$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer File: 5509BA3B36B8E5C809C09949749272FEF605F530.cer (raw, json) Hash identifier: BEKQmHOezUq1Ep0UmhQa5zY39NkL+NB3yeF8TPR95Ds= Subject key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BD9D2044F838585E28C49165E52CC0EF6856D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft caRepository: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jan 2024 17:17:15 +0000 Certificate not after: Thu 09 Jan 2025 17:22:15 +0000 Subordinate resources: IP: 103.130.206.0/24 IP: 2001:df6:ef00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d9:d2:04:4f:83:85:85:e2:8c:49:16:5e:52:cc:0e:f6:85:6d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 11 17:17:15 2024 GMT Not After : Jan 9 17:22:15 2025 GMT Subject: CN=5509BA3B36B8E5C809C09949749272FEF605F530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:50:3f:4e:8b:f6:90:e5:a6:2c:ab:02:63: 36:de:7e:d8:76:8c:4c:07:0a:60:02:92:98:8a:9b: a4:eb:6c:64:1e:5d:ff:2c:97:4e:8c:4a:46:c7:01: c5:ee:22:eb:4c:ef:e5:42:77:8e:87:25:f1:f2:1d: 65:46:18:65:a0:75:9f:81:4f:1d:c3:0d:7a:4b:93: c3:7e:6a:a2:bc:d6:24:22:48:fd:9c:7b:eb:ef:97: ac:55:69:76:2d:9e:8f:90:6b:23:bb:c3:f0:4f:34: ca:09:6f:24:e3:6a:cd:a4:b5:c3:52:8f:6f:9a:fa: 21:6b:fc:cd:e3:25:83:65:e0:43:6d:37:c4:d7:19: 5d:6d:37:f3:54:8e:52:3b:5d:bf:76:a2:9a:82:f9: 6a:22:ea:3a:af:60:86:a4:d3:15:17:c9:0c:0f:3b: 23:df:ee:47:10:23:4c:6f:d8:66:ac:0e:aa:c7:6d: 85:87:d7:e7:bd:f8:e0:7b:b5:ee:74:41:c1:47:9a: 09:ef:09:6e:c1:0e:e9:af:fd:a7:95:4d:a8:92:94: 7c:af:49:22:71:b5:a2:e2:60:01:38:60:61:ea:26: a2:6f:83:81:3f:6f:a2:11:cf:98:db:ed:d0:18:26: 84:2a:10:41:cc:52:53:d8:a0:21:83:27:5f:4c:ef: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.206.0/24 IPv6: 2001:df6:ef00::/48 Signature Algorithm: sha256WithRSAEncryption 48:e5:31:1b:9e:d6:ff:a2:91:51:77:ca:06:a5:b0:6d:12:53: 47:c2:0a:30:9a:06:cc:cf:e6:c3:71:2c:3d:32:2e:3b:35:3c: 2d:f8:99:56:4b:22:1a:bf:45:fd:ac:2f:e4:d7:d5:93:86:3d: 3a:e1:32:a6:c9:51:f4:61:8b:d7:ae:41:95:5d:e3:c7:0c:e3: b1:b8:32:7c:f9:0e:50:56:78:a8:f6:fe:cc:26:26:64:8c:2d: be:a1:a7:28:cf:3f:9d:43:ef:11:99:5c:11:23:11:7a:f8:ae: 5b:6d:41:3a:e1:19:72:7f:06:de:dc:ad:e4:3d:9e:af:45:b0: 2d:0b:c5:3a:fe:c2:24:09:15:3d:62:57:55:92:ea:25:8d:fc: c0:cb:54:b7:4d:8a:21:54:a1:e0:dc:16:ae:2b:a7:73:57:0d: dd:70:bd:65:a8:a6:e1:85:39:da:af:f2:61:06:0e:e4:c3:32: a5:f5:d8:31:75:ce:0f:c7:b0:12:d7:d9:65:c0:6c:0a:e8:c6: 85:e4:2b:27:b6:81:40:ef:09:57:62:8d:b6:a3:72:12:1f:b3: 1d:a5:29:f8:66:83:47:43:c4:e9:98:7f:b9:e5:8e:84:69:3c: 5a:4b:51:97:db:1c:f1:38:4c:34:43:44:3a:5d:be:d6:2b:bf: 78:5b:57:fd -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUO9nSBE+DhYXijEkWXlLMDvaFbWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExMTE3MTcxNVoX DTI1MDEwOTE3MjIxNVowMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5 OTQ5NzQ5MjcyRkVGNjA1RjUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMipUD9Oi/aQ5aYsqwJjNt5+2HaMTAcKYAKSmIqbpOtsZB5d/yyXToxKRscB xe4i60zv5UJ3jocl8fIdZUYYZaB1n4FPHcMNekuTw35qorzWJCJI/Zx76++XrFVp di2ej5BrI7vD8E80yglvJONqzaS1w1KPb5r6IWv8zeMlg2XgQ203xNcZXW0381SO Ujtdv3aimoL5aiLqOq9ghqTTFRfJDA87I9/uRxAjTG/YZqwOqsdthYfX57344Hu1 7nRBwUeaCe8JbsEO6a/9p5VNqJKUfK9JInG1ouJgAThgYeomom+DgT9vohHPmNvt 0BgmhCoQQcxSU9igIYMnX0zvyckCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFUJujs2uOXICcCZSXSScv72BfUwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwYTM5MmRj LTJlNGUtNDc3MC04ZjY4LWJjNjFmODBiNzRhNy8wLzU1MDlCQTNCMzZCOEU1Qzgw OUMwOTk0OTc0OTI3MkZFRjYwNUY1MzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngs4wDwQCAAIwCQMHACABDfbvADANBgkqhkiG9w0BAQsFAAOCAQEASOUxG57W /6KRUXfKBqWwbRJTR8IKMJoGzM/mw3EsPTIuOzU8LfiZVksiGr9F/awv5NfVk4Y9 OuEypslR9GGL165BlV3jxwzjsbgyfPkOUFZ4qPb+zCYmZIwtvqGnKM8/nUPvEZlc ESMReviuW21BOuEZcn8G3tyt5D2er0WwLQvFOv7CJAkVPWJXVZLqJY38wMtUt02K IVSh4NwWriunc1cN3XC9Zaim4YU52q/yYQYO5MMypfXYMXXOD8ewEtfZZcBsCujG heQrJ7aBQO8JV2KNtqNyEh+zHaUp+GaDR0PE6Zh/ueWOhGk8WktRl9sc8ThMNENE Ol2+1iu/eFtX/Q== -----END CERTIFICATE-----Generated at Wed May 8 18:12:08 2024 by rpki-client on console-fra.rpki-client.org