$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer (raw, json) Hash identifier: X/9NErfeBfyKdhOKxrCXRHlYRFah3YJ3+l1+JjOvoGA= Subject key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 055D9F0E634E9D0459158189440ADB3DDE5FFC08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft caRepository: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Mar 2024 16:18:14 +0000 Certificate not after: Wed 19 Mar 2025 16:23:14 +0000 Subordinate resources: IP: 103.71.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5d:9f:0e:63:4e:9d:04:59:15:81:89:44:0a:db:3d:de:5f:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 16:18:14 2024 GMT Not After : Mar 19 16:23:14 2025 GMT Subject: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1c:62:f1:57:24:81:5d:90:ac:23:cb:ac:ad: 6b:c3:a8:72:2f:29:1b:3e:94:52:d8:b8:ad:18:d9: 8c:a9:5c:4c:de:7b:bd:e6:ec:8c:10:17:df:4e:38: 08:a4:8d:2b:fc:36:cc:b5:db:4e:f6:fb:49:fe:59: 8b:51:e8:a8:6c:e4:b7:91:3f:6e:fe:4b:1e:7c:d5: 81:f3:1f:1b:f9:d5:35:fe:31:4d:b7:ce:3e:12:2a: 27:7f:79:12:60:34:a7:55:23:03:20:c0:1c:9e:5d: 43:b7:ca:33:7a:8c:98:a0:d9:25:f9:b5:14:09:1e: 78:b0:0e:8b:96:e5:b9:c9:91:e5:66:3c:74:c8:c7: ef:1f:c3:6c:8a:01:59:01:fd:f4:0c:7b:41:0c:89: 35:2d:e0:3e:48:43:d0:eb:37:8c:48:6b:0d:91:b2: 06:58:31:d3:c6:f5:fa:30:8e:7e:25:b8:aa:7b:fe: 74:e5:c0:ca:bb:52:31:9e:40:ff:00:1b:70:8f:c6: d3:ec:54:e8:26:89:16:bc:ee:cb:2e:d2:88:99:d1: 2c:9b:8f:c3:32:c9:98:81:9e:72:26:e6:c2:6f:43: fa:e7:48:b1:9a:e4:16:17:2b:d7:fb:57:e4:25:3a: 9b:f5:62:3f:79:2a:2d:41:b9:f7:ed:d9:fb:0a:f2: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.190.0/23 Signature Algorithm: sha256WithRSAEncryption 62:e3:5f:ef:55:c3:81:17:90:65:ba:66:39:81:bf:92:59:54: c7:aa:52:cc:d7:65:5a:1f:87:45:f2:50:8e:4b:49:f1:c5:6d: 19:fe:ed:5e:3e:d9:6a:9e:37:18:07:a0:57:6f:8a:1d:46:be: e2:05:d3:c2:a7:ac:7d:1a:02:77:ca:e1:ea:26:e5:32:9e:7b: 82:bf:fa:47:5a:8e:7e:b7:13:7c:44:3a:85:d3:e9:cf:4e:b2: b0:eb:57:df:bb:c8:82:7c:7e:a9:b8:da:d6:d9:1a:59:cc:0b: 8b:13:a3:80:c4:1f:52:2e:bb:14:0b:78:51:9f:cf:9a:13:d7: e5:31:91:83:44:6d:aa:e1:d2:93:f1:41:e4:4b:f7:0a:eb:6e: 5b:44:75:38:b4:12:6a:03:e1:64:37:39:d3:eb:99:a3:14:2b: 3c:6d:19:7d:59:f7:90:98:95:3a:b3:56:7f:e5:d5:74:db:ca: dd:46:47:4a:a4:1f:ee:89:01:5c:79:d4:76:d1:2c:f2:19:fd: c7:5e:66:f1:7a:81:99:2e:79:52:ef:8c:47:cb:94:d3:c6:c8: 72:22:20:20:de:1c:d0:c7:0d:f1:5f:34:a7:fe:0f:5d:6a:b5: 85:d3:a3:b9:8b:de:c1:6a:56:c2:d2:29:ad:9a:d1:7d:6a:52: 88:07:b3:7d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBV2fDmNOnQRZFYGJRArbPd5f/AgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMDE2MTgxNFoX DTI1MDMxOTE2MjMxNFowMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdE ODlDNDJBQzJGNjM5OUZCMTg1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwcYvFXJIFdkKwjy6yta8Ooci8pGz6UUti4rRjZjKlcTN57vebsjBAX3044 CKSNK/w2zLXbTvb7Sf5Zi1HoqGzkt5E/bv5LHnzVgfMfG/nVNf4xTbfOPhIqJ395 EmA0p1UjAyDAHJ5dQ7fKM3qMmKDZJfm1FAkeeLAOi5blucmR5WY8dMjH7x/DbIoB WQH99Ax7QQyJNS3gPkhD0Os3jEhrDZGyBlgx08b1+jCOfiW4qnv+dOXAyrtSMZ5A /wAbcI/G0+xU6CaJFrzuyy7SiJnRLJuPwzLJmIGecibmwm9D+udIsZrkFhcr1/tX 5CU6m/ViP3kqLUG59+3Z+wryDpUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFmxndHWRnk/XxfYnEKsL2OZ+xhUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMDQ4MDY0 LTg3ZGUtNGRlNy1iMGJkLTEyZmEwZGViOGUzMi8wLzU5QjE5REQxRDY0Njc5M0Y1 RjE3RDg5QzQyQUMyRjYzOTlGQjE4NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnR74wDQYJKoZIhvcNAQELBQADggEBAGLjX+9Vw4EXkGW6ZjmBv5JZVMeqUszX ZVofh0XyUI5LSfHFbRn+7V4+2WqeNxgHoFdvih1GvuIF08KnrH0aAnfK4eom5TKe e4K/+kdajn63E3xEOoXT6c9OsrDrV9+7yIJ8fqm42tbZGlnMC4sTo4DEH1IuuxQL eFGfz5oT1+UxkYNEbarh0pPxQeRL9wrrbltEdTi0EmoD4WQ3OdPrmaMUKzxtGX1Z 95CYlTqzVn/l1XTbyt1GR0qkH+6JAVx51HbRLPIZ/cdeZvF6gZkueVLvjEfLlNPG yHIiICDeHNDHDfFfNKf+D11qtYXTo7mL3sFqVsLSKa2a0X1qUogHs30= -----END CERTIFICATE-----Generated at Sat Apr 27 21:40:16 2024 by rpki-client on console-ams.rpki-client.org