$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer (raw, json) Hash identifier: 1XrH6LVO9TgTdJP8w84n2T0P+v8qz2BQG5IU9xUwdh4= Subject key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 429245EDA280483FB285107354FD7E2AF47DAB89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft caRepository: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 29 Oct 2023 19:38:34 +0000 Certificate not after: Sun 27 Oct 2024 19:43:34 +0000 Subordinate resources: IP: 103.130.4.0/22 IP: 2403:adc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:92:45:ed:a2:80:48:3f:b2:85:10:73:54:fd:7e:2a:f4:7d:ab:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 19:38:34 2023 GMT Not After : Oct 27 19:43:34 2024 GMT Subject: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:be:d8:6b:bb:65:20:94:31:af:6e:7c:46: 24:81:2e:5a:f8:58:2f:3a:33:02:98:5a:60:bf:6b: c9:6d:c1:71:a7:21:f4:68:13:36:c2:33:94:ca:da: f2:4c:d6:ac:7b:dd:73:19:68:36:93:22:81:cc:f5: 4b:b9:d1:ae:4c:df:f8:4a:20:53:9a:2a:f7:b4:ef: 16:b2:c7:fb:61:9d:31:36:b5:ed:a0:3a:0d:53:f4: 75:41:39:02:f8:c1:e9:c4:44:f0:65:e1:d5:af:1a: 36:ce:c6:36:b6:b8:4f:e1:2c:2b:4d:7c:2f:94:78: 0c:76:cf:5a:b3:40:a1:b9:6b:7f:e1:d8:76:48:ea: a1:d3:91:04:37:56:97:9b:d9:0c:0c:a9:4e:76:b3: df:f4:02:61:6c:2e:97:90:0e:d5:cc:20:f3:38:88: d1:86:79:97:7a:fe:6c:51:e4:c7:75:9f:f4:d4:75: 02:7c:61:42:7b:63:4c:82:e4:3f:7a:8f:6a:ac:3a: 0a:d4:cd:9b:6b:67:07:04:fc:7a:18:4a:52:7a:fa: ae:ca:db:67:e2:a0:11:57:b2:2e:5b:61:c5:92:cb: 4c:95:11:a3:9b:f3:4c:73:b0:e3:46:c6:1a:ad:d8: 19:4a:38:64:7d:65:f0:4a:2c:1c:98:fa:c4:73:22: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.4.0/22 IPv6: 2403:adc0::/32 Signature Algorithm: sha256WithRSAEncryption 40:ff:24:79:8d:e4:5c:32:47:fc:f1:69:78:be:73:08:5a:7d: b8:f9:86:08:98:7f:9a:79:1b:11:cb:77:a2:df:f4:ee:37:de: f6:c9:dd:3a:0b:70:29:35:fc:48:96:61:6a:d7:f2:55:9c:03: 59:ad:79:af:14:17:75:bc:35:cb:22:a6:e7:a5:69:18:39:b3: c7:13:34:e8:c0:f4:46:04:46:cc:c1:01:e8:b8:bb:b0:09:a0: 8e:7f:60:d8:94:a5:9f:6f:d6:65:fc:1d:23:04:1f:1a:3a:32: 05:23:f5:16:d1:70:65:bf:fa:7b:3e:24:94:72:73:3a:47:a8: bf:e6:26:11:e7:8d:c3:0a:ca:b4:83:b2:72:67:45:34:ac:b1: 3a:90:bd:b2:1a:8f:03:eb:b4:95:e5:5a:48:6e:26:25:5d:16: bf:65:be:49:a6:3b:e8:7c:8f:ec:bc:46:df:ff:46:0a:03:8c: ec:f3:09:73:ac:5b:10:cf:a6:df:9e:e5:09:9c:bd:be:65:b5: 2f:ef:af:bb:27:0b:1d:4a:a0:8e:bd:57:01:77:60:bd:36:33: 1e:a7:fa:46:38:1a:46:12:29:5b:7c:0e:b7:8e:40:f9:5e:2f: bb:87:39:bd:0e:de:7a:ee:92:ce:cd:5d:b7:ad:6f:a7:49:88: 3d:aa:3b:69 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQpJF7aKASD+yhRBzVP1+KvR9q4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyOTE5MzgzNFoX DTI0MTAyNzE5NDMzNFowMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2 MEM3OUMwMkMxNkZDRTM4MTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLbvthru2UglDGvbnxGJIEuWvhYLzozAphaYL9ryW3Bcach9GgTNsIzlMra 8kzWrHvdcxloNpMigcz1S7nRrkzf+EogU5oq97TvFrLH+2GdMTa17aA6DVP0dUE5 AvjB6cRE8GXh1a8aNs7GNra4T+EsK018L5R4DHbPWrNAoblrf+HYdkjqodORBDdW l5vZDAypTnaz3/QCYWwul5AO1cwg8ziI0YZ5l3r+bFHkx3Wf9NR1AnxhQntjTILk P3qPaqw6CtTNm2tnBwT8ehhKUnr6rsrbZ+KgEVeyLlthxZLLTJURo5vzTHOw40bG Gq3YGUo4ZH1l8EosHJj6xHMijbMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXHpdVs7BMWz+Zgx5wCwW/OOBAqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWUwNjM2 LTFmZTItNGQzYi04YzM4LTJkYmI5OTE0ZTkxMy8wLzU1QzdBNUQ1NkNFQzEzMTZD RkU2NjBDNzlDMDJDMTZGQ0UzODEwMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnggQwDQQCAAIwBwMFACQDrcAwDQYJKoZIhvcNAQELBQADggEBAED/JHmN5Fwy R/zxaXi+cwhafbj5hgiYf5p5GxHLd6Lf9O433vbJ3ToLcCk1/EiWYWrX8lWcA1mt ea8UF3W8NcsipuelaRg5s8cTNOjA9EYERszBAei4u7AJoI5/YNiUpZ9v1mX8HSME Hxo6MgUj9RbRcGW/+ns+JJRyczpHqL/mJhHnjcMKyrSDsnJnRTSssTqQvbIajwPr tJXlWkhuJiVdFr9lvkmmO+h8j+y8Rt//RgoDjOzzCXOsWxDPpt+e5Qmcvb5ltS/v r7snCx1KoI69VwF3YL02Mx6n+kY4GkYSKVt8DreOQPleL7uHOb0O3nruks7NXbet b6dJiD2qO2k= -----END CERTIFICATE-----Generated at Wed May 8 09:50:30 2024 by rpki-client on console-fra.rpki-client.org