$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer (raw, json) Hash identifier: u4mjCla5tUGmsQlICMVaVxGmOdPiUlbXeEqFgF/C/xI= Subject key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E821B3294605AB5A2C12BC53C06209F84541DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft caRepository: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 Nov 2023 08:30:32 +0000 Certificate not after: Fri 22 Nov 2024 08:35:32 +0000 Subordinate resources: IP: 103.54.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:82:1b:32:94:60:5a:b5:a2:c1:2b:c5:3c:06:20:9f:84:54:1d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 08:30:32 2023 GMT Not After : Nov 22 08:35:32 2024 GMT Subject: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:a1:89:0f:80:e6:b5:72:a3:cb:63:67:0d: ce:bc:f5:fe:e4:76:2a:fa:13:e7:3c:f8:e3:75:01: 9d:5e:88:5e:dc:79:b6:7c:20:20:27:43:39:42:e2: c9:72:c4:93:91:14:5c:16:ff:ae:00:35:ed:12:2e: 5c:3a:45:ef:b3:85:33:3f:bd:65:92:cf:d0:0f:c2: 05:22:a3:f7:da:1f:67:7d:a1:99:7b:24:54:87:d6: 39:d0:94:05:20:6d:78:f6:81:96:15:bd:a0:9a:de: e7:e1:8f:67:b4:f4:0f:11:86:96:26:69:ea:ce:50: 34:7e:19:47:00:50:d0:1a:5d:f8:4c:64:4a:07:9a: e4:b7:ad:48:d7:42:d6:6f:16:15:fa:03:db:97:dc: bd:72:f7:7a:ea:76:96:01:b7:8c:5e:5c:28:2c:58: 45:d5:dd:98:15:35:c0:87:85:0a:c5:91:bb:4b:de: 45:94:dd:3f:09:e7:aa:38:fb:2a:49:8b:e1:ee:4c: 27:6c:65:ac:b4:62:84:94:59:44:12:7a:0c:d3:74: 07:de:dc:3b:19:26:fd:d6:bb:bf:7b:8d:0b:69:1d: 08:f3:65:09:e5:fd:44:8b:a1:e2:38:1f:2e:58:b4: 54:e8:5a:fb:27:59:c6:75:b5:19:20:e4:a2:ee:0f: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.80.0/23 Signature Algorithm: sha256WithRSAEncryption 45:5c:8a:31:80:a6:25:72:2a:46:f9:b5:e8:54:e4:31:6a:7f: 57:b6:17:c1:30:e2:1e:02:1d:20:11:90:7d:49:75:5a:4a:cd: b7:0e:a0:0c:c2:68:c5:0e:b2:68:53:83:6c:9b:6a:0f:7c:1c: bf:02:29:97:57:7a:e7:2e:61:a7:89:f6:90:10:17:44:de:99: 3a:2d:5a:3a:5a:37:69:c4:35:aa:86:82:5e:1b:41:78:6a:0e: 8b:77:c8:85:ff:b7:5a:01:f1:42:bf:c8:58:97:01:58:27:5f: 23:26:a7:1e:14:0f:28:91:8f:42:ec:e6:ca:b1:9f:75:38:73: 7a:59:fa:be:be:fd:70:d5:31:1d:f3:13:fb:ba:09:1e:06:1c: 28:34:be:5d:34:dc:ee:c7:69:bc:6d:cc:cc:d6:bc:0a:2b:e1: 1d:36:30:a3:13:39:53:12:34:7a:bc:33:95:d9:e0:3c:ce:5a: ff:1d:23:9f:23:59:6b:07:c9:5c:5b:96:db:be:9b:2b:e9:a5: b2:b7:3f:88:91:c8:9f:ee:55:1c:66:25:b3:fd:21:b9:8c:90: 12:b4:23:ce:3b:80:e3:af:35:38:6b:9e:86:cc:9f:47:0e:e4: 74:62:23:3c:9a:f3:17:4d:d9:da:24:41:e8:83:f7:62:99:ec: 77:30:10:33 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfoIbMpRgWrWiwSvFPAYgn4RUHcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyNDA4MzAzMloX DTI0MTEyMjA4MzUzMlowMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1 NkFCQzNFNDY5RTU2RTBFOUQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5HoYkPgOa1cqPLY2cNzrz1/uR2KvoT5zz443UBnV6IXtx5tnwgICdDOULi yXLEk5EUXBb/rgA17RIuXDpF77OFMz+9ZZLP0A/CBSKj99ofZ32hmXskVIfWOdCU BSBtePaBlhW9oJre5+GPZ7T0DxGGliZp6s5QNH4ZRwBQ0Bpd+ExkSgea5LetSNdC 1m8WFfoD25fcvXL3eup2lgG3jF5cKCxYRdXdmBU1wIeFCsWRu0veRZTdPwnnqjj7 KkmL4e5MJ2xlrLRihJRZRBJ6DNN0B97cOxkm/da7v3uNC2kdCPNlCeX9RIuh4jgf Lli0VOha+ydZxnW1GSDkou4PQmkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNxQnoJX7FPhaVtWq8PkaeVuDp0ZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOTMwMmNl LTE3ZTktNDAzOS1iM2Y5LTk5NWU3ODY3MWMyNC8wL0RDNTA5RTgyNTdFQzUzRTE2 OTVCNTZBQkMzRTQ2OUU1NkUwRTlEMTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnNlAwDQYJKoZIhvcNAQELBQADggEBAEVcijGApiVyKkb5tehU5DFqf1e2F8Ew 4h4CHSARkH1JdVpKzbcOoAzCaMUOsmhTg2ybag98HL8CKZdXeucuYaeJ9pAQF0Te mTotWjpaN2nENaqGgl4bQXhqDot3yIX/t1oB8UK/yFiXAVgnXyMmpx4UDyiRj0Ls 5sqxn3U4c3pZ+r6+/XDVMR3zE/u6CR4GHCg0vl003O7HabxtzMzWvAor4R02MKMT OVMSNHq8M5XZ4DzOWv8dI58jWWsHyVxbltu+myvppbK3P4iRyJ/uVRxmJbP9IbmM kBK0I847gOOvNThrnobMn0cO5HRiIzya8xdN2dokQeiD92KZ7HcwEDM= -----END CERTIFICATE-----Generated at Wed May 8 18:12:21 2024 by rpki-client on console-fra.rpki-client.org