:d8:db: 49:eb:4a:5b:fe:1c:87:b3:c5:5d:b8:a4:e6:62:55:a4:f1:92: 13:3b:ae:0a:46:be:2e:e5:c9:31:db:c7:b9:ce:a2:3f:4b:5b: 25:a6:53:e4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKeaVJtct4np3Rsjc1B+lX/LZbw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMDE0NDMwNVoX DTI1MDkxOTE0NDgwNVowMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgy RjhFMDlBOTg2RDI5RUJGQjY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+iJRJRz3JXPjjnAX6GbWY0rwXHF8s8pNaHDeSVTzc/QBLHW0v6AZ0zanE8 FH5QTBuUfvuoRGRLGmJfIwQ+Rt6Yv26k+3K9zlIntq5vBzSCVeLq0a10E6CV5+hi JNG2iVHy5ACGt6Hlyug2K6LuiDJVy0nf9/O1BO5bcr6hxR9/3hvLcUNq57O8Oh6n 3t3Yx2hA+8dktFyTaoJhxSYGxvH0pU1FnAeUB3VCCQZO/V2R2hSGxPtoieAS834q yEEhna+hpUX5qROx6NQGDKNB6Op6FymKLV1bAEKgYaMVr+Yh5Iu2Sok2vcyJeJOh Am+73bhKeA8JBv16lVMW3+IlFg8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFOyyjAC24389UgvjgmphtKev7ZOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNzFmYzZk LWFhM2ItNGVkNy04ZmVjLTc0MjdhYTA2MWY4ZS8wLzUzQjJDQTMwMDJEQjhERkNG NTQ4MkY4RTA5QTk4NkQyOUVCRkI2NEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsQYwDQYJKoZIhvcNAQELBQADggEBADzahFYGQza0EDzD6fAWIkfVeyR+7vjd aQAogxAsuZYcHTX7eydJczpeSYTjyMixcxCAe4nOXPQhTAQWm/AC3wO0ctTVLzwb 661ydV3Ixe/s1EgidJAyp+JBTLwcC3V/uLjcr62mLkPX6pDqeaC0oFbXXeRKaxqi GHDjhluYI94TnMHX3dYfapFOgLj114SCeqRXJLvZNeqoH29SICebuUCRDX7YhRjz q7UuJ3vUMEH6J7DtXuOxtxT30xkhnwRQnqA0WjlU4q6lNyX5ULeS+WR+GIvHRtvY 20nrSlv+HIezxV24pOZiVaTxkhM7rgpGvi7lyTHbx7nOoj9LWyWmU+Q= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:48 2024 by rpki-client on console-fra.rpki-client.org