$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer (raw, json) Hash identifier: uHAmOfklb/JRRxzBKBJZCY4/pfa4xzO0hKFEnEA4uFM= Subject key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A23CC6D1746F618CBC4A0C88D844F17DD6E31F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Oct 2023 07:38:09 +0000 Certificate not after: Fri 18 Oct 2024 07:43:09 +0000 Subordinate resources: IP: 103.177.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:23:cc:6d:17:46:f6:18:cb:c4:a0:c8:8d:84:4f:17:dd:6e:31:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 20 07:38:09 2023 GMT Not After : Oct 18 07:43:09 2024 GMT Subject: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:25:12:51:cf:72:57:3e:38:e7:01:7e:86: 6d:66:34:af:05:c7:17:cb:3c:a4:d6:87:0d:e4:95: 4f:37:3f:40:12:c7:5b:4b:fa:01:9d:33:6a:71:3c: 14:7e:50:4c:1b:94:7e:fb:a8:44:64:4b:1a:62:5f: 23:04:3e:46:de:98:bf:6e:a4:fb:72:bd:ce:52:27: b6:ae:6f:07:34:82:55:e2:ea:d1:ad:74:13:a0:95: e7:e8:62:24:d1:b6:89:51:f2:e4:00:86:b7:a1:e5: ca:e8:36:2b:a2:ee:88:32:55:cb:49:df:f7:f3:b5: 04:ee:5b:72:be:a1:c5:1f:7f:de:1b:cb:71:43:6a: e7:b3:bc:3a:1e:a7:de:dd:d8:c7:68:40:fb:c7:64: b4:5c:93:6a:82:61:c5:26:06:c6:f1:f4:a5:4d:45: 9c:07:94:07:75:42:09:06:4e:fd:5d:91:da:14:86: c4:fb:68:89:e0:12:f3:7e:2a:c8:41:21:9d:af:a1: a5:45:f9:a9:13:b1:e8:d4:06:0c:a3:41:e8:ea:7a: 17:29:8a:2d:5d:5b:00:42:a0:61:a3:15:af:e6:21: e4:8b:b6:4a:89:36:bd:cc:89:78:93:a1:02:6f:bb: dd:b8:4a:78:0f:09:06:fd:7a:95:53:16:df:e2:25: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.6.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:cc:91:6e:30:72:10:36:c0:72:92:07:57:c9:92:aa:cd:7c: a2:9e:93:be:36:de:bf:cb:43:48:ee:2c:b1:75:97:d0:23:29: d4:aa:e8:9a:f1:c4:b2:99:ec:50:62:92:8f:44:e0:83:f6:71: 41:39:ec:83:90:a3:21:09:6c:b9:e5:89:21:52:e1:99:a1:aa: 1b:cd:aa:8a:65:f8:64:e3:79:24:22:2f:16:3b:69:bd:34:0e: 06:60:ab:25:0f:26:1a:68:9d:24:56:6e:88:c0:93:ed:69:68: dd:ce:14:eb:67:0d:c8:c7:be:d2:42:6a:21:5b:a6:e0:f0:8f: 8c:84:67:ea:58:36:09:c4:9e:35:b9:4d:e8:b9:f9:ae:3d:33: a9:ab:cb:9c:87:a2:36:09:2f:15:d8:f9:82:60:91:e5:da:1d: 70:10:8e:73:3a:30:fe:79:f6:ea:cb:82:d2:31:61:07:83:d1: 1b:76:0f:4b:44:ca:e8:4a:6b:a2:d7:e1:5d:27:ff:8c:23:29: e5:75:2f:53:1b:e5:85:40:4e:4a:4f:35:d0:6d:7a:be:58:d7: 83:a1:96:88:b9:49:1c:77:08:1c:34:97:1d:5f:12:40:b6:42: 91:cc:11:5b:46:b1:66:67:88:0c:7a:3d:18:eb:60:24:88:2a: ae:dd:dd:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeiPMbRdG9hjLxKDIjYRPF91uMfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMDA3MzgwOVoX DTI0MTAxODA3NDMwOVowMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgy RjhFMDlBOTg2RDI5RUJGQjY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+iJRJRz3JXPjjnAX6GbWY0rwXHF8s8pNaHDeSVTzc/QBLHW0v6AZ0zanE8 FH5QTBuUfvuoRGRLGmJfIwQ+Rt6Yv26k+3K9zlIntq5vBzSCVeLq0a10E6CV5+hi JNG2iVHy5ACGt6Hlyug2K6LuiDJVy0nf9/O1BO5bcr6hxR9/3hvLcUNq57O8Oh6n 3t3Yx2hA+8dktFyTaoJhxSYGxvH0pU1FnAeUB3VCCQZO/V2R2hSGxPtoieAS834q yEEhna+hpUX5qROx6NQGDKNB6Op6FymKLV1bAEKgYaMVr+Yh5Iu2Sok2vcyJeJOh Am+73bhKeA8JBv16lVMW3+IlFg8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFOyyjAC24389UgvjgmphtKev7ZOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNzFmYzZk LWFhM2ItNGVkNy04ZmVjLTc0MjdhYTA2MWY4ZS8wLzUzQjJDQTMwMDJEQjhERkNG NTQ4MkY4RTA5QTk4NkQyOUVCRkI2NEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsQYwDQYJKoZIhvcNAQELBQADggEBAFvMkW4wchA2wHKSB1fJkqrNfKKek742 3r/LQ0juLLF1l9AjKdSq6JrxxLKZ7FBiko9E4IP2cUE57IOQoyEJbLnliSFS4Zmh qhvNqopl+GTjeSQiLxY7ab00DgZgqyUPJhponSRWbojAk+1paN3OFOtnDcjHvtJC aiFbpuDwj4yEZ+pYNgnEnjW5Tei5+a49M6mry5yHojYJLxXY+YJgkeXaHXAQjnM6 MP559urLgtIxYQeD0Rt2D0tEyuhKa6LX4V0n/4wjKeV1L1Mb5YVATkpPNdBter5Y 14Ohloi5SRx3CBw0lx1fEkC2QpHMEVtGsWZniAx6PRjrYCSIKq7d3aI= -----END CERTIFICATE-----Generated at Wed May 8 21:02:14 2024 by rpki-client on console-fra.rpki-client.org