$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.cer (raw, json) Hash identifier: rC0afhMhP0ZUhhZm0OnPbfZgprgL9y/167VuXFrLYd8= Subject key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6206CC76C6D80851F3AD508356D1105DB79B3B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Sep 2023 10:11:16 +0000 Certificate not after: Fri 06 Sep 2024 10:16:16 +0000 Subordinate resources: IP: 103.78.44.0/23 IP: 2001:df6:a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:cc:76:c6:d8:08:51:f3:ad:50:83:56:d1:10:5d:b7:9b:3b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 8 10:11:16 2023 GMT Not After : Sep 6 10:16:16 2024 GMT Subject: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:6e:68:dc:d3:05:ff:1d:fd:bf:7e:5d:10: 4d:4a:2e:a6:a0:82:06:6d:ab:8a:13:a0:72:77:69: a7:39:0c:66:57:e1:84:ff:1e:9e:ed:23:39:93:b7: 75:b8:e2:40:00:51:6f:ea:33:69:75:a7:ca:02:0c: 04:09:5e:9b:9f:d7:7d:76:e1:57:e1:ad:82:fe:0e: dc:e3:94:7c:26:fd:8d:0e:c0:ac:7b:4b:6d:6b:c5: 2a:d7:ed:93:0f:07:f9:ad:b5:2d:44:b9:bb:dd:cb: e8:3d:c7:1e:22:bc:a6:f0:86:cd:c2:7e:cd:03:02: a7:02:a3:79:a4:48:8a:8f:61:a1:16:fa:f4:06:dc: 7d:97:71:74:62:b5:7c:1f:4c:ab:20:10:1a:96:14: 00:05:33:4a:64:e2:8e:d9:28:55:54:2a:10:d9:b1: b0:54:f5:a8:4f:5c:65:54:36:d9:f6:13:50:f6:4f: 35:42:21:76:e4:7e:ec:cf:a7:8f:1d:69:41:5f:dc: 17:29:c7:cc:a6:d2:79:af:61:59:a5:2a:74:26:67: 72:1f:6a:bc:d1:9e:98:7d:89:92:5f:b9:2f:8d:19: 01:f3:0b:19:30:6b:21:6d:8b:cf:de:aa:90:9e:22: 3d:c5:e5:69:f7:78:9e:37:e9:cb:e2:82:c1:a4:92: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.44.0/23 IPv6: 2001:df6:a00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:09:5d:41:29:34:13:97:30:ff:a7:ef:c9:4a:21:77:e3:68: e9:89:73:79:f7:9f:50:2f:38:15:8b:98:0c:81:7f:43:a7:b7: b6:60:88:5c:03:da:73:91:25:4f:1c:c5:a4:c9:0e:6b:22:17: f9:7e:61:5f:06:d3:1d:b0:35:e2:1d:55:6a:cc:e5:a4:3a:18: c8:47:ac:df:2d:b4:40:65:63:f8:a4:ec:6f:56:50:8c:8e:63: 9d:f2:b2:88:7e:b9:f8:31:be:a7:12:d8:b2:4a:03:08:96:b6: 41:ca:57:67:e3:a9:78:90:a8:b0:bf:1b:f2:fb:e0:c6:af:ac: 1b:ea:28:42:29:05:e9:27:87:bf:cc:22:c0:05:0c:77:6c:3e: 51:dc:31:76:08:de:4d:31:e3:6e:a6:b7:92:ab:dc:fd:e6:75: 3c:d7:89:42:f1:9a:15:84:ac:4f:94:f9:72:ad:19:6b:2a:2d: b3:04:3e:78:c0:d9:dd:64:ef:a2:8c:de:c8:4d:e8:d7:95:38: dc:3b:97:37:f6:0f:88:d5:1f:2a:8a:7f:ef:41:e8:03:2e:35: da:82:57:d2:22:0e:57:54:23:dd:b9:5f:4f:e7:aa:c7:22:bd: a5:11:3e:86:e7:e7:fe:37:4b:88:31:a7:dc:37:d7:8f:c9:b1: bc:a5:cb:d2 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUYgbMdsbYCFHzrVCDVtEQXbebO40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwODEwMTExNloX DTI0MDkwNjEwMTYxNlowMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3 QzYwQzgwNEY2NkVCNjU5MUNBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+Sbmjc0wX/Hf2/fl0QTUoupqCCBm2rihOgcndppzkMZlfhhP8enu0jOZO3 dbjiQABRb+ozaXWnygIMBAlem5/XfXbhV+Gtgv4O3OOUfCb9jQ7ArHtLbWvFKtft kw8H+a21LUS5u93L6D3HHiK8pvCGzcJ+zQMCpwKjeaRIio9hoRb69AbcfZdxdGK1 fB9MqyAQGpYUAAUzSmTijtkoVVQqENmxsFT1qE9cZVQ22fYTUPZPNUIhduR+7M+n jx1pQV/cFynHzKbSea9hWaUqdCZnch9qvNGemH2Jkl+5L40ZAfMLGTBrIW2Lz96q kJ4iPcXlafd4njfpy+KCwaSSR6MCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBJZ/pHSFhDUukh8YMgE9m62WRyoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjOTA5NzM3 LTE1NjQtNDZjYS05MDA5LThkMjhhNTZlOThlZS8wLzEyNTlGRTkxRDIxNjEwRDRC QTQ4N0M2MEM4MDRGNjZFQjY1OTFDQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnTiwwDwQCAAIwCQMHACABDfYKADANBgkqhkiG9w0BAQsFAAOCAQEADwldQSk0 E5cw/6fvyUohd+No6YlzefefUC84FYuYDIF/Q6e3tmCIXAPac5ElTxzFpMkOayIX +X5hXwbTHbA14h1VaszlpDoYyEes3y20QGVj+KTsb1ZQjI5jnfKyiH65+DG+pxLY skoDCJa2QcpXZ+OpeJCosL8b8vvgxq+sG+ooQikF6SeHv8wiwAUMd2w+Udwxdgje TTHjbqa3kqvc/eZ1PNeJQvGaFYSsT5T5cq0ZayotswQ+eMDZ3WTvoozeyE3o15U4 3DuXN/YPiNUfKop/70HoAy412oJX0iIOV1Qj3blfT+eqxyK9pRE+hufn/jdLiDGn 3DfXj8mxvKXL0g== -----END CERTIFICATE-----Generated at Wed May 8 21:02:09 2024 by rpki-client on console-fra.rpki-client.org